last executing test programs: 2m12.897600706s ago: executing program 4 (id=1535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0003000000000000540012800b0001006272696467650000440002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c001e00a00000000000000008001b00fbffffff"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000008000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="082b97309887baeb2b183693ac28623d26084a24fa7557efe26672bf9584", 0x1e}, {&(0x7f00000001c0)="0871ad116e6597992f375dccc88abfa3e9e87d", 0x13}, {&(0x7f0000000280)="a0483027aecf7a9769f2a9e728e6166679249a496d616d1d83fcffa59507174717eb6d9eef68ce7b689e5ce54f11353f3e468178330c3bcd131136fdd6d474876dd091d93e10c3ec5ad445086d7ce7", 0x4f}, {&(0x7f0000000300)="7e72bd97cdf3a87e2c49fbdad983706f6ad51463c19204d6fc3ce24dbcc4471917dddaa38cb5aa4e577ce32943879f", 0x2f}], 0x4, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x80}, 0x84) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x6, 0x7fff, 0xb, "99212c0155b6056ee613657266ec62b016d5a9"}) 2m12.707485422s ago: executing program 4 (id=1536): ioperm(0x2273fc89, 0x8, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", "0f9dafb4", "ffffffffffffffff"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) futex(0x0, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d3000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000000100000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000"], 0x30}}, 0x4090) 2m12.668469994s ago: executing program 4 (id=1538): lsm_get_self_attr(0x67, &(0x7f0000000080)={0x0, 0x0, 0xdc, 0xbc, ""/188}, &(0x7f0000000180)=0xdc, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1800038004000180"], 0x38}}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000300)) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) lsm_get_self_attr(0x69, &(0x7f0000000540)={0x0, 0x0, 0xf1, 0xd1, ""/209}, &(0x7f0000000640)=0xf1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c6176655f3000001c0016801800018014000a000300000000000000020000000000000005001100d6000000"], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x4000040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c5e00000d0a010300000000000000000a0000010900020073797a3100000000090001007379d97a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TCXONC(r7, 0x540a, 0x1) 2m11.762252603s ago: executing program 4 (id=1549): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x2c020400) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x0, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003640)=[{{&(0x7f0000000140)=@sco, 0x0, &(0x7f0000003500)=[{&(0x7f0000000680)=""/255}, {&(0x7f0000000c00)=""/49}, {&(0x7f0000001340)=""/4096}, {&(0x7f0000002340)=""/14}, {&(0x7f0000002380)=""/224}, {&(0x7f0000002480)=""/105}, {&(0x7f0000002500)=""/4096}], 0x0, &(0x7f0000003580)=""/106}, 0x8000}, {{0x0, 0x0, &(0x7f0000003600)}, 0xbb}], 0x59, 0x10002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010001f8ffffffb7b703000000000000850000000600000095", @ANYRESOCT=r5, @ANYRES64=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000c40)=ANY=[@ANYRES32=r6, @ANYRESHEX=r3, @ANYRES8=r8, @ANYBLOB="8b19c0567b5299b75aad17090b9adfbadde6c10490bbc1e2b62fe925454135e05c66ac94a5809c00aa44929be64c1480d360e1521f", @ANYBLOB="4f935426863ae35e889f964f97ea31b2d6a31a94932e86f9c7443f622f2823d6c881aae460aea6db59150a58a32e58ab579d29fcbd0e3a36"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0xc}, 0x110465, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m10.917175241s ago: executing program 4 (id=1560): r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x24, 0x1bbf}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x45, 0x7b4, &(0x7f0000000280)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r5 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pause() ioctl$int_in(0xffffffffffffffff, 0x7e7b, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 2m10.819245984s ago: executing program 4 (id=1562): inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000d8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) connect(r1, &(0x7f0000000200)=@can={0x1d, r3}, 0x80) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 2m10.799737914s ago: executing program 32 (id=1562): inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000d8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) connect(r1, &(0x7f0000000200)=@can={0x1d, r3}, 0x80) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 1m21.882182794s ago: executing program 0 (id=2015): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000a002000000000000005fc7508001700ffffffff08000600fb7f000006001580fc4dfc5bbc8f87e2a2cedba8386faf58f04d6ebfff70bbbf2ad1a524c206d19ec3eeb3ec590c1c5a213eaa769baed5801c1084d0757a38a12ad32fd76a9e845148fb5341478153f832f68c9f59613dfa59f8385ae7"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x40010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r2, 0x2, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback={0xfc}, 0xb578}}}, 0x84) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x128, 0x1170, 0x1170, 0x0, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x5}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x2}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x9, 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffdb}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m21.029911382s ago: executing program 0 (id=2019): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) epoll_create(0x200) 1m20.77173743s ago: executing program 0 (id=2024): socket$inet6(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2, 0x184) bind$tipc(r0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x78}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01c0a3a13aeb5fd1180000000800000000000000adf4e80900000073119c00000000b1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000023c0)={0xd34, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c", 0x2c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000340)={[{@nodioread_nolock}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@noload}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x0, 0x495, &(0x7f0000000ec0)="$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") 1m20.315354725s ago: executing program 0 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000073269c8100000000000000000000000000fc7b0d771904300a4591d8dd85a34ea73ecc9aaf902d64716888824597f877cba42501c71e1d4c08b022c063f1a627fe2ae4602cbcc7daac79e1134d91b72c98"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106228, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x4734}}, 0x10) close_range(r6, r6, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x897ce8, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x86}, &(0x7f0000000100)=0x90) 1m18.832729393s ago: executing program 0 (id=2031): socket$inet(0x2, 0x6, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x53, 0x11, 0x4, 0x9, 0x3fb, 0x0, 0x0, 'syz0\x00'}) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rename(&(0x7f0000000440)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x1, 0x43a1bd76, 0x5, 0x8, 0xa48, 0x2, 0x0, 0x0, 0x0, 0x6e13}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61, 0x2, 0x2, 0x3}, {0x6, 0x0, 0x2}]}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe800000000000000000000000000005000000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000004340), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf254b00000008000300feffff7f0e00010004c98cbda084823bc8026e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1m18.594195181s ago: executing program 0 (id=2035): r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x24, 0x1bbf}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x45, 0x7b4, &(0x7f0000000280)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pause() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x7e7b, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 1m18.593922311s ago: executing program 33 (id=2035): r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x24, 0x1bbf}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x45, 0x7b4, &(0x7f0000000280)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pause() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x7e7b, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 9.706401296s ago: executing program 1 (id=2405): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x64a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x3c, 0x0, &(0x7f0000000280)="b9ffff076c04ff0f989e030000007b9495e5495129dd8b0763466eab7fdade11f2d532c8c5bdaa9a5201d691ec412579aeabab864cfc6dc746792a9c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.251702986s ago: executing program 5 (id=2422): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x219, {{0xa, 0x2, 0xffffffff, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x22}}}}, 0x108) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESHEX=r1], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7, 0x15, "b0bf2ebb48c855ac0007000200bf0200"}) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x12) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) r2 = socket$kcm(0x10, 0x2, 0x4) sync_file_range(r2, 0x9, 0x7fff, 0x5) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) 7.09876331s ago: executing program 2 (id=2423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f00000016c0)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@errors_continue}, {@grpjquota, 0x2e}, {@noload}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x90, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r3, 0x0, 0x80000000) 6.310210066s ago: executing program 5 (id=2427): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000440)}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000400)=0xc, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) futex_waitv(&(0x7f0000001ac0)=[{0xfffffffffffffffd, &(0x7f0000000000)=0x1, 0x2}, {0x5ab, &(0x7f00000000c0)=0x8000, 0x2}, {0x8000000000000001, &(0x7f0000000680)=0x3, 0x82}, {0x7ff, &(0x7f00000006c0), 0x2}, {0x3, &(0x7f0000000700)=0xb8, 0x2}, {0x1, &(0x7f0000000740)=0x2, 0x2}, {0x0, &(0x7f0000000780)=0x5, 0x82}, {0x7, &(0x7f00000007c0)=0x3, 0x2}, {0x8, &(0x7f0000000800)=0xfffffffffffffff7, 0x82}, {0x7, &(0x7f0000000840)=0x6, 0x82}, {0x8, &(0x7f0000000880)=0xae1, 0x2}, {0xf, &(0x7f00000008c0)=0x4, 0x2}, {0x7fff, &(0x7f0000000980)=0x2, 0x82}, {0x6, 0x0}, {0x3, &(0x7f0000000a00)=0xee9, 0x82}, {0xff, &(0x7f0000000a40)=0x3, 0x82}, {0x3c32, &(0x7f0000000a80)=0x6, 0x82}, {0xc, &(0x7f0000000ac0)=0x8, 0x82}, {0xe800000000000000, &(0x7f0000000b00)=0x1, 0x2}, {0x6, &(0x7f0000000b40)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000000bc0), 0x2}, {0x8, &(0x7f0000002740)=0x1, 0x2}, {0x3, 0x0, 0x2}, {0x2, &(0x7f0000000cc0)=0x3, 0x82}, {0x8001, &(0x7f0000000d00)=0x4e58, 0x2}, {0x0, &(0x7f0000000d40)=0x8, 0x82}, {0x2, &(0x7f0000000dc0)=0x1e, 0x82}, {0x3a, &(0x7f0000000e00)=0x4, 0x2}, {0xbbb, &(0x7f0000000e40)=0x80000001, 0x82}, {0x1, &(0x7f0000000e80)=0x100000001, 0x82}, {0x1000e5, &(0x7f0000000ec0)=0x5, 0x82}, {0x1000000000000005, &(0x7f0000000f00), 0x2}, {0x0, &(0x7f0000000f40)=0x8, 0x82}, {0x0, &(0x7f0000000f80)=0xffffffffffffffff, 0x82}, {0x9, &(0x7f0000000fc0)=0x4, 0x2}, {0x7f, &(0x7f0000001000)=0x6, 0x82}, {0x80000000, &(0x7f0000001040)=0x5, 0x82}, {0x8, &(0x7f0000001080)=0x2, 0x2}, {0xfff, &(0x7f00000010c0)=0x5, 0x82}, {0x9, &(0x7f0000001100)=0x3, 0x2}, {0xa4, &(0x7f0000001140)=0x2, 0x2}, {0x3, &(0x7f0000001180)=0x8, 0x82}, {0x7, &(0x7f00000011c0)}, {0x2, &(0x7f0000001200)=0x4, 0x2}, {0x8, &(0x7f0000001240)=0x38, 0x2}, {0x200, &(0x7f0000001280)=0xffffffffffffffff, 0x82}, {0x2, &(0x7f00000012c0)=0x2a, 0x82}, {0x3cb, &(0x7f0000001300)=0xff, 0x2}, {0x3, &(0x7f0000001340)=0x2fa, 0x2}, {0xa, &(0x7f0000001380)=0x1, 0x2}, {0x3, &(0x7f00000013c0)=0x10000}, {0x2, &(0x7f0000001400)=0x5, 0x82}, {0x8001, &(0x7f0000001440)=0x8000, 0x82}, {0x5, &(0x7f0000001480), 0x2}, {0x2ddb2a85, &(0x7f00000014c0)=0x9, 0x82}, {0x7, &(0x7f0000001500)=0x4, 0x2}, {0x8, &(0x7f0000001580)=0x101, 0x2}, {0x1000000, 0x0}, {0xfffffffffffffff8, 0x0, 0x82}, {0xffffffffffffff00, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x41}, {0x40, 0x0, 0x2}], 0x40, 0x0, &(0x7f00000022c0)={0x77359400}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r7, 0x0) read(r7, &(0x7f0000001400)=""/4096, 0x1000) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x1, 0x21}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 5.759335124s ago: executing program 3 (id=2429): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005500e50127bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010100af"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x220, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x104}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x200, 0x1) getdents64(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.895324432s ago: executing program 3 (id=2431): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, &(0x7f0000000100), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@can_delroute={0x84, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "53b34471cd1eb2e1"}, 0x5}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x1, 0x0, 0x0, "b52f635f61acd9c3"}, 0x3}}, @CGW_SRC_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1}, 0x1, 0x0, 0x0, 0x0, "498c3bcf9426380f"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "8a8724382b84f97d"}, 0x5}}]}, 0x84}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="38002f800c0002000000000000000000080001"], 0x54}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 4.825176214s ago: executing program 6 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="aefdda9d240303005a90f57f07703aeff0f64e99ee", 0x15}, {&(0x7f0000000540)="7d8b8f2627120ea6817c7da80a930092e094ca1248ffbb7f897bbf240e6b282d84fe4e30e95929e705115661c8bd1c29a7f471b9a0a7ec893ab0ef89493c263cdd85788f28f7088a62169a9ecf1483f4c76abe611ba93707a35042", 0x5b}, {&(0x7f00000006c0)}], 0x3) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) 4.731305197s ago: executing program 1 (id=2433): semop(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8}) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x9, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="2400000003000000", @ANYRES32, @ANYBLOB="bcb355ac13684bc9016db9af491e444aa7db9f1088d47634a627518fe9c948242c85d4166c51bd814eb06b3133bc4b1b9768a12919c629344449414d93dd734f881c10b8efd5a81870fb6c3fa9d4560dabaf57dd3f118ad909db87bff71406520c39048bae002cea3f39dd6a22761a3c25eb6360c5a035a9ed788c4c996ce9", @ANYRES32, @ANYBLOB, @ANYRES64=r1], 0x20) r2 = socket$kcm(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r3, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3100000001000000fbba9a8ba423718d609edc724bb694b218437673f608d97d81d772b3fa9d03b2246f38eafb1e415636b960ca0c4dc0155ff4f0af10f51b428c91ae0e12472de27f3a2696257d6840fbb79e7766bc8aea0f68d59338712d38df5c299395d4b18c4dcebf93d6754e2d8677e0", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r1], 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000000f100000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000900000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001014010029bd7000fedbdf2508004b0013001f000800030001000000080001000000000008004c000008000008004a"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 4.395913177s ago: executing program 1 (id=2434): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x15}, 0x0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r2, 0xf7fb6818eeda6d45, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x440c0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "102dab", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [], "2498a9ecba66320d"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15b04f38}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.32627585s ago: executing program 5 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x57b, &(0x7f0000000200)="$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") perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x9}, 0x1112, 0x2, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = accept(r2, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000018f738096304"}) r7 = syz_open_pts(r6, 0x80) r8 = dup3(r7, r6, 0x80000) read(r8, &(0x7f0000000680)=""/213, 0xd5) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0x8001, 0x5, 0x0, 0xffffffff, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) r9 = accept4$unix(r4, &(0x7f0000000240)=@abs, &(0x7f0000000380)=0x6e, 0x100000) sendmsg$unix(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="0c2dfb8242efba563251745ee2975437a5cf594e738b9eafd95a071158c1776e071767dcf9bd04ee1c8eca1cd394fb17597f32aaeda868184e72f96710e5c0", 0x3f}, {&(0x7f0000000500)="7d3027b82c5b45b8c2a052c071f6a712301e249a1d9053816156ce590e8c2b15f4e37c5432fe0b1fa845993275a5e87a5497999cae51525cc6b4a27c4ba7367d137c75cf49cfbd36dd07cf40e53b8f3ec2e958780de66ca95e0dc6332f681c29859a9fb9cebeb9e5dccc93df54b449ab40317d9ae23015e0c605736a31e44c52f61cd2fa8a2d3983a32e343402b54ba3b33c54673e9863a6012551e7dbb79e40d2129f6c76bdd639f221734f717947dd9567301a46c1809f8dd53a58c5dd2c42267dcc8a78069030c9d56b3d4789d785973054e5d1b0b25d4bd81890b65c678341012dcef3a41226b74c9dd26ab3", 0xee}, {&(0x7f0000000680)="86eab2e3b8454eafd6aabb437adde3ddc4ccfc1d961c91a73838041cc459f2038c8a62698d6dbaffdc74f1c86ac20de0f5b294b54f42a395bfaf1e3f14a953c98c84ec1e116cc2c18ff03141f9a2706b700ac1e8048edfd22980dccc726704", 0x5f}, {&(0x7f0000000700)="9235d75f8ab48f22c5e4636d15417b096733d47c4e495cb6ae21816c0d506f8de033a4bb24b3f22674ae0d48b61d21c8b3bf105d62ed1b78a88503e9726010168d526c91b46b294de17259978e06aab8f2520adff14d6568c251a1e0c5f9e369c1dc0db7c12685ed992f14b9adbec41cb8c7c54c53cf8dfb14a548a64418c9502c8c00a4d9584925eb09540b902ff19581808f53b49c44a38e4b4b819faa4cf7306a1a55303adbae", 0xa8}, {&(0x7f00000007c0)="f0589758ee0f05520df0e5e93f4ec061360965958d846a2255bb45f16d774328f25475467c45b99bdfe219e274c8286e391c5b538151448eaa49b4ed80278d472c102fc34989da3ba037de9424eb489b79d51a581972d937", 0x58}, {&(0x7f0000000840)="e30f4191f061e5354680d5ee7a90222b064f93bb8c759e34651527f88755dda517b5c43a4c9660f1cdc3c0de3fc3636a4d259c1997879c4eb7bd7605126d23169098c34fbc80fc", 0x47}, {&(0x7f00000008c0)="605d10a36ebc3b69321d02985a785f22c6d8bfb33dfe1398972b6eca665f989c387f96f3938db965424d79bff9de3b5ffee9dca5135942f82df8f19b9d60eac3db59c68447088c7d27a154f8becd8358d41ae43654d9ee2c7e46ea8b53b149b86ded40544752ae2a20c1393685c0c87335d186f29ac52042042ceda35d86321f068bfb531e91b02eb5011bae8a85ca2c4df56bf92aba31722b2590f27a1d892275f656b4619552c0eada63678b971a752d421f894f0e894f6765267f5699e7543708f5c81ec07fe72b06eae36471c0a9ea635b358ffea0f818fd7e995594e6fa", 0xe0}, {&(0x7f00000009c0)="2aeb9d5536f4d9e3a060ed75b9e2d24b0184f35a7e6795bc07f30d5879a57b93f1404d976d6536b7c09fc597681538bc9a57fdde004d958b17dad5", 0x3b}], 0x8, &(0x7f0000000a80), 0x0, 0x10}, 0x4000001) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x0) 4.266265582s ago: executing program 1 (id=2436): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000240)={r3, 0x0, 0x400, &(0x7f0000000140)={@_ha_fsid={[0x0, 0x8]}, {0x8000, 0x8, 0x1, 0x57}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0x0, {{0xa, 0x4, 0x2, 0x2, 0x28, 0x67, 0x0, 0x10, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xda, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x60b2}, {@multicast1, 0xa}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r5, 0x20, &(0x7f0000000880)={&(0x7f00000006c0)=""/177, 0xb1, 0x0, &(0x7f0000000780)=""/207, 0xcf}}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) socket(0x10, 0x3, 0x0) 3.368790721s ago: executing program 5 (id=2437): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040851}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x100cf4933d6a9b80, '\x00', 0x0, @fallback=0x20}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.687705053s ago: executing program 3 (id=2438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x38f9, 0x0) ioctl$TCSETSF(r5, 0x5404, 0x0) ptrace$cont(0x1f, 0x0, 0x245, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010007000000000004000500000000001000030008000000"], 0x24, 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x680082, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e103000000000000000000000000000000000000000000000000002ccceb002f7f2c0396b9f987d98fee745c478ac54aa9060c3fa58b4a543c6052e49cb7847429fe834f715f2107a739ce2b3b558ad38b831a21bc9761f98019d871bcf3179fd412b7e49fe53508680ecc9f74d1bbf90e9c1f8b870c3f636cf790866d7862cab5257b7fe95b54bcb5d715d210472ed567caad44a51a3d99e395acc0f07bbc23e48cc31044f8fa9d3e2556ce9f39814d2b5ec1699097e7a6872d63b2a513941608afa7c773ccdf7978e018617f6ce01e00000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000005700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x28, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.626453985s ago: executing program 6 (id=2439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004c9fb465a2e9339f90deca47c04912564474b8bf1dd3340d3b06b7d5ff34b98a632a66b256910b8a7675e64a3093ebdd104295df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff85000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033c100009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x3d, r0, {0x5}}, './file1\x00'}) open(&(0x7f00000001c0)='./file1\x00', 0x4040, 0xd7) 2.553054527s ago: executing program 6 (id=2440): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x40010) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x4a) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x50, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) openat(r1, &(0x7f00000000c0)='.\x00', 0x8000, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2.529080958s ago: executing program 6 (id=2441): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000001bc0)={0x8, {"4eca3ecc5c664f5cd9ce2f3f6e2ad9153c659c9902f1f0ff44b271fab2802fc895016ff6f1de4a35614aad246f5ac9b0c5e7ac4d27fae87a2cb9ce141c81d327109b5568c100d4c068472f2e90d67915290b1faf83c56e09e5b0bb65e81dd6803db77413493f6e70113d4801f5fcfaf81ef79c488319057a7e1966ab46321e34b280b24ef3f010d20e5f8995a1cd7e84e530c4836a908fc409b671c142747cfc15795c6bb73c520a4391335370af4f46bccfbdef9293073c44a2c4f18c35f224cf68a2d80410080f076e7e6d18ca5d6009d4c4df98a16ccebb3e8575fc230542311808a9a05a6fafacef247e7c2a55ae86d339862d69ca5d0734ecb0d38b191e188d97ce47c9e4ddc5079ce9cabeb4aa43765eb21e4d8a7ee5d536d958ceb16bc3f9aa8b402023661ac6ae442f10f44b9705bf3c2057201df1168c7263d51258badc5419a4c50e9527db0a611357823f756273b3c886b5271e80619b1d760d21ebccfea3974b46b762a6339eaf5f2a790949e5c5a407a68ed6eadf7ea95d12c653005cccdad3afd49e3e896f3fecf9708a120a52dd82d4028bd58530ec8d3dbd43bee8cd31ec8bd42968888ac7093ebb000c64f4a6613da4f8e60b0e8dd1a421276927bb8620505b7de3ca2b2332570cbc86837a5fbfe47a42ab070182a5aae8d0f088091f3b522b509479ef728819f4d79a7aa52437d527691059124d2665b8fbfac09794c8df97112e20d7bd48c288a92f3375d053aca5ef1a106c0201b118f5c3958d6cbc5b3d76c80d0357d22d6a43def57405ab728cf514a4c34210eb3aa2e697852a156bd0b90e912d88fd260ca7078adc60ece9a6ac9a82a59b37ead009b32fcf1a18e38ff54dbfd0c6f68b4a8788650094884b8a6ad4a1e51fdf27c07b793fd7a4ee3d08d8830f4fd9720dd8adff4d84c6c24ddb8d6c52a6f11314090cdf7acc53b2423d4abb03160765a267c9626e6c939ff67085e5ce70a89d8a7c737420ae3315d24ee141e8000b88c9c319c4b2abd58b9bce75e48e115e42670a8c6ed4776b7092f2dacb41a8cf002a8f199473f299af005be2c255bb63ef842f6e340531e2764218b89c63cac29d6d2187b9ea532a9c04243ad61fad0caf6c92f04c083886d963b4146d8729366061baecb9a22e2ed98b167cfc3e0a265c155e824b8795ce745a1f7b199320ed97bf710edc6cc4eff4737204a5bf65b8a21c3f9a3fd5d1a545c9afad49834d6350e22d4768664d1ca596c9642c27189f78624e433213a621b8ef66511818d0f6142abec53bb55f2ec40b2e1e64f67324ebcac7b40219f24ad55875b697cd65fd7352896c7f93435309d960bdac57218c14878e33c70506b8d9575917b8847ed0d31793c6583ac4b6daa3a839c1bf915e1e4e1cc375908d7e845f390cfe53cefd57b2f11d97c1b1f93f731ec760fb2d360cbe6e4e0262a4df24832ac46b4d1dc5a2aa843bd228ac931f1b3affc4abf19b67be958aaf7570747af88108040143e064bb281873c768f76a53a55f1b6f09cfe14832aa74c2c2698105dbabf5ebb0924051ecf8fdf1abcda49cc430d52ce1475250ba6ccf73008dcf8b85a0257d7cad7b2ac66fceb4a52451ebb8c9beb5854e1468d7f1ddf6d30a77e30d91712f7eebcce2a52c39a619529344e47bf5dc5ae1e14fcda45dc0df759994c53cb0927f714af872ce3ede7adf347b040f393c699de7445c3d9c4eae5b3698cfae7d7c1d18175f0f1699c79a8e0364c12db89da35df893920d052fdeb2f3e27c2c481099046bf6fc1c11fa564fcc60eda65fa444e11161bed1986315633b7dbdd9cb760293d87387d1bd6ef544d695090f93dcf5ba4f1f1ef95c805cc1666dfc7be7c5b67a652ad8593d5a4afb0f486d6696155f86476e4897edea32d88a5d2d70a1c43e0afa7162c61e675c7169dde89e01b14f9f1770bf20fe2ed42210bc5561949fef7eb473d77456239d9c92f3c55bc0d38a2b1a0e1a1277063b7f8706ff2551e8ece5b0cf5591940b24ac958e5f0acf7b56db002b65f1b4cf758dadb2c0fe0e16c9f2a1535da91022b0d3e90c996bfb154b218d8a92b1a41084bfa8e3294e9386a0b980158bc4a4ea6a54f200fdfcd5951c967a66a3412a40e8527e6ab5da458993b888b658cdc3655da3be2101e022bc3484ce32abff3504442ca841178574c5a2b7339bcd3d65dbb71e3d9c3a6931ec03171a67a74fd6c326cf9c2facc19311adc8d1e3e57633203636640fa7be3b7823d5c881ee4ee9cad9ce5b49556cb96513b738398be0599ee4724ca8258d6ccefa4bc868bf6429c24781f594a153eb1e76f24a9bac9249aac2f43d4abc190d853b563d4afe86e9c697189514fbca5d04b3eee743268edadffea5d22c661a945bb7cd2ee27aca545675a6b2713955f6800d972dec2462e3609d192971e2952aef5d1c425cbf2c1c11af7f5f6eadbee878c3c64c53f961654a34d6aa61ade80318d5b522580669bb77f4e237ff916e2b5481e8782093dce743927c9662e5abb7a06a7507565bb68ea2daf737835eb173a12d7f7c4001eaddafe378a8ad5150c2de638afc90d9698c1436eeb70d4ab8e64e051a77297d401671522a335e5c645e376fa55b64f0eba612d32919e03befcfd47c8fcbc59dff48401aa52f49f0b510fe462518f70a23436e0220ef0a82f0036f61d3be50397cd31f071d16fea33430e0d9c61168950813a56b28623ac6a3dfc3ffa08015a33ce133c2a760027a92e0bd8afa5d30db13790cb88902ff9d07ded365b23e91a99831b1c7df839a0f3a0745202507ec0d2291b782add67ed37735196e12901ad0164fbaae427224c96e9173a4ded466667167a0c9bcdca987ffd0effe868477e99a74df248a70970961ea822f8114de1147ac5cd03f2f5761f3c180930cc965ff6cd83e76c403d1ee5ac7bec3bb0a0ff2a6fa626e8c5cd1fbe4d76298e39f88557d53f66828eeb409204e02e57f811a6ba881ffc3d094e939a2edf2eff75bb431b35004b5914b1ac15eac03584bc277c5d3038d6dc2e746ce647ab3b67ac0e5356ffffb8d40bc2a74b4dd06877c3a669f1040f9eea44cc2bf3646dda9aaa9f7dfc9294adcd03709f9021c0298c8226f638d06ba021ef1b66e34f7f374c333e91034b25d7f0532278c0ad5d91e2e1afef5d35b7832bc7325eefa597e386ac0b37f56cd53acc0f79298e0fc7070ab5c8fa1b9dce7d243566eee267245628c21fbf4415066469be842c41c5a88bd2d69fe413ef0ea85d6fba9ed00e1f8195c6e3840f5a84975fab112ec8ce31f9dd66889911c7e87bdd632b08fd7d28a840f0f047058f02e3819ed0ab9fefdad17ba3ba5f110f448d99f2880233574cfeb5e9f15f752eb137b5a337a94f0435867f74db76ac0562bfbec15a9cc3400da83d58cc361a282e706156f38979043dd3db20a994fc18336e9454d07e25b03e221fea6b8a7b68192232202a9261e6db583050f99e385dbfc74f5b173f9c8d69991648ec06eacce20603167e16b7f323e198cbb3e0d54a3b57d6e0fb418907937addd7f547bc8f2629548bb17591edb324449d356bc92fb397c0efbbe3577a4fc11f1c000cb83ed9f8e3346d100cfe3fd3fc0bcfd0f6d4d09ef499b8649a3efc03afcbe139673f0b8c909700be4f445021d21497b5bd1ad2af64c79848921a551312df0389fe1d62cca30fafc1e214b766959757675d8f9baeb15c374098aeefb349c32254066ef18d2493732e10db7a350003cb15ca3afbc52aab1946d5571d664315c4d2342ffcdefffbe040393f2c3958de47e6a5b05f17362e76b1c6ff3dbc1dc3a5f17a3b8ec5ed8f95727315de862a319116028b54562b80b3c4b14105daddfb9414d348a908ebf1073d1a5cc2fe554db539372393be347783546e532e8b9da72f0ae0c4f31f53a988369f69701b4e8431e65bbc2e106e20b7a4da0fc84dded41b21fe5dcd70ab417f4c0527a3dc53360248ed13defbd80e9b405f8c258c173a9cc31c2cbcd0e217128901f7c0dee54fab4e7f2ec22753d2e5e053d727d6cddd5c8d2282559ebeede1164859216fc8ebc91f17bc9a970219ee9229166ad028a556ab7c63f3f56d45787906312ac299e9b7464305075eecef32432c305d100bf387ca605ed25b703bc9e2051740eacccbaee69a1cabca322b04ddbd61e77d2a59154d65b8a3d0b606ca16a1a1c0b96fc812b700beb918c87581c8d9c00494602b811644c3b30a096329f2c8e6c7854fa962401a460867da369dca7d27f4f0571173df6155a4050537f0fc689c3709ac374c1b23242397642417bdf6cd9b9005ba0ead5e74ee604098b3298bb557f89ec872438fae250cdbb2710bc97eb0ca254f3cfd05cf29e21246154343836dce47cb1b620d577493b1ed689b90a572aeb6ea9767dd954826b3054877de16fb7c74034915acd62a167e6ac14890982a307bd8f8714de1a58dcb6f29fb8068fa66dbf8865d805cf2e88f15aa12b80244ca8e7b232e854e91a7e5fd9d71978c522f2493a944e542fe371308845c0c6a3a63b9d0459d040ce95ed9e1ece6f264d87d1481b072dcf157553ced5762b591551a7c922c2915f23bedbc3ba3a2a443f514982b315b514088ddb522aa0f59e65d1a9b148ba6600714f853ba76c709a9515dde9ef8199fb07cda238be9c7eba64844cd4238b656b1ea1116f9a69ac3c543b5c196d01128a2db19e0f45d646a918025e432dd558c38b700fdd2ef9b688c7d0607da886420a97d6e5995aa73a6720efb6566d5fc370066c83d4a23f80500b0c122e8d0e313fbb5b6476aba2287a664ca409f3537737a56c557fda6d66034648d767e21d5952ced8d8c66bf8977b5e501a178bba27a3d2de50f91aebc1a88e12a1a39b9924d4765e57acbddf148cf63200c7120cbd73ad1bd24f42edcb52dca035f72ff6d599ea3eb68b874160d6d44f1227b3d2cd6c0f6c49ab5666d93d053ff0433e86f2e1d5128ccee8ecfd2f16401082ff5a1aa239c09197f14af16aac129d649fb15c31bd1472358982428f1268ba6f3ec6dc2439122e0fd928b69bc5fb81ce00939651fcaa29698c2705ad869a3e142ad14d4dbbcd47d0af7265b3216dfdf5672f79b849081378bad6cb36d8cc4278bb9e9c9c4ae82965a92131fdd7bab32a181f9106a97cafc55081ab5a0a0b67b21962f58025bf64efa8435d7df9ef392c2d2c4e598772287d9097045210e89cca37b2794cf0effc391aa030cd5843cdcbceac8f9fec0dfc2683d3f519d279804a1919737856e28eac343bc08443bd7334596dda1f1515017f64ccf64ef6e35dc47f44d4f0f1c7f5a92a4048ef7d420f9a8c8bd79d9b975da44c81e6fe89ae26a27526dadbfc547166a50165c351088a4b174eae4a86abf019ddb1109411e8b0a2be6ff22ac6aab29004f9a98f17e3b1d5766b95f2998ce103860481ccec6dc4a39091f3ba0fd76de3a4b66c45ffd01df12ae0e656db96207170a410cb84cb1e45afce2fea08ce44bae52b71614bb5b532fa549aa469ed20e80227db9682238fd7b67d8ab0a8baec492ffdbe00966625d4b32bec2231c3cfa9c6efed76805833660186efd9c997505776471fcc237066445179bd1122d68957e1540751bd0e993a2b911d960c70e29e6604240125e4a70e594b582fd3bb58394e5db526d1e8c76688d0a47f8c6b95dceccbd03d96cd4b40e1d997a3c8c98d61a1c2bba64097599b54b42faa7beb91788f0e2974102b51c23b99fa513a54012f45ba8d5bf652d09c58d4c15b6558fb3306a804ec3446e0df989409", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000340), &(0x7f0000000200)=""/31}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x8, &(0x7f0000000000)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x4, '\x00', r3, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x0, 0x4, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001540)=[r0, r0, r0, 0x1, r0], &(0x7f0000001580)=[{0x5, 0x1, 0xc, 0x2}, {0x3, 0x5, 0x4, 0xf}, {0x4, 0x3, 0x7, 0x4}, {0x4, 0x3, 0x1, 0x4}, {0x3, 0x2, 0xf, 0xc}, {0x0, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x3, 0x9}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0x9}, 0x94) 1.958253517s ago: executing program 5 (id=2442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x301ce58, &(0x7f00000005c0), 0x1, 0x62f, &(0x7f0000000600)="$eJzs3c9rHG0dAPDv7GbTpI1NKyK2KAY8tCBNs7VY9WJbD/ZQsGAPIh4amqSGbn/QpGBioSl4UFAQ8SrSi/+Ad+ndmwjqzbNQRSq+L+/70n2Z2Zl0s9lNtkl3t8l8PjDZeZ6Z7PN8d/bZeWZmn50ASmsm/VOJOBXx+lYSMd22bCpaC2fy9V7998ntdEqi2fz+f5JI8rxi/SR/PJYnJiLiL1cjPlvdXu7K2vrd+Uaz5WnE+dV7D8+vrK2fW743f2fxzuL9+oVvXLw09836xXqXWh9/6ziP5Y/Xrn/vi7/62Y+/vvTXxrkkLsfN2k8XoiOOd2UmZuJ1HmJ7/lhEXEpnurwuB83bhVAZWD3Ym2r+fqxFxOdjOqpZqmU6ln850soBA9WsRjSBkkq0fyipoh9QHNv3dxx8c8C9kuF5eaV1ALQ9/rHWuZGYyI6Njr5K2o6MxrJzGyfeQflpGZ88Of27dIot5yE+2Nw6Y++gnF42nkXEF7rFn2R1O5FFmsZf2VKPJCLmImI8r9939lGHpG1+EOdhdrLX+CsRcTl/TPOv7rH8mY70sOMHoJxeXMl35Btp6s3+L+17FP2f2Nb/aV0b6tx37cWo93+9+3/F/n4iO0de6eiHpX2WG92fstaZ8c9fXPtNr/Lb+3/plJZf9AWH4eWziNMd8f88u0yTbG7/pMv2T1e5dbm/Mr77t39f67Vs1PE3n0ec6Xr886ZXms51Xp+czJfVL9bPLy03Fudaf7uW8ac//+gPvcofdfzp9j/aPf4jxTpJlwt36WvysM8y/njj+b1ey6Z2jb/yr/Gkdbw5nuf8ZH519VE9Yjy5nq/SupCV5V/YuS7FOsVzpPGf/Ur39r/l/f9s6/NMFh+ZfXj4g7uvei3by/Zvu5j8utlnHXpJ41/o8f7fqf2neb/eTD3dsYz///Dxl3ot2yn+yX3GBgAAAAAAAGVTya7BJpXZzflKZXa2NV72c3G00niwsvrVpQeP7y9EnM2+D1mrFFe6p1vpJE3X8+/DFukLHemvRcTJiPhtdTJLz95+0FgYdfAAAAAAAAAAAAAAAAAAAADwnjiWj/8v7lP9v2pr/D9QEoO8wRzwftP+obyy9r/tFk9AGdj/Q3lp/1Be2j+Ul/YP5aX9Q3lp/1Be2j+Ul/YPAAAAAIfSyS+/+EcSERvfmsym1Hi+zIggONxqo64AMDLVUVcAGJnNS/86+1A6ffX/P8p/HHDw1QFGIOmWmXUOmjs3/hdd/xMAAAAAAAAAAAAAGIAzp7qP/0+MDYZDz7A/KK99jP/30wFwwPnpfygvx/jAbqP4J3otMP4fAAAAAAAAAAAAAIZmKpuSymw+FngqKpXZ2YjPRMSJqCVLy43FuYg4HhF/r9aOpOn6qCsNAAAAAAAAAAAAAAAAAAAAh8zK2vrd+UZj8VH7zMfbcg7CTM9wdp0p7oI6hKp+O/peubjl2vBfzMm01CKnFtF/nQc9cyR/TfbzPGMra+vJh81MErER70+AXeKKiRHVZ9ePjvFBfSYBAAAAAAAAAAAAAAAAAEBZtY097u7074dcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYvjf3/x/czKhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpk8DAAD//+yFOCE=") syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="40858500f5ff84099289d3b5a861b0f49ccdb8cfbfe399214930f2e415910ccb64a49bf30532fe7001e1a078ab965240aed502b142e0d1cdd5ae0cfd47c5e7133cfd77a1a345b8ad5e65e24f399d18a6257d5835d6d94dcd6cd1510ea6275a1fd68228c6631ff49c8ab8eefdbc67a055677f8f4759711850034b0bc555388ef9fd3a03c20baa1effffffff"], &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0016800000000b48872b0a624cdb14c3e509bc1f82d58f1df26a6c429de436ff3de4e5d4b94ecc6574b38ff000a20b91a2e90095b0c0e6250244d76da37c9a0e9d549c7e4d67fe5e0f0100000000000000dd701e0b77dccf5564742e551443b0bffecfe8b68da9a9780c3a034b7f4d2452d3c7f94ea6266df4ea99f936df6a4329ba697d50fb"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x20a, 0x140, 0x5, 0xc0a1, 0x8, 0x9, 0xa7, 0x2, 0xd, 0xfff9, 0x3, 0x9}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40070) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') lseek(r1, 0xc8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18) r3 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r3}, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @local}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0xa) 1.85884845s ago: executing program 6 (id=2443): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x64a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x3c, 0x0, &(0x7f0000000280)="b9ffff076c04ff0f989e030000007b9495e5495129dd8b0763466eab7fdade11f2d532c8c5bdaa9a5201d691ec412579aeabab864cfc6dc746792a9c", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.526167271s ago: executing program 2 (id=2444): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000002"], 0x48}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) 958.200099ms ago: executing program 1 (id=2445): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x700, 0x9f, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520119ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x15, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 896.691381ms ago: executing program 2 (id=2446): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4066, 0x3e, 0xfe2, 0x9}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 836.408613ms ago: executing program 3 (id=2447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0453a1810141fa2a1f00010000000000000e002e000f00c5e2743c16d80000", 0x2e}], 0x1}, 0x20000010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x7ffffffe, r3, &(0x7f0000000000)={0x30000008}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fsetxattr$system_posix_acl(r5, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x2}, [{0x2, 0xf, 0xffffffffffffffff}], {0x4, 0x6}, [], {}, {0x20, 0x5}}, 0x2c, 0x0) mq_timedreceive(r3, &(0x7f00000003c0)=""/132, 0x84, 0x7, &(0x7f0000000480)={0x0, 0x3938700}) 816.653353ms ago: executing program 2 (id=2448): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)={0x9, 0x6f, 0x2}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000ebff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 738.629756ms ago: executing program 3 (id=2449): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x2000000000000234, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0xa, 0x4, 0x0, 0x0, 0x4) socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) shutdown(0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet(0xa, 0x801, 0x84) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001d00), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, r0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000001c0)={0x9, 0x0, 0x44f, 0x80003, 0xffffffff, 0x2}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000300)=""/138) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) listen(r3, 0xfffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) 542.395352ms ago: executing program 2 (id=2450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004c9fb465a2e9339f90deca47c04912564474b8bf1dd3340d3b06b7d5ff34b98a632a66b256910b8a7675e64a3093ebdd104295df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff85000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033c100009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x3d, r0, {0x5}}, './file1\x00'}) open(&(0x7f00000001c0)='./file1\x00', 0x4040, 0xd7) 452.130975ms ago: executing program 2 (id=2451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x301ce58, &(0x7f00000005c0), 0x1, 0x62f, &(0x7f0000000600)="$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") syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="40858500f5ff84099289d3b5a861b0f49ccdb8cfbfe399214930f2e415910ccb64a49bf30532fe7001e1a078ab965240aed502b142e0d1cdd5ae0cfd47c5e7133cfd77a1a345b8ad5e65e24f399d18a6257d5835d6d94dcd6cd1510ea6275a1fd68228c6631ff49c8ab8eefdbc67a055677f8f4759711850034b0bc555388ef9fd3a03c20baa1effffffff"], &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0016800000000b48872b0a624cdb14c3e509bc1f82d58f1df26a6c429de436ff3de4e5d4b94ecc6574b38ff000a20b91a2e90095b0c0e6250244d76da37c9a0e9d549c7e4d67fe5e0f0100000000000000dd701e0b77dccf5564742e551443b0bffecfe8b68da9a9780c3a034b7f4d2452d3c7f94ea6266df4ea99f936df6a4329ba697d50fb"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x20a, 0x140, 0x5, 0xc0a1, 0x8, 0x9, 0xa7, 0x2, 0xd, 0xfff9, 0x3, 0x9}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40070) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') lseek(r1, 0xc8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18) r3 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r3}, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @local}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0xa) 438.772046ms ago: executing program 1 (id=2452): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x40010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r3, 0x2, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback={0xfc}, 0xb578}}}, 0x84) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x128, 0x1170, 0x1170, 0x0, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x5}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x2}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x9, 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffdb}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 315.973749ms ago: executing program 5 (id=2453): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x4044080) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x81) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x6}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000002980)=ANY=[], 0x14}, 0x1, 0x100000, 0x0, 0x4}, 0x4000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[], 0xfe33) recvmsg(r6, 0x0, 0x10100) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={0x0}) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6ded", 0x9}) 110.431506ms ago: executing program 3 (id=2454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f00000016c0)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@errors_continue}, {@grpjquota, 0x2e}, {@noload}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x90, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r3, 0x0, 0x80000000) 0s ago: executing program 6 (id=2455): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x84, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)=':\x00', 0x0, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2a9d2029db1ec5386b000000080006"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4008a820000000061146c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) listen(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0xfffffffc}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a0000001a00010000000000000000000a800000000000050000000008000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="06001c004e230000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): or type 5 error -117 [ 285.046868][ T9707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.086888][ T9713] set_capacity_and_notify: 1 callbacks suppressed [ 285.086901][ T9713] loop3: detected capacity change from 0 to 256 [ 285.130269][ T9713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.147720][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.219819][ T9717] binfmt_misc: register: failed to install interpreter file ./file0 [ 285.228290][ T9713] netlink: 'syz.3.1899': attribute type 3 has an invalid length. [ 285.374046][ T9721] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 285.393972][ T9721] loop3: detected capacity change from 0 to 512 [ 285.402430][ T9721] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 285.562494][ T9725] netlink: 'syz.5.1902': attribute type 4 has an invalid length. [ 285.572036][ T9725] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 285.572036][ T9725] program syz.5.1902 not setting count and/or reply_len properly [ 285.731017][ T9731] siw: device registration error -23 [ 285.789078][ T9731] loop1: detected capacity change from 0 to 512 [ 285.931451][ T9731] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 285.993299][ T9734] netlink: 'syz.3.1908': attribute type 4 has an invalid length. [ 286.001271][ T9734] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 286.001271][ T9734] program syz.3.1908 not setting count and/or reply_len properly [ 286.052430][ T9738] loop1: detected capacity change from 0 to 2048 [ 286.249952][ T9749] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.276966][ T9747] siw: device registration error -23 [ 286.290229][ T9749] loop2: detected capacity change from 0 to 512 [ 286.305285][ T9749] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 286.379360][ T9751] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 286.395408][ T9751] 8021q: adding VLAN 0 to HW filter on device bond11 [ 286.857686][ T9763] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.901142][ T9765] siw: device registration error -23 [ 286.908886][ T9765] loop1: detected capacity change from 0 to 512 [ 286.921509][ T9763] siw: device registration error -23 [ 286.939143][ T9765] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 286.951132][ T9763] loop3: detected capacity change from 0 to 512 [ 286.986943][ T9763] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 287.026017][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 287.281307][ T9779] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 287.298486][ T9780] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 287.298486][ T9780] program syz.1.1925 not setting count and/or reply_len properly [ 287.354694][ T9782] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 287.373657][ T9782] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.416318][ T9787] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 287.624035][ T9792] netlink: 'syz.5.1931': attribute type 1 has an invalid length. [ 287.645602][ T9792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.677946][ T9787] loop2: detected capacity change from 0 to 512 [ 287.694137][ T9795] loop5: detected capacity change from 0 to 512 [ 287.728163][ T9787] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 287.745494][ T9795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.773867][ T9795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.799560][ T9795] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.815429][ T9799] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 287.816921][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 287.816937][ T28] audit: type=1400 audit(1780031483.437:2677): avc: denied { write } for pid=9794 comm="syz.5.1932" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.843382][ T9801] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.856758][ T9795] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1932: corrupted xattr block 32: overlapping e_value [ 287.873805][ T9795] EXT4-fs (loop5): Remounting filesystem read-only [ 287.880340][ T9795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.889592][ T9795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.889702][ T9795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.889950][ T28] audit: type=1400 audit(1780031483.507:2678): avc: denied { append } for pid=9794 comm="syz.5.1932" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.908439][ T9795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.929923][ T28] audit: type=1400 audit(1780031483.507:2679): avc: denied { open } for pid=9794 comm="syz.5.1932" path="/65/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.963283][ T9802] siw: device registration error -23 [ 288.013659][ T9795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 288.023777][ T28] audit: type=1400 audit(1780031483.637:2680): avc: denied { read } for pid=9794 comm="syz.5.1932" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.053206][ T9805] bridge11: entered promiscuous mode [ 288.070084][ T9805] bridge11: entered allmulticast mode [ 288.103226][ T28] audit: type=1400 audit(1780031483.727:2681): avc: denied { write } for pid=9794 comm="syz.5.1932" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.169627][ T9814] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 288.189462][ T9814] 8021q: adding VLAN 0 to HW filter on device bond10 [ 288.470836][ T9829] netlink: 'syz.0.1941': attribute type 4 has an invalid length. [ 288.512692][ T9829] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 288.512692][ T9829] program syz.0.1941 not setting count and/or reply_len properly [ 288.524278][ T9830] bridge0: port 3(syz_tun) entered blocking state [ 288.565083][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.591485][ T9830] bridge0: port 3(syz_tun) entered disabled state [ 288.606710][ T9830] syz_tun: entered allmulticast mode [ 288.612527][ T9830] syz_tun: entered promiscuous mode [ 288.722327][ T9838] loop2: detected capacity change from 0 to 256 [ 288.733657][ T9838] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.807111][ T9838] netlink: 'syz.2.1946': attribute type 3 has an invalid length. [ 289.597051][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1949'. [ 289.606308][ T9844] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1948: corrupted in-inode xattr: invalid ea_ino [ 289.640649][ T9844] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.640807][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 289.656404][ C1] EXT4-fs (loop2): initial error at time 1780031485: ext4_iget_extra_inode:5128: inode 15 [ 289.666321][ C1] EXT4-fs (loop2): last error at time 1780031485: ext4_iget_extra_inode:5128: inode 15 [ 289.743529][ T9855] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 289.746573][ T9853] bridge10: entered promiscuous mode [ 289.760417][ T9844] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1948: couldn't read orphan inode 15 (err -117) [ 289.782300][ T9853] bridge10: entered allmulticast mode [ 289.789962][ T9844] loop2: lost filesystem error report for type 5 error -117 [ 289.790462][ T9844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.823700][ T9855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.923498][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.177040][ T9873] set_capacity_and_notify: 1 callbacks suppressed [ 290.177055][ T9873] loop2: detected capacity change from 0 to 256 [ 290.214357][ T9873] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.262566][ T9875] tmpfs: Bad value for 'mpol' [ 290.263202][ T28] audit: type=1400 audit(1780031485.887:2682): avc: denied { mounton } for pid=9874 comm="syz.3.1960" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 290.295134][ T9873] netlink: 'syz.2.1959': attribute type 3 has an invalid length. [ 290.368086][ T9878] netlink: 'syz.3.1961': attribute type 6 has an invalid length. [ 290.569911][ T9884] loop3: detected capacity change from 0 to 1024 [ 290.575741][ T9882] syzkaller0: entered promiscuous mode [ 290.603767][ T9882] syzkaller0: entered allmulticast mode [ 290.616237][ T9884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.652116][ T9889] bridge12: entered promiscuous mode [ 290.664995][ T9884] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.677185][ T9889] bridge12: entered allmulticast mode [ 290.750023][ T9891] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 290.779289][ T28] audit: type=1400 audit(1780031486.397:2683): avc: denied { write } for pid=9881 comm="syz.3.1963" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.805102][ T9882] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1963: Freeing blocks not in datazone - block = 0, count = 16 [ 290.823543][ T9891] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.916245][ T9897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 290.955637][ T5912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 290.981988][ T5912] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 28 [ 291.018307][ T5912] EXT4-fs (loop3): This should not happen!! Data will be lost [ 291.018307][ T5912] [ 291.051741][ T5912] EXT4-fs (loop3): Total free blocks count 0 [ 291.058781][ T5912] EXT4-fs (loop3): Free/Dirty block details [ 291.071014][ T5912] EXT4-fs (loop3): free_blocks=16 [ 291.082540][ T5912] EXT4-fs (loop3): dirty_blocks=16 [ 291.098696][ T5912] EXT4-fs (loop3): Block reservation details [ 291.114304][ T5912] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 291.212436][ T3306] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 291.233030][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.245640][ T9909] FAULT_INJECTION: forcing a failure. [ 291.245640][ T9909] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 291.296078][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.2.1973 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 291.296107][ T9909] Tainted: [W]=WARN [ 291.296115][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.296127][ T9909] Call Trace: [ 291.296134][ T9909] [ 291.296142][ T9909] __dump_stack+0x1d/0x30 [ 291.296210][ T9909] dump_stack_lvl+0x95/0xd0 [ 291.296226][ T9909] dump_stack+0x15/0x1b [ 291.296242][ T9909] should_fail_ex+0x263/0x280 [ 291.296259][ T9909] should_fail_alloc_page+0xf2/0x100 [ 291.296340][ T9909] __alloc_frozen_pages_noprof+0x108/0x350 [ 291.296366][ T9909] alloc_pages_mpol+0xb3/0x260 [ 291.296429][ T9909] alloc_pages_noprof+0x8f/0x140 [ 291.296449][ T9909] __pud_alloc+0x47/0x460 [ 291.296470][ T9909] handle_mm_fault+0x1eae/0x2e70 [ 291.296515][ T9909] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 291.296546][ T9909] do_user_addr_fault+0x3fd/0x1050 [ 291.296622][ T9909] exc_page_fault+0x62/0xa0 [ 291.296647][ T9909] asm_exc_page_fault+0x26/0x30 [ 291.296669][ T9909] RIP: 0010:strncpy_from_user+0xa4/0x250 [ 291.296699][ T9909] Code: 8f 50 ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 291.296730][ T9909] RSP: 0018:ffffc90003267db0 EFLAGS: 00050202 [ 291.296747][ T9909] RAX: ffffffff8208a8bd RBX: ffff8881003b3540 RCX: ffff88810539a200 [ 291.296832][ T9909] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000007 [ 291.296845][ T9909] RBP: ffff8881003b3558 R08: 00018881003b3547 R09: 0000000000000000 [ 291.296859][ T9909] R10: ffff8881003b3540 R11: 0001c90003267e78 R12: 00002000000003c0 [ 291.296933][ T9909] R13: 00000000000000a8 R14: 00002000000003c0 R15: 00000000000000a8 [ 291.296949][ T9909] ? strncpy_from_user+0x7d/0x250 [ 291.296987][ T9909] do_getname+0x59/0x1c0 [ 291.297003][ T9909] getname_flags+0x1d/0x30 [ 291.297072][ T9909] __se_sys_quotactl+0x157/0x660 [ 291.297096][ T9909] __x64_sys_quotactl+0x55/0x70 [ 291.297113][ T9909] x64_sys_call+0x1a2a/0x3020 [ 291.297138][ T9909] do_syscall_64+0x12c/0x3b0 [ 291.297164][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.297185][ T9909] RIP: 0033:0x7fe3e74cce59 [ 291.297219][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.297236][ T9909] RSP: 002b:00007fe3e5f1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 291.297255][ T9909] RAX: ffffffffffffffda RBX: 00007fe3e7745fa0 RCX: 00007fe3e74cce59 [ 291.297269][ T9909] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffff80000800 [ 291.297283][ T9909] RBP: 00007fe3e5f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.297294][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.297306][ T9909] R13: 00007fe3e7746038 R14: 00007fe3e7745fa0 R15: 00007ffefc897238 [ 291.297321][ T9909] [ 291.658224][ T9918] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 291.696328][ T9920] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 291.696328][ T9920] program syz.1.1974 not setting count and/or reply_len properly [ 291.759268][ T9918] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.856117][ T9915] bridge12: entered promiscuous mode [ 291.906563][ T9915] bridge12: entered allmulticast mode [ 292.557708][ T9927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 292.748928][ T9927] siw: device registration error -23 [ 292.893325][ T9927] loop3: detected capacity change from 0 to 512 [ 292.947966][ T9927] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 293.277317][ T28] audit: type=1400 audit(1780031488.897:2684): avc: denied { write } for pid=9943 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.323152][ T9944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9944 comm=syz.1.1985 [ 293.388923][ T9944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2588 sclass=netlink_route_socket pid=9944 comm=syz.1.1985 [ 293.418242][ T9942] netlink: 'syz.0.1982': attribute type 3 has an invalid length. [ 293.503449][ T9950] @0Ù: renamed from bond_slave_1 [ 293.516073][ T9948] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 293.552397][ T9948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 293.751712][ T9955] loop2: detected capacity change from 0 to 256 [ 293.776838][ T9959] loop5: detected capacity change from 0 to 512 [ 293.791352][ T9959] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.810457][ T9959] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1991: bad orphan inode 131083 [ 293.821066][ T9959] loop5: lost filesystem error report for type 5 error -117 [ 293.821677][ T9959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.860742][ T28] audit: type=1400 audit(1780031489.477:2685): avc: denied { write } for pid=9958 comm="syz.5.1991" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.901661][ T9963] netlink: 'syz.1.1990': attribute type 4 has an invalid length. [ 293.906018][ T9959] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.1991: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 293.910358][ T9] lo speed is unknown, defaulting to 1000 [ 293.936068][ T9] syz2: Port: 1 Link DOWN [ 293.936844][ T9963] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 293.936844][ T9963] program syz.1.1990 not setting count and/or reply_len properly [ 294.044517][ T9967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 294.123198][ T9967] siw: device registration error -23 [ 294.139856][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.429313][ T9976] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 294.429313][ T9976] program syz.5.1994 not setting count and/or reply_len properly [ 295.212939][ T9978] syzkaller0: entered promiscuous mode [ 295.240075][ T9978] syzkaller0: entered allmulticast mode [ 295.269205][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 295.319131][ T9987] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 295.364190][ T9987] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.021849][ T9997] loop2: detected capacity change from 0 to 512 [ 296.042779][ T9997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.092713][ T9997] EXT4-fs (loop2): 1 truncate cleaned up [ 296.104168][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.369610][ T9997] SELinux: policydb magic number 0x202001e does not match expected magic number 0xf97cff8c [ 296.380805][ T9997] SELinux: failed to load policy [ 296.420654][ T28] audit: type=1400 audit(1780031491.987:2686): avc: denied { load_policy } for pid=9992 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 296.822366][T10002] netlink: 'syz.0.2003': attribute type 3 has an invalid length. [ 297.211367][T10009] bridge9: entered promiscuous mode [ 297.273577][T10009] bridge9: entered allmulticast mode [ 297.408707][ T28] audit: type=1400 audit(1780031492.067:2687): avc: denied { accept } for pid=9998 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 297.428393][ T28] audit: type=1326 audit(1780031492.977:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.453881][ T28] audit: type=1326 audit(1780031492.977:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.501047][ T28] audit: type=1326 audit(1780031492.977:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.591231][ T28] audit: type=1326 audit(1780031492.977:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.674359][ T28] audit: type=1326 audit(1780031492.977:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.749036][ T28] audit: type=1326 audit(1780031492.977:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10010 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 297.807489][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.870860][T10018] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 297.931044][T10026] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 297.955401][T10016] siw: device registration error -23 [ 297.985511][T10026] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.995195][T10016] loop3: detected capacity change from 0 to 512 [ 298.013831][T10016] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 298.080492][T10018] loop2: detected capacity change from 0 to 512 [ 298.098735][T10018] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 298.122648][T10033] loop3: detected capacity change from 0 to 2048 [ 298.197173][T10037] loop2: detected capacity change from 0 to 1024 [ 298.229365][T10040] loop5: detected capacity change from 0 to 2048 [ 298.230773][T10037] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.281005][T10037] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.2016: inode #131072: comm syz.2.2016: iget: illegal inode # [ 298.294413][T10037] loop2: lost filesystem error report for type 5 error -117 [ 298.294579][T10037] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.2016: Bad quota inode: 131072, type: 2 [ 298.301959][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 298.301979][ C0] EXT4-fs (loop2): initial error at time 1780031493: ext4_quota_enable:7225 [ 298.302021][ C0] EXT4-fs (loop2): last error at time 1780031493: ext4_quota_enable:7225 [ 298.337366][T10037] loop2: lost filesystem error report for type 5 error -117 [ 298.338796][T10037] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 298.361401][T10037] EXT4-fs (loop2): mount failed [ 298.384947][T10038] netlink: 'syz.0.2015': attribute type 3 has an invalid length. [ 299.073823][T10053] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 299.225046][T10074] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 299.244005][T10072] siw: device registration error -23 [ 299.300596][T10075] loop3: detected capacity change from 0 to 512 [ 299.308589][T10075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.414555][T10075] EXT4-fs (loop3): 1 truncate cleaned up [ 299.426141][T10075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.612170][T10075] SELinux: policydb magic number 0x202001e does not match expected magic number 0xf97cff8c [ 299.622963][T10075] SELinux: failed to load policy [ 299.696024][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'. [ 299.706545][T10074] 8021q: adding VLAN 0 to HW filter on device bond15 [ 300.992515][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.002096][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 301.002111][ T28] audit: type=1400 audit(1780031496.617:2761): avc: denied { connect } for pid=10082 comm="syz.5.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 301.048581][T10069] loop1: detected capacity change from 0 to 4096 [ 301.095886][T10092] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 301.113355][T10069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.143368][ T28] audit: type=1400 audit(1780031496.767:2762): avc: denied { write } for pid=10068 comm="syz.1.2033" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.183596][T10097] loop5: detected capacity change from 0 to 256 [ 301.241819][T10097] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.262339][T10092] loop2: detected capacity change from 0 to 512 [ 301.273995][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.286156][T10092] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 301.345461][T10097] netlink: 'syz.5.2029': attribute type 3 has an invalid length. [ 301.398218][T10103] netlink: 'syz.1.2032': attribute type 2 has an invalid length. [ 301.474123][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.539146][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.560095][T10116] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 301.599484][T10116] siw: device registration error -23 [ 301.609768][T10105] lo speed is unknown, defaulting to 1000 [ 301.632921][T10116] loop1: detected capacity change from 0 to 512 [ 301.655389][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.669408][T10116] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 301.703097][T10121] netlink: 'syz.2.2034': attribute type 4 has an invalid length. [ 301.747539][T10121] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 301.747539][T10121] program syz.2.2034 not setting count and/or reply_len properly [ 301.781667][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.798066][T10125] loop1: detected capacity change from 0 to 1024 [ 301.809255][T10125] EXT4-fs: Ignoring removed bh option [ 301.859810][T10125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.930949][ T28] audit: type=1400 audit(1780031497.547:2763): avc: denied { write } for pid=10124 comm="syz.1.2039" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.933005][T10125] netlink: 'syz.1.2039': attribute type 2 has an invalid length. [ 301.960449][T10125] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 302.089935][ T5932] bridge_slave_1: left allmulticast mode [ 302.096002][ T5932] bridge_slave_1: left promiscuous mode [ 302.101841][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.124784][T10134] netlink: 'syz.5.2041': attribute type 1 has an invalid length. [ 302.136142][ T5932] bridge_slave_0: left allmulticast mode [ 302.154620][ T5932] bridge_slave_0: left promiscuous mode [ 302.167546][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.205809][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2041'. [ 302.225080][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2041'. [ 302.242569][ T28] audit: type=1400 audit(1780031497.867:2764): avc: denied { write } for pid=10135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.282697][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.292624][ T28] audit: type=1400 audit(1780031497.867:2765): avc: denied { write } for pid=10147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.324755][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 302.354268][ T5932] bond4 (unregistering): (slave geneve2): Releasing active interface [ 302.362560][ T5932] geneve2 (unregistering): left allmulticast mode [ 302.440940][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10156 comm=syz.5.2041 [ 302.773097][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.786241][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.796062][ T5932] bond0 (unregistering): Released all slaves [ 302.804161][ T5932] bond1 (unregistering): Released all slaves [ 302.813189][ T5932] bond2 (unregistering): Released all slaves [ 302.822160][ T5932] bond3 (unregistering): Released all slaves [ 302.832489][ T5932] bond4 (unregistering): Released all slaves [ 302.841421][ T5932] bond5 (unregistering): Released all slaves [ 302.850044][ T5932] bond6 (unregistering): Released all slaves [ 302.859585][ T5932] bond7 (unregistering): Released all slaves [ 302.868750][ T5932] bond8 (unregistering): Released all slaves [ 302.878038][ T5932] bond9 (unregistering): Released all slaves [ 302.887301][ T5932] bond10 (unregistering): Released all slaves [ 302.897785][ T5932] bond11 (unregistering): Released all slaves [ 302.916996][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 302.937717][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.946390][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.958006][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 302.967201][T10105] bridge_slave_0: entered allmulticast mode [ 302.974339][T10105] bridge_slave_0: entered promiscuous mode [ 303.007895][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2044'. [ 303.032565][ T5932] hsr_slave_0: left promiscuous mode [ 303.041045][ T5932] hsr_slave_1: left promiscuous mode [ 303.061196][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.073281][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.095258][T10166] loop5: detected capacity change from 0 to 512 [ 303.101965][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.112329][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.121913][T10166] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.128678][T10166] ext4: Unknown parameter 'hash' [ 303.141012][ T5932] veth1_macvtap: left promiscuous mode [ 303.146519][ T5932] veth0_macvtap: left promiscuous mode [ 303.152415][ T5932] veth1_vlan: left promiscuous mode [ 303.154387][T10170] loop3: detected capacity change from 0 to 512 [ 303.159944][ T5932] veth0_vlan: left promiscuous mode [ 303.187947][T10170] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 303.347822][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 303.362550][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 303.489724][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.497027][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.506244][T10105] bridge_slave_1: entered allmulticast mode [ 303.513032][T10105] bridge_slave_1: entered promiscuous mode [ 303.622118][T10177] loop5: detected capacity change from 0 to 512 [ 303.763079][T10177] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2049: inode has both inline data and extents flags [ 303.777009][T10177] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 303.778724][T10177] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2049: couldn't read orphan inode 15 (err -117) [ 303.788478][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 303.788558][ C1] EXT4-fs (loop5): initial error at time 1780031499: ext4_orphan_get:1397: inode 15 [ 303.788868][ C1] EXT4-fs (loop5): last error at time 1780031499: ext4_orphan_get:1397: inode 15 [ 303.828058][T10177] loop5: lost filesystem error report for type 5 error -117 [ 303.835206][T10177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.876846][ T28] audit: type=1400 audit(1780031499.487:2766): avc: denied { write } for pid=10173 comm="syz.5.2049" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.279272][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.289845][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.317382][T10183] loop2: detected capacity change from 0 to 256 [ 304.340040][T10183] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.363922][T10105] team0: Port device team_slave_0 added [ 304.393212][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 304.443865][T10183] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 304.477818][T10105] team0: Port device team_slave_1 added [ 304.505925][ T28] audit: type=1400 audit(1780031500.127:2767): avc: denied { write } for pid=10184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.536978][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.565273][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.604745][ T28] audit: type=1400 audit(1780031500.157:2768): avc: denied { write } for pid=10197 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.627046][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.639951][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 304.652151][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.659977][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.686807][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.727083][T10200] loop3: detected capacity change from 0 to 2048 [ 304.799375][T10105] hsr_slave_0: entered promiscuous mode [ 304.822079][T10105] hsr_slave_1: entered promiscuous mode [ 304.927697][ T28] audit: type=1400 audit(1780031500.547:2769): avc: denied { write } for pid=10202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.017607][ T28] audit: type=1400 audit(1780031500.617:2770): avc: denied { write } for pid=10216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.051076][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 305.133782][T10105] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.152496][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.161150][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.171894][T10105] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.181882][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.190598][T10105] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.199535][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.207484][T10105] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.229175][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.245079][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 305.268386][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 305.306799][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.317846][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.352985][T10245] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.372885][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.379977][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.395382][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.402461][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.417740][T10253] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 305.426109][T10245] netlink: 'syz.1.2062': attribute type 3 has an invalid length. [ 305.426620][T10253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2056: bg 0: block 104: invalid block bitmap [ 305.443909][T10105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.456828][T10253] loop2: lost filesystem error report for type 5 error -117 [ 305.456940][T10105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.459367][T10253] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 305.464255][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 305.464271][ C0] EXT4-fs (loop2): initial error at time 1780031501: ext4_validate_block_bitmap:432 [ 305.464310][ C0] EXT4-fs (loop2): last error at time 1780031501: ext4_validate_block_bitmap:432 [ 305.516467][T10253] loop2: lost filesystem error report for type 5 error -117 [ 305.521104][T10253] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2056: invalid indirect mapped block 1 (level 1) [ 305.553376][T10253] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 305.555539][T10253] EXT4-fs (loop2): 1 truncate cleaned up [ 305.592704][T10261] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 305.614911][T10261] EXT4-fs (loop5): orphan cleanup on readonly fs [ 305.619517][T10253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.634002][T10261] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 305.655748][T10261] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 305.690507][T10261] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2057: bg 0: block 64: padding at end of block bitmap is not set [ 305.706723][T10253] tipc: Enabled bearer , priority 0 [ 305.718718][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.735573][T10261] loop5: lost filesystem error report for type 5 error -117 [ 305.735796][T10261] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 305.743133][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 305.743185][ C1] EXT4-fs (loop5): initial error at time 1780031501: ext4_validate_block_bitmap:441 [ 305.743207][ C1] EXT4-fs (loop5): last error at time 1780031501: ext4_validate_block_bitmap:441 [ 305.777177][T10261] loop5: lost filesystem error report for type 5 error -117 [ 305.777536][T10261] EXT4-fs (loop5): 1 truncate cleaned up [ 305.791524][T10261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.805944][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.863113][T10282] netlink: 762 bytes leftover after parsing attributes in process `syz.2.2060'. [ 305.893264][T10261] xt_connbytes: Forcing CT accounting to be enabled [ 305.917782][T10290] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 305.932782][T10286] netlink: 'syz.3.2059': attribute type 4 has an invalid length. [ 305.941152][T10286] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 305.941152][T10286] program syz.3.2059 not setting count and/or reply_len properly [ 306.000840][T10290] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 306.041976][T10105] veth0_vlan: entered promiscuous mode [ 306.055369][T10105] veth1_vlan: entered promiscuous mode [ 306.067913][T10299] tmpfs: Unknown parameter '18446744073709551615' [ 306.085513][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.095548][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 306.095561][ T28] audit: type=1400 audit(1780031501.727:2775): avc: denied { nlmsg_write } for pid=10297 comm="syz.2.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 306.100055][T10105] veth0_macvtap: entered promiscuous mode [ 306.130447][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 306.157984][T10299] raw_sendmsg: syz.2.2063 forgot to set AF_INET. Fix it! [ 306.165566][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 306.176719][T10105] veth1_macvtap: entered promiscuous mode [ 306.192747][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.210082][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.244771][T10308] set_capacity_and_notify: 4 callbacks suppressed [ 306.244844][T10308] loop2: detected capacity change from 0 to 736 [ 306.266499][ T5910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.275750][ T5910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.337647][ T5910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.347234][T10312] loop5: detected capacity change from 0 to 2048 [ 306.361542][ T5910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.448478][T10318] loop1: detected capacity change from 0 to 1024 [ 306.468110][T10316] lo speed is unknown, defaulting to 1000 [ 306.503923][T10318] EXT4-fs: Ignoring removed orlov option [ 306.569423][T10318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.601703][ T28] audit: type=1400 audit(1780031502.217:2776): avc: denied { setopt } for pid=10325 comm="syz.6.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.674542][T10328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=10328 comm=syz.6.2072 [ 306.722840][ T28] audit: type=1400 audit(1780031502.347:2777): avc: denied { setattr } for pid=10313 comm="syz.1.2069" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.795529][T10331] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 306.843326][T10331] siw: device registration error -23 [ 306.862941][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.922025][T10331] loop6: detected capacity change from 0 to 512 [ 306.967107][T10331] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 307.014789][T10334] loop1: detected capacity change from 0 to 256 [ 307.047744][T10334] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.151684][T10339] netlink: 'syz.1.2074': attribute type 3 has an invalid length. [ 307.400188][ T28] audit: type=1400 audit(1780031503.007:2778): avc: denied { create } for pid=10344 comm="syz.5.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 307.450488][T10350] loop5: detected capacity change from 0 to 1024 [ 307.513584][T10350] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.557713][T10350] EXT4-fs error (device loop5): ext4_quota_enable:7225: comm syz.5.2080: inode #131072: comm syz.5.2080: iget: illegal inode # [ 307.588344][T10356] loop6: detected capacity change from 0 to 1024 [ 307.612526][T10350] loop5: lost filesystem error report for type 5 error -117 [ 307.612624][T10350] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.2080: Bad quota inode: 131072, type: 2 [ 307.631415][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 307.631431][ C1] EXT4-fs (loop5): initial error at time 1780031503: ext4_quota_enable:7225 [ 307.631449][ C1] EXT4-fs (loop5): last error at time 1780031503: ext4_quota_enable:7225 [ 307.660852][T10350] loop5: lost filesystem error report for type 5 error -117 [ 307.666063][T10356] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.713240][T10356] EXT4-fs error (device loop6): ext4_quota_enable:7225: comm syz.6.2082: inode #131072: comm syz.6.2082: iget: illegal inode # [ 307.732447][T10356] loop6: lost filesystem error report for type 5 error -117 [ 307.733852][T10356] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.2082: Bad quota inode: 131072, type: 2 [ 307.736285][T10350] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 307.741203][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 307.773068][T10350] EXT4-fs (loop5): mount failed [ 307.773929][ C0] EXT4-fs (loop6): initial error at time 1780031503: ext4_quota_enable:7225 [ 307.787435][ C0] EXT4-fs (loop6): last error at time 1780031503: ext4_quota_enable:7225 [ 307.795905][T10356] loop6: lost filesystem error report for type 5 error -117 [ 307.797312][T10356] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 307.820039][T10356] EXT4-fs (loop6): mount failed [ 308.060189][T10360] loop1: detected capacity change from 0 to 256 [ 308.493429][T10366] lo speed is unknown, defaulting to 1000 [ 308.546566][T10368] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.626643][T10368] siw: device registration error -23 [ 308.717624][T10368] loop6: detected capacity change from 0 to 512 [ 308.744840][T10368] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 308.847567][T10373] loop6: detected capacity change from 0 to 2048 [ 309.058742][T10389] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 309.069785][T10390] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.088912][T10389] EXT4-fs error (device loop5): ext4_quota_enable:7225: comm syz.5.2095: inode #131072: comm syz.5.2095: iget: illegal inode # [ 309.103330][T10389] loop5: lost filesystem error report for type 5 error -117 [ 309.103427][T10389] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.2095: Bad quota inode: 131072, type: 2 [ 309.122035][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 309.122056][ C0] EXT4-fs (loop5): initial error at time 1780031504: ext4_quota_enable:7225 [ 309.122100][ C0] EXT4-fs (loop5): last error at time 1780031504: ext4_quota_enable:7225 [ 309.151044][T10390] netlink: 'syz.2.2093': attribute type 3 has an invalid length. [ 309.159763][T10389] loop5: lost filesystem error report for type 5 error -117 [ 309.162624][T10389] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 309.194664][T10394] lo speed is unknown, defaulting to 1000 [ 309.208378][T10389] EXT4-fs (loop5): mount failed [ 309.325985][T10396] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 309.336939][T10396] EXT4-fs error (device loop3): ext4_quota_enable:7225: comm syz.3.2096: inode #131072: comm syz.3.2096: iget: illegal inode # [ 309.350239][T10396] loop3: lost filesystem error report for type 5 error -117 [ 309.350433][T10396] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2096: Bad quota inode: 131072, type: 2 [ 309.357772][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 309.357788][ C1] EXT4-fs (loop3): initial error at time 1780031504: ext4_quota_enable:7225 [ 309.357809][ C1] EXT4-fs (loop3): last error at time 1780031504: ext4_quota_enable:7225 [ 309.393021][T10396] loop3: lost filesystem error report for type 5 error -117 [ 309.393156][T10396] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 309.415832][T10396] EXT4-fs (loop3): mount failed [ 309.708285][ T28] audit: type=1400 audit(1780031505.327:2779): avc: denied { mount } for pid=10400 comm="syz.6.2098" name="/" dev="rpc_pipefs" ino=28766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 309.732592][T10401] EXT4-fs: dax option not supported [ 309.734380][ T28] audit: type=1400 audit(1780031505.327:2780): avc: denied { unmount } for pid=10400 comm="syz.6.2098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 309.758684][ T28] audit: type=1400 audit(1780031505.357:2781): avc: denied { mounton } for pid=10400 comm="syz.6.2098" path="/12/file0" dev="rpc_pipefs" ino=28766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 309.808228][T10404] x_tables: duplicate underflow at hook 2 [ 309.829191][ T28] audit: type=1400 audit(1780031505.447:2782): avc: denied { bind } for pid=10405 comm="syz.1.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 309.832888][T10406] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2100: dx entry: limit 1024 != root limit 124 [ 309.866070][T10406] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2100: Corrupt directory, running e2fsck is recommended [ 309.905303][T10406] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 309.920993][T10406] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2100: corrupted in-inode xattr: invalid ea_ino [ 309.951389][T10413] siw: device registration error -23 [ 309.956774][T10406] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.957029][T10406] EXT4-fs (loop1): Remounting filesystem read-only [ 309.973115][T10406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.995414][T10413] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 310.069136][T10406] __nla_validate_parse: 1 callbacks suppressed [ 310.069148][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2100'. [ 310.134538][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.155068][T10415] loop2: p1 p3 p4 [ 310.159149][T10415] loop2: p1 start 393217 is beyond EOD, truncated [ 310.176971][T10415] loop2: p3 size 395700 extends beyond EOD, truncated [ 310.216138][T10415] loop2: p4 start 117571584 is beyond EOD, truncated [ 310.422719][T10440] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 310.434621][T10440] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.2113: inode #131072: comm syz.2.2113: iget: illegal inode # [ 310.448089][T10440] loop2: lost filesystem error report for type 5 error -117 [ 310.448183][T10440] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.2113: Bad quota inode: 131072, type: 2 [ 310.455640][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 310.455654][ C1] EXT4-fs (loop2): initial error at time 1780031506: ext4_quota_enable:7225 [ 310.455672][ C1] EXT4-fs (loop2): last error at time 1780031506: ext4_quota_enable:7225 [ 310.492092][T10440] loop2: lost filesystem error report for type 5 error -117 [ 310.492300][T10440] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 310.533561][T10444] netlink: 'syz.3.2106': attribute type 4 has an invalid length. [ 310.542751][T10444] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 310.542751][T10444] program syz.3.2106 not setting count and/or reply_len properly [ 310.593916][T10440] EXT4-fs (loop2): mount failed [ 310.635988][T10447] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.680366][T10447] netlink: 'syz.5.2114': attribute type 3 has an invalid length. [ 311.493655][T10454] set_capacity_and_notify: 11 callbacks suppressed [ 311.493669][T10454] loop1: detected capacity change from 0 to 128 [ 311.544148][T10454] /dev/loop1: Can't open blockdev [ 311.711986][T10456] loop6: detected capacity change from 0 to 256 [ 311.837557][T10464] netlink: 'syz.5.2118': attribute type 4 has an invalid length. [ 311.848049][T10464] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 311.848049][T10464] program syz.5.2118 not setting count and/or reply_len properly [ 312.083576][T10470] loop1: detected capacity change from 0 to 512 [ 312.094520][T10468] geneve3: entered promiscuous mode [ 312.141268][T10470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.167905][T10472] loop6: detected capacity change from 0 to 1024 [ 312.234318][T10472] EXT4-fs: Ignoring removed bh option [ 312.343212][T10470] EXT4-fs (loop1): 1 truncate cleaned up [ 312.354757][T10472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.388675][T10470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.593797][ T28] audit: type=1326 audit(1780031508.207:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.2125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe46e9ce59 code=0x0 [ 312.653178][T10484] loop2: detected capacity change from 0 to 2048 [ 312.676272][T10472] netlink: 'syz.6.2123': attribute type 2 has an invalid length. [ 312.715166][ T28] audit: type=1400 audit(1780031508.247:2784): avc: denied { write } for pid=10469 comm="syz.1.2122" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.745801][T10472] netlink: 'syz.6.2123': attribute type 1 has an invalid length. [ 312.770111][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.834569][ T28] audit: type=1326 audit(1780031508.247:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10469 comm="syz.1.2122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f782116ce59 code=0x0 [ 312.874746][T10492] loop1: detected capacity change from 0 to 512 [ 312.886095][T10105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.906385][T10492] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 312.940592][ T28] audit: type=1400 audit(1780031508.257:2786): avc: denied { write } for pid=10471 comm="syz.6.2123" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.144933][T10500] loop6: detected capacity change from 0 to 256 [ 313.188020][T10500] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.248713][T10494] netlink: 'syz.6.2128': attribute type 3 has an invalid length. [ 313.432418][T10505] netlink: 'syz.1.2130': attribute type 4 has an invalid length. [ 313.440419][T10505] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 313.440419][T10505] program syz.1.2130 not setting count and/or reply_len properly [ 313.569536][T10512] loop6: detected capacity change from 0 to 1024 [ 313.606361][T10520] geneve3: entered promiscuous mode [ 313.638835][T10512] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.654252][T10518] siw: device registration error -23 [ 313.662668][T10518] loop3: detected capacity change from 0 to 512 [ 313.666259][T10512] EXT4-fs error (device loop6): ext4_quota_enable:7225: comm syz.6.2134: inode #131072: comm syz.6.2134: iget: illegal inode # [ 313.674079][T10523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.691560][T10518] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 313.755556][T10524] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 313.755556][T10524] program syz.2.2135 not setting count and/or reply_len properly [ 313.799265][T10512] loop6: lost filesystem error report for type 5 error -117 [ 313.810800][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 313.824569][ C0] EXT4-fs (loop6): initial error at time 1780031509: ext4_quota_enable:7225 [ 313.833254][ C0] EXT4-fs (loop6): last error at time 1780031509: ext4_quota_enable:7225 [ 313.847255][T10512] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.2134: Bad quota inode: 131072, type: 2 [ 313.902271][T10512] loop6: lost filesystem error report for type 5 error -117 [ 313.902532][T10512] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 313.957915][T10523] siw: device registration error -23 [ 313.970863][T10523] loop5: detected capacity change from 0 to 512 [ 313.993855][T10523] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 314.034013][T10512] EXT4-fs (loop6): mount failed [ 314.746753][T10526] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 315.525836][T10544] bridge13: entered promiscuous mode [ 315.668975][T10544] bridge13: entered allmulticast mode [ 315.759586][T10552] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.894696][T10541] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.906345][T10541] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 315.916573][T10541] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2145: Corrupt directory, running e2fsck is recommended [ 315.934666][T10541] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 315.942979][T10541] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2145: corrupted in-inode xattr: e_name out of bounds [ 315.956839][T10541] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 315.957964][T10541] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2145: couldn't read orphan inode 15 (err -117) [ 315.967101][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 315.967114][ C0] EXT4-fs (loop3): initial error at time 1780031511: ext4_iget_extra_inode:5128: inode 15 [ 315.967147][ C0] EXT4-fs (loop3): last error at time 1780031511: ext4_iget_extra_inode:5128: inode 15 [ 316.004925][T10541] loop3: lost filesystem error report for type 5 error -117 [ 316.006424][T10541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.039905][T10541] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.051496][T10541] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 316.061618][T10541] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2145: Corrupt directory, running e2fsck is recommended [ 316.112896][ T28] audit: type=1400 audit(1780031511.737:2787): avc: denied { write } for pid=10542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.413658][ T28] audit: type=1400 audit(1780031511.807:2788): avc: denied { write } for pid=10563 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.791799][T10566] netlink: 'syz.2.2148': attribute type 5 has an invalid length. [ 316.832115][T10572] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 317.005717][T10572] siw: device registration error -23 [ 317.015978][T10577] set_capacity_and_notify: 3 callbacks suppressed [ 317.015994][T10577] loop2: detected capacity change from 0 to 512 [ 317.053076][T10572] loop6: detected capacity change from 0 to 512 [ 317.115318][T10577] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 317.132868][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.156124][T10572] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 317.269079][ T28] audit: type=1400 audit(1780031512.887:2789): avc: denied { write } for pid=10580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.362808][ T28] audit: type=1400 audit(1780031512.987:2790): avc: denied { write } for pid=10599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.385662][T10604] loop2: detected capacity change from 0 to 512 [ 317.413894][T10604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.450193][T10604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.494047][T10604] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.595874][ T28] audit: type=1400 audit(1780031513.217:2791): avc: denied { write } for pid=10603 comm="syz.2.2157" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.634956][ T28] audit: type=1400 audit(1780031513.257:2792): avc: denied { write } for pid=10609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.684371][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.721909][ T28] audit: type=1400 audit(1780031513.337:2793): avc: denied { write } for pid=10626 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.763222][T10619] hub 5-0:1.0: USB hub found [ 317.769372][T10619] hub 5-0:1.0: 8 ports detected [ 317.951559][T10630] SELinux: failed to load policy [ 318.177539][T10635] loop2: detected capacity change from 0 to 512 [ 318.200898][T10635] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 318.224566][T10637] netlink: 'syz.6.2162': attribute type 5 has an invalid length. [ 318.438382][T10654] loop6: detected capacity change from 0 to 2048 [ 318.446749][T10654] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 318.523891][T10656] loop2: detected capacity change from 0 to 512 [ 318.549427][T10656] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.579785][T10656] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 318.595751][T10656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2170: bg 0: block 248: padding at end of block bitmap is not set [ 318.611470][T10656] loop2: lost filesystem error report for type 5 error -117 [ 318.612522][T10656] Quota error (device loop2): write_blk: dquota write failed [ 318.628046][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 318.628095][ C0] EXT4-fs (loop2): last error at time 1780031514: ext4_validate_block_bitmap:441 [ 318.644444][T10656] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 318.655176][T10656] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2170: Failed to acquire dquot type 1 [ 318.656972][T10664] siw: device registration error -23 [ 318.667303][T10656] loop2: lost filesystem error report for type 5 error -28 [ 318.686116][T10656] EXT4-fs (loop2): 1 truncate cleaned up [ 318.724703][T10656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 318.768247][ T28] audit: type=1400 audit(1780031514.377:2794): avc: denied { write } for pid=10655 comm="syz.2.2170" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.812869][T10666] loop5: detected capacity change from 0 to 512 [ 318.823693][T10666] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 318.834063][ T28] audit: type=1400 audit(1780031514.437:2795): avc: denied { write } for pid=10655 comm="syz.2.2170" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.863396][T10664] loop6: detected capacity change from 0 to 512 [ 318.873941][T10664] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 318.887137][ T28] audit: type=1400 audit(1780031514.487:2796): avc: denied { write } for pid=10655 comm="syz.2.2170" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.005386][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 319.023369][ T5910] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 319.047786][ T5910] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 319.097582][ T5910] loop2: lost filesystem error report for type 5 error -117 [ 320.136606][T10707] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 320.152822][T10707] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 320.152822][T10707] program syz.2.2182 not setting count and/or reply_len properly [ 320.184235][ T28] audit: type=1400 audit(1780031515.807:2797): avc: denied { write } for pid=10679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.243472][ T28] audit: type=1400 audit(1780031515.867:2798): avc: denied { write } for pid=10710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.393266][T10712] syzkaller0: entered promiscuous mode [ 320.405536][T10659] loop1: detected capacity change from 0 to 4096 [ 320.419463][T10712] syzkaller0: entered allmulticast mode [ 320.546829][T10659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.666151][T10721] loop5: detected capacity change from 0 to 512 [ 320.699814][T10721] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 320.787659][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.073154][T10723] siw: device registration error -23 [ 321.084954][T10725] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.153793][T10725] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 321.185526][T10723] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 321.231854][T10725] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2193: bg 0: block 248: padding at end of block bitmap is not set [ 321.283288][T10725] loop5: lost filesystem error report for type 5 error -117 [ 321.285464][T10725] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2193: Failed to acquire dquot type 1 [ 321.293239][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 321.293388][ C1] EXT4-fs (loop5): last error at time 1780031516: ext4_validate_block_bitmap:441 [ 321.351601][T10725] loop5: lost filesystem error report for type 5 error -28 [ 321.354318][T10725] EXT4-fs (loop5): 1 truncate cleaned up [ 321.403328][T10725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 321.462694][T10744] syzkaller0: entered promiscuous mode [ 321.480475][T10744] syzkaller0: entered allmulticast mode [ 321.510595][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 321.520834][ T5924] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 1 [ 321.532380][ T5924] loop5: lost filesystem error report for type 5 error -117 [ 321.755367][T10752] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 321.863239][T10754] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 321.863239][T10754] program syz.3.2202 not setting count and/or reply_len properly [ 322.765713][T10766] set_capacity_and_notify: 3 callbacks suppressed [ 322.765730][T10766] loop5: detected capacity change from 0 to 1024 [ 322.803929][T10766] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.843355][T10766] EXT4-fs error (device loop5): ext4_quota_enable:7225: comm syz.5.2209: inode #131072: comm syz.5.2209: iget: illegal inode # [ 322.872337][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 322.872351][ T28] audit: type=1400 audit(1780031518.497:2803): avc: denied { shutdown } for pid=10767 comm="syz.1.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.960461][T10766] loop5: lost filesystem error report for type 5 error -117 [ 322.966180][T10766] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.2209: Bad quota inode: 131072, type: 2 [ 322.973528][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 322.973546][ C0] EXT4-fs (loop5): initial error at time 1780031518: ext4_quota_enable:7225 [ 322.973566][ C0] EXT4-fs (loop5): last error at time 1780031518: ext4_quota_enable:7225 [ 323.087208][T10766] loop5: lost filesystem error report for type 5 error -117 [ 323.087316][T10766] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 323.187034][T10766] EXT4-fs (loop5): mount failed [ 323.318978][T10774] syzkaller0: entered promiscuous mode [ 323.336122][T10774] syzkaller0: entered allmulticast mode [ 323.573835][T10787] loop1: detected capacity change from 0 to 512 [ 323.588784][T10787] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 324.488724][T10794] SELinux: failed to load policy [ 325.453981][T10809] syzkaller0: entered promiscuous mode [ 325.470885][T10809] syzkaller0: entered allmulticast mode [ 325.591434][T10819] loop3: detected capacity change from 0 to 512 [ 325.610776][T10819] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 325.684329][T10825] loop3: detected capacity change from 0 to 1024 [ 325.719180][T10825] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.731857][T10825] EXT4-fs error (device loop3): ext4_quota_enable:7225: comm syz.3.2231: inode #131072: comm syz.3.2231: iget: illegal inode # [ 325.755319][T10825] loop3: lost filesystem error report for type 5 error -117 [ 325.755477][T10825] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2231: Bad quota inode: 131072, type: 2 [ 325.762907][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 325.762924][ C0] EXT4-fs (loop3): initial error at time 1780031521: ext4_quota_enable:7225 [ 325.762944][ C0] EXT4-fs (loop3): last error at time 1780031521: ext4_quota_enable:7225 [ 325.810145][T10825] loop3: lost filesystem error report for type 5 error -117 [ 325.810232][T10825] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 325.843546][T10825] EXT4-fs (loop3): mount failed [ 326.597526][T10848] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.067992][T10848] loop5: detected capacity change from 0 to 512 [ 327.186773][T10848] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 327.334424][T10856] syzkaller0: entered promiscuous mode [ 327.359918][T10856] syzkaller0: entered allmulticast mode [ 327.490661][T10863] loop5: detected capacity change from 0 to 2048 [ 327.497956][T10863] EXT4-fs: quotafile must be on filesystem root [ 327.708000][T10874] loop3: detected capacity change from 0 to 256 [ 327.721093][T10876] netlink: 'syz.2.2242': attribute type 4 has an invalid length. [ 327.735743][T10875] loop6: detected capacity change from 0 to 1024 [ 327.751146][T10874] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.789117][T10875] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.799902][T10878] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 327.799902][T10878] program syz.2.2242 not setting count and/or reply_len properly [ 327.862385][T10874] netlink: 'syz.3.2246': attribute type 3 has an invalid length. [ 327.911373][T10875] EXT4-fs error (device loop6): ext4_quota_enable:7225: comm syz.6.2247: inode #131072: comm syz.6.2247: iget: illegal inode # [ 327.933772][T10875] loop6: lost filesystem error report for type 5 error -117 [ 327.933930][T10875] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.2247: Bad quota inode: 131072, type: 2 [ 327.941292][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 327.941313][ C1] EXT4-fs (loop6): initial error at time 1780031523: ext4_quota_enable:7225 [ 327.941341][ C1] EXT4-fs (loop6): last error at time 1780031523: ext4_quota_enable:7225 [ 328.021105][T10875] loop6: lost filesystem error report for type 5 error -117 [ 328.021238][T10875] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 328.070398][T10875] EXT4-fs (loop6): mount failed [ 328.209356][T10881] loop1: detected capacity change from 0 to 2048 [ 329.184711][T10896] loop1: detected capacity change from 0 to 8192 [ 329.243883][T10896] loop1: p1 < > p2 p4 < p5 > [ 329.248698][T10896] loop1: partition table partially beyond EOD, truncated [ 329.263832][T10896] loop1: p1 start 134217728 is beyond EOD, truncated [ 329.280892][T10896] loop1: p2 size 591360 extends beyond EOD, truncated [ 329.294614][T10896] loop1: p5 size 591360 extends beyond EOD, truncated [ 329.319635][ T28] audit: type=1400 audit(1780031524.937:2804): avc: denied { accept } for pid=10892 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.343551][ T28] audit: type=1400 audit(1780031524.967:2805): avc: denied { write } for pid=10892 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.398706][ T28] audit: type=1400 audit(1780031525.017:2806): avc: denied { read } for pid=10892 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.446052][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2253'. [ 330.081063][T10904] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 330.192794][T10904] loop2: detected capacity change from 0 to 512 [ 330.210726][T10904] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 330.661823][T10919] loop2: detected capacity change from 0 to 256 [ 330.705636][T10919] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.887669][T10919] netlink: 'syz.2.2260': attribute type 3 has an invalid length. [ 331.282568][T10925] loop3: detected capacity change from 0 to 1024 [ 331.293483][T10925] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 331.329938][T10925] EXT4-fs error (device loop3): ext4_quota_enable:7225: comm syz.3.2263: inode #131072: comm syz.3.2263: iget: illegal inode # [ 331.343063][T10925] loop3: lost filesystem error report for type 5 error -117 [ 331.343213][T10925] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2263: Bad quota inode: 131072, type: 2 [ 331.361747][T10925] loop3: lost filesystem error report for type 5 error -117 [ 331.361832][T10925] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 331.369188][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 331.369206][ C0] EXT4-fs (loop3): initial error at time 1780031526: ext4_quota_enable:7225 [ 331.369228][ C0] EXT4-fs (loop3): last error at time 1780031526: ext4_quota_enable:7228 [ 331.483690][T10925] EXT4-fs (loop3): mount failed [ 331.901080][T10936] netlink: 'syz.2.2266': attribute type 4 has an invalid length. [ 331.957115][T10936] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 331.957115][T10936] program syz.2.2266 not setting count and/or reply_len properly [ 332.359011][T10953] bridge11: entered promiscuous mode [ 332.380932][T10953] bridge11: entered allmulticast mode [ 332.856823][ T28] audit: type=1400 audit(1780031528.477:2807): avc: denied { ioctl } for pid=10958 comm="syz.3.2275" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.437314][T10967] loop6: detected capacity change from 0 to 128 [ 333.732130][ T28] audit: type=1400 audit(1780031529.147:2808): avc: denied { recv } for pid=10964 comm="syz.1.2277" saddr=10.128.0.163 src=42936 daddr=10.128.1.69 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 333.798348][T10967] vfat: Unknown parameter '0x0000000000000004' [ 334.256855][T10973] loop6: detected capacity change from 0 to 256 [ 334.346929][T10973] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.555403][T10973] netlink: 'syz.6.2279': attribute type 3 has an invalid length. [ 334.994225][T10980] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 335.036596][T10980] siw: device registration error -23 [ 335.067643][T10980] loop1: detected capacity change from 0 to 512 [ 335.078679][T10980] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 335.324216][T10989] loop1: detected capacity change from 0 to 2048 [ 335.989858][T10997] siw: device registration error -23 [ 335.998090][T10997] loop5: detected capacity change from 0 to 512 [ 336.007652][T10997] EXT4-fs (loop5): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 336.058572][T10999] loop2: detected capacity change from 0 to 2048 [ 336.069962][T10999] EXT4-fs: quotafile must be on filesystem root [ 336.141570][T11001] loop5: detected capacity change from 0 to 128 [ 336.149663][T11001] vfat: Unknown parameter '0x0000000000000004' [ 336.340212][T11011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.457819][T11032] loop2: detected capacity change from 0 to 2048 [ 337.747543][T11038] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 337.853770][T11038] siw: device registration error -23 [ 337.861960][T11038] loop3: detected capacity change from 0 to 512 [ 337.876317][T11038] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 337.921434][T11040] netlink: 'syz.5.2299': attribute type 4 has an invalid length. [ 337.948786][T11040] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 337.948786][T11040] program syz.5.2299 not setting count and/or reply_len properly [ 338.287177][T11047] loop2: detected capacity change from 0 to 1024 [ 338.308988][T11047] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.345317][T11047] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.2306: inode #131072: comm syz.2.2306: iget: illegal inode # [ 338.371146][T11047] loop2: lost filesystem error report for type 5 error -117 [ 338.371266][T11047] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.2306: Bad quota inode: 131072, type: 2 [ 338.389876][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 338.389898][ C0] EXT4-fs (loop2): initial error at time 1780031533: ext4_quota_enable:7225 [ 338.389945][ C0] EXT4-fs (loop2): last error at time 1780031533: ext4_quota_enable:7225 [ 338.483500][T11047] loop2: lost filesystem error report for type 5 error -117 [ 338.483748][T11047] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 338.545200][T11047] EXT4-fs (loop2): mount failed [ 338.857646][T11044] loop1: detected capacity change from 0 to 4096 [ 338.919827][T11044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.987121][T11055] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.000376][ T28] audit: type=1400 audit(1780031534.627:2809): avc: denied { write } for pid=11043 comm="syz.1.2305" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.092420][T11055] siw: device registration error -23 [ 339.122229][T11055] loop3: detected capacity change from 0 to 512 [ 339.183856][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.218578][T11057] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 339.229931][T11055] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 339.239830][T11057] SELinux: failed to load policy [ 339.298136][T11059] loop1: detected capacity change from 0 to 2048 [ 339.321343][T11059] EXT4-fs: quotafile must be on filesystem root [ 339.328924][T11063] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.468865][T11067] loop2: detected capacity change from 0 to 512 [ 339.523443][T11063] siw: device registration error -23 [ 339.590487][T11063] loop3: detected capacity change from 0 to 512 [ 339.612877][T11067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.643525][T11063] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 339.742416][T11067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.767738][T11067] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.523292][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.760245][T11083] loop3: detected capacity change from 0 to 1024 [ 340.783835][T11083] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.795387][T11083] EXT4-fs error (device loop3): ext4_quota_enable:7225: comm syz.3.2317: inode #131072: comm syz.3.2317: iget: illegal inode # [ 340.811354][T11085] loop2: detected capacity change from 0 to 512 [ 340.820036][T11083] loop3: lost filesystem error report for type 5 error -117 [ 340.820133][T11083] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2317: Bad quota inode: 131072, type: 2 [ 340.827455][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 340.827468][ C0] EXT4-fs (loop3): initial error at time 1780031536: ext4_quota_enable:7225 [ 340.827488][ C0] EXT4-fs (loop3): last error at time 1780031536: ext4_quota_enable:7225 [ 340.909752][T11085] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 340.921317][T11085] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 340.931394][T11085] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2316: Corrupt directory, running e2fsck is recommended [ 340.945219][T11085] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 340.953586][T11085] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2316: corrupted in-inode xattr: e_name out of bounds [ 340.967580][T11085] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 340.967860][T11085] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2316: couldn't read orphan inode 15 (err -117) [ 340.977046][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 340.977064][ C0] EXT4-fs (loop2): initial error at time 1780031536: ext4_iget_extra_inode:5128: inode 15 [ 340.977098][ C0] EXT4-fs (loop2): last error at time 1780031536: ext4_iget_extra_inode:5128: inode 15 [ 341.015069][T11085] loop2: lost filesystem error report for type 5 error -117 [ 341.018671][T11085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.042583][T11085] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 341.054086][T11085] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 341.064195][T11085] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2316: Corrupt directory, running e2fsck is recommended [ 341.096940][T11083] loop3: lost filesystem error report for type 5 error -117 [ 341.097052][T11083] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 341.146640][T11083] EXT4-fs (loop3): mount failed [ 341.209131][T11090] loop1: detected capacity change from 0 to 2048 [ 341.224051][T11090] EXT4-fs: quotafile must be on filesystem root [ 341.376289][T11092] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 341.393707][T11092] SELinux: failed to load policy [ 341.530255][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.560922][T11096] loop6: detected capacity change from 0 to 1024 [ 341.570417][T11096] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 341.591385][T11096] EXT4-fs error (device loop6): ext4_quota_enable:7225: comm syz.6.2321: inode #131072: comm syz.6.2321: iget: illegal inode # [ 341.604932][T11096] loop6: lost filesystem error report for type 5 error -117 [ 341.605570][T11096] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.2321: Bad quota inode: 131072, type: 2 [ 341.610821][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 341.614475][T11096] loop6: lost filesystem error report for type 5 error -117 [ 341.624185][ C1] EXT4-fs (loop6): initial error at time 1780031537: ext4_quota_enable:7225 [ 341.646583][ C1] EXT4-fs (loop6): last error at time 1780031537: ext4_quota_enable:7225 [ 341.654556][T11096] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 341.659265][T11101] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 341.681607][T11096] EXT4-fs (loop6): mount failed [ 341.715257][T11101] loop2: detected capacity change from 0 to 512 [ 341.735390][T11101] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 342.087629][T11112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.151468][T11115] netlink: 'syz.5.2326': attribute type 4 has an invalid length. [ 342.220668][T11115] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 342.220668][T11115] program syz.5.2326 not setting count and/or reply_len properly [ 342.225927][T11112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.270950][T11112] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.535091][ T28] audit: type=1400 audit(1780031538.157:2810): avc: denied { write } for pid=11111 comm="syz.3.2327" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.585034][T11122] EXT4-fs: quotafile must be on filesystem root [ 342.632387][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.373822][T11136] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 344.415884][T11136] SELinux: failed to load policy [ 345.312217][T11140] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 345.362685][T11140] siw: device registration error -23 [ 345.370753][T11140] set_capacity_and_notify: 2 callbacks suppressed [ 345.370769][T11140] loop3: detected capacity change from 0 to 512 [ 345.401193][T11134] loop1: detected capacity change from 0 to 4096 [ 345.425701][T11140] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 345.496116][T11134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.723087][T11138] loop6: detected capacity change from 0 to 4096 [ 345.786197][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.827712][T11147] netlink: 'syz.3.2336': attribute type 4 has an invalid length. [ 345.837344][T11147] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 345.837344][T11147] program syz.3.2336 not setting count and/or reply_len properly [ 346.213281][T11138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.304917][T11156] loop1: detected capacity change from 0 to 256 [ 346.370884][ T28] audit: type=1400 audit(1780031541.967:2811): avc: denied { write } for pid=11137 comm="syz.6.2333" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.412019][T11156] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.509344][T11156] netlink: 'syz.1.2337': attribute type 3 has an invalid length. [ 346.570220][T10105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.297246][T11160] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 347.459812][T11165] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 347.591222][T11165] siw: device registration error -23 [ 347.599669][T11167] loop2: detected capacity change from 0 to 512 [ 347.608706][T11165] loop6: detected capacity change from 0 to 512 [ 347.620962][T11167] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 348.309867][T11171] loop1: detected capacity change from 0 to 1024 [ 348.328773][T11165] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 348.665323][T11171] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.095307][T11171] EXT4-fs error (device loop1): ext4_quota_enable:7225: comm syz.1.2342: inode #131072: comm syz.1.2342: iget: illegal inode # [ 349.280440][T11175] loop5: detected capacity change from 0 to 2048 [ 349.289998][T11171] loop1: lost filesystem error report for type 5 error -117 [ 349.290182][T11171] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.2342: Bad quota inode: 131072, type: 2 [ 349.297524][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 349.297543][ C0] EXT4-fs (loop1): initial error at time 1780031544: ext4_quota_enable:7225 [ 349.297583][ C0] EXT4-fs (loop1): last error at time 1780031544: ext4_quota_enable:7225 [ 349.353423][T11177] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 349.485955][T11177] loop2: detected capacity change from 0 to 512 [ 349.498954][T11171] loop1: lost filesystem error report for type 5 error -117 [ 349.499076][T11171] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 349.521474][T11171] EXT4-fs (loop1): mount failed [ 349.535086][T11177] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 349.891714][T11187] loop2: detected capacity change from 0 to 4096 [ 349.962164][T11187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.100649][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.582966][T11198] netlink: 'syz.5.2351': attribute type 4 has an invalid length. [ 350.693316][T11200] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 350.693316][T11200] program syz.5.2351 not setting count and/or reply_len properly [ 350.907179][T11195] loop2: detected capacity change from 0 to 4096 [ 351.005615][T11195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.271020][ T28] audit: type=1400 audit(1780031546.867:2812): avc: denied { write } for pid=11192 comm="syz.2.2350" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.398662][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.102610][T11211] netlink: 'syz.1.2354': attribute type 4 has an invalid length. [ 352.111381][T11211] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 352.111381][T11211] program syz.1.2354 not setting count and/or reply_len properly [ 352.154978][T11207] loop2: detected capacity change from 0 to 256 [ 352.359420][T11207] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.622729][T11217] loop1: detected capacity change from 0 to 512 [ 353.656634][T11217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.700653][T11207] netlink: 'syz.2.2353': attribute type 3 has an invalid length. [ 353.753114][T11217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.790477][T11217] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.894952][T11222] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 353.906999][ T28] audit: type=1400 audit(1780031549.527:2813): avc: denied { write } for pid=11216 comm="syz.1.2356" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.969463][T11222] siw: device registration error -23 [ 353.977895][T11222] loop3: detected capacity change from 0 to 512 [ 353.984936][T11222] EXT4-fs (loop3): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 354.019222][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.176768][T11230] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 354.176768][T11230] program syz.2.2359 not setting count and/or reply_len properly [ 354.276984][T11232] loop3: detected capacity change from 0 to 512 [ 354.343970][T11232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.430528][T11232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.513172][T11232] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.608407][T11232] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2360: corrupted xattr block 32: overlapping e_value [ 354.622228][ T28] audit: type=1400 audit(1780031550.227:2814): avc: denied { write } for pid=11231 comm="syz.3.2360" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.712953][T11232] EXT4-fs (loop3): Remounting filesystem read-only [ 354.750588][T11232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 354.832927][T11232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 354.861423][T11235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 354.892279][T11235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 354.919701][T11232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 354.980019][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.208394][T11237] loop3: detected capacity change from 0 to 2048 [ 355.853075][T11249] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.576178][T11251] loop2: detected capacity change from 0 to 512 [ 356.875001][T11251] EXT4-fs (loop2): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 357.501619][T11258] loop3: detected capacity change from 0 to 512 [ 357.517025][T11258] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 357.528729][T11258] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 357.538860][T11258] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2367: Corrupt directory, running e2fsck is recommended [ 357.552755][T11258] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 357.563868][T11258] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2367: corrupted in-inode xattr: e_name out of bounds [ 357.577787][T11258] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.578089][T11258] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2367: couldn't read orphan inode 15 (err -117) [ 357.587228][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 357.587251][ C1] EXT4-fs (loop3): initial error at time 1780031553: ext4_iget_extra_inode:5128: inode 15 [ 357.587282][ C1] EXT4-fs (loop3): last error at time 1780031553: ext4_iget_extra_inode:5128: inode 15 [ 357.625034][T11258] loop3: lost filesystem error report for type 5 error -117 [ 357.626367][T11258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.647490][T11258] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 357.659148][T11258] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 357.669290][T11258] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2367: Corrupt directory, running e2fsck is recommended [ 358.075135][T11265] loop2: detected capacity change from 0 to 512 [ 358.096507][T11265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.133141][T11265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.174771][T11265] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.219689][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.277893][ T28] audit: type=1400 audit(1780031553.897:2815): avc: denied { write } for pid=11263 comm="syz.2.2370" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.306701][T11273] loop6: detected capacity change from 0 to 512 [ 358.341204][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.355962][T11273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.384810][T11273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.404470][T11273] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.440623][ T28] audit: type=1400 audit(1780031554.057:2816): avc: denied { write } for pid=11272 comm="syz.6.2372" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.440656][T11273] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2372: corrupted xattr block 32: overlapping e_value [ 358.477307][T11273] EXT4-fs (loop6): Remounting filesystem read-only [ 358.484314][T11273] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 358.493332][T11273] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 358.502448][T11273] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 358.614999][T10105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.721372][T11284] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 358.721372][T11284] program syz.3.2375 not setting count and/or reply_len properly [ 359.682074][T11245] loop1: detected capacity change from 0 to 4096 [ 360.451474][T11290] netlink: 'syz.6.2377': attribute type 4 has an invalid length. [ 361.355913][T11293] loop1: detected capacity change from 0 to 2048 [ 361.439015][T11296] loop3: detected capacity change from 0 to 256 [ 361.493868][T11296] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.594167][T11300] tipc: Started in network mode [ 361.599069][T11300] tipc: Node identity 4, cluster identity 4711 [ 361.605293][T11300] tipc: Node number set to 4 [ 361.647671][T11301] netlink: 'syz.3.2379': attribute type 3 has an invalid length. [ 362.083629][T11306] loop5: detected capacity change from 0 to 512 [ 362.168708][T11306] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 362.180278][T11306] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 362.190386][T11306] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2382: Corrupt directory, running e2fsck is recommended [ 362.204391][T11306] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 362.212747][T11306] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2382: corrupted in-inode xattr: e_name out of bounds [ 362.226588][T11306] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 362.226773][T11306] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2382: couldn't read orphan inode 15 (err -117) [ 362.235932][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 362.235956][ C1] EXT4-fs (loop5): initial error at time 1780031557: ext4_iget_extra_inode:5128: inode 15 [ 362.235994][ C1] EXT4-fs (loop5): last error at time 1780031557: ext4_iget_extra_inode:5128: inode 15 [ 362.274145][T11306] loop5: lost filesystem error report for type 5 error -117 [ 362.277024][T11306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.298220][T11306] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 362.309702][T11306] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 362.319891][T11306] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2382: Corrupt directory, running e2fsck is recommended [ 362.596184][T11314] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2384'. [ 362.649122][ T28] audit: type=1326 audit(1780031558.267:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14105ece59 code=0x0 [ 362.691210][T11318] loop1: detected capacity change from 0 to 512 [ 362.729854][T11318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.751113][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2384'. [ 362.774812][T11318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.804435][ T28] audit: type=1400 audit(1780031558.427:2818): avc: denied { bind } for pid=11313 comm="syz.6.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 362.837671][T11318] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.880174][ T28] audit: type=1400 audit(1780031558.427:2819): avc: denied { node_bind } for pid=11313 comm="syz.6.2384" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 362.911295][T11318] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2386: corrupted xattr block 32: overlapping e_value [ 362.953781][T11318] EXT4-fs (loop1): Remounting filesystem read-only [ 362.972545][ T28] audit: type=1400 audit(1780031558.537:2820): avc: denied { write } for pid=11317 comm="syz.1.2386" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.997432][T11318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 363.024310][T11318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 363.055947][T11318] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 363.105696][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.317375][T11327] loop1: detected capacity change from 0 to 1764 [ 363.544114][T11329] loop1: detected capacity change from 0 to 2048 [ 363.686740][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.752356][T11332] loop6: detected capacity change from 0 to 1024 [ 363.775291][T11332] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.870133][T11332] EXT4-fs error (device loop6): ext4_quota_enable:7225: comm syz.6.2392: inode #131072: comm syz.6.2392: iget: illegal inode # [ 363.884172][T11332] loop6: lost filesystem error report for type 5 error -117 [ 363.884271][T11332] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.2392: Bad quota inode: 131072, type: 2 [ 363.891793][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 363.891826][ C1] EXT4-fs (loop6): initial error at time 1780031559: ext4_quota_enable:7225 [ 363.891845][ C1] EXT4-fs (loop6): last error at time 1780031559: ext4_quota_enable:7225 [ 363.891862][T11337] loop5: detected capacity change from 0 to 256 [ 363.891872][ C1] [ 363.935972][T11332] loop6: lost filesystem error report for type 5 error -117 [ 363.937249][T11332] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 363.943353][T11337] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.945020][T11332] EXT4-fs (loop6): mount failed [ 364.135404][T11337] netlink: 'syz.5.2391': attribute type 3 has an invalid length. [ 364.200734][T11343] loop3: detected capacity change from 0 to 2048 [ 364.407552][T11352] loop1: detected capacity change from 0 to 1024 [ 364.415415][T11352] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.435214][T11352] EXT4-fs error (device loop1): ext4_quota_enable:7225: comm syz.1.2397: inode #131072: comm syz.1.2397: iget: illegal inode # [ 364.448844][T11352] loop1: lost filesystem error report for type 5 error -117 [ 364.448938][T11352] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.2397: Bad quota inode: 131072, type: 2 [ 364.456361][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 364.456384][ C0] EXT4-fs (loop1): initial error at time 1780031560: ext4_quota_enable:7225 [ 364.456420][ C0] EXT4-fs (loop1): last error at time 1780031560: ext4_quota_enable:7225 [ 364.491736][T11352] loop1: lost filesystem error report for type 5 error -117 [ 364.493449][T11352] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 364.516592][T11352] EXT4-fs (loop1): mount failed [ 365.606094][T11358] loop5: detected capacity change from 0 to 512 [ 365.682329][T11358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.714174][T11358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.728969][T11358] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.586795][ T28] audit: type=1400 audit(1780031562.207:2821): avc: denied { write } for pid=11357 comm="syz.5.2398" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.608753][T11358] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2398: corrupted xattr block 32: overlapping e_value [ 366.659134][T11369] sg_write: data in/out 327651/40 bytes for SCSI command 0x0-- guessing data in; [ 366.659134][T11369] program syz.3.2399 not setting count and/or reply_len properly [ 366.865928][T11358] EXT4-fs (loop5): Remounting filesystem read-only [ 366.879777][T11358] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 366.889159][T11358] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 367.616334][T11358] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 368.183419][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.759506][T11379] loop2: detected capacity change from 0 to 512 [ 368.862770][T11379] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 368.877008][T11379] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 368.887392][T11379] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2401: Corrupt directory, running e2fsck is recommended [ 368.901845][T11379] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 368.910085][T11379] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2401: corrupted in-inode xattr: e_name out of bounds [ 368.924229][T11379] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 368.924437][T11379] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2401: couldn't read orphan inode 15 (err -117) [ 368.933780][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 368.933793][ C1] EXT4-fs (loop2): initial error at time 1780031564: ext4_iget_extra_inode:5128: inode 15 [ 368.933826][ C1] EXT4-fs (loop2): last error at time 1780031564: ext4_iget_extra_inode:5128: inode 15 [ 369.041019][T11379] loop2: lost filesystem error report for type 5 error -117 [ 369.041509][T11379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.310913][T11379] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 369.322442][T11379] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 369.332594][T11379] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2401: Corrupt directory, running e2fsck is recommended [ 370.199447][T11386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 370.226045][T11386] siw: device registration error -23 [ 370.234004][T11386] loop6: detected capacity change from 0 to 512 [ 370.246611][T11386] EXT4-fs (loop6): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 370.617105][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.617232][T11402] bridge2: entered promiscuous mode [ 370.641085][T11402] bridge2: entered allmulticast mode [ 370.675734][T11404] loop6: detected capacity change from 0 to 2048 [ 370.693085][T11404] EXT4-fs: quotafile must be on filesystem root [ 370.911741][T11411] batadv1: entered promiscuous mode [ 370.916974][T11411] batadv1: entered allmulticast mode [ 370.923220][T11411] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.073567][T11414] loop3: detected capacity change from 0 to 512 [ 371.088075][T11414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.132411][T11414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.148903][T11414] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.162594][ T28] audit: type=1400 audit(1780031566.787:2822): avc: denied { write } for pid=11413 comm="syz.3.2414" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.180876][T11414] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2414: corrupted xattr block 32: overlapping e_value [ 371.273065][T11414] EXT4-fs (loop3): Remounting filesystem read-only [ 371.279826][T11414] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 371.301925][T11414] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 371.327982][T11414] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 371.366249][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.971101][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2420'. [ 372.553928][T11442] loop6: detected capacity change from 0 to 512 [ 372.634650][T11442] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.774048][T11442] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 373.133947][ T28] audit: type=1400 audit(1780031568.757:2823): avc: denied { accept } for pid=11434 comm="syz.6.2420" path="socket:[31481]" dev="sockfs" ino=31481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 373.430233][T11453] loop2: detected capacity change from 0 to 512 [ 373.493685][T11453] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 373.558348][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.583584][T11453] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 373.595636][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.655667][T11453] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2423: Corrupt directory, running e2fsck is recommended [ 374.188487][T11453] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 374.257285][T11453] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2423: corrupted in-inode xattr: e_name out of bounds [ 374.303785][T11453] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.304616][T11453] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2423: couldn't read orphan inode 15 (err -117) [ 374.313883][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 374.313919][ C1] EXT4-fs (loop2): initial error at time 1780031569: ext4_iget_extra_inode:5128: inode 15 [ 374.313969][ C1] EXT4-fs (loop2): last error at time 1780031569: ext4_iget_extra_inode:5128: inode 15 [ 374.471661][T11469] loop3: detected capacity change from 0 to 512 [ 374.566066][T11469] EXT4-fs: Ignoring removed nobh option [ 374.615929][T11469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 374.718398][T11469] EXT4-fs (loop3): 1 truncate cleaned up [ 374.765095][T11469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.765870][T11453] loop2: lost filesystem error report for type 5 error -117 [ 374.772114][T11472] loop6: detected capacity change from 0 to 512 [ 374.812123][T11453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.904924][T11453] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 374.929242][T11472] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 375.056051][T11453] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 375.072136][T11471] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.084715][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.103539][T11471] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 375.122592][T11453] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2423: Corrupt directory, running e2fsck is recommended [ 375.640130][T11485] loop5: detected capacity change from 0 to 512 [ 375.690199][T11485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.726907][T11485] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.748528][ T28] audit: type=1400 audit(1780031571.367:2824): avc: denied { write } for pid=11483 comm="syz.5.2435" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.762392][T11485] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2435: corrupted inode contents [ 375.792041][T11485] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.2435: mark_inode_dirty error [ 375.807128][T11491] loop1: detected capacity change from 0 to 2048 [ 375.816031][T11485] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2435: corrupted inode contents [ 375.833181][T11491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.853856][T11485] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2435: mark_inode_dirty error [ 375.877480][ T28] audit: type=1400 audit(1780031571.477:2825): avc: denied { write } for pid=11490 comm="syz.1.2436" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.218419][T11457] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 376.237451][T11489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2431'. [ 376.623292][ T8550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.190452][T11521] loop5: detected capacity change from 0 to 1024 [ 378.210716][T11521] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.241737][T11521] EXT4-fs error (device loop5): ext4_quota_enable:7225: comm syz.5.2442: inode #131072: comm syz.5.2442: iget: illegal inode # [ 378.263697][T11521] loop5: lost filesystem error report for type 5 error -117 [ 378.263799][T11521] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.2442: Bad quota inode: 131072, type: 2 [ 378.271203][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 378.271222][ C0] EXT4-fs (loop5): initial error at time 1780031573: ext4_quota_enable:7225 [ 378.271246][ C0] EXT4-fs (loop5): last error at time 1780031573: ext4_quota_enable:7225 [ 378.374857][T11521] loop5: lost filesystem error report for type 5 error -117 [ 378.374981][T11521] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 378.419389][T11521] EXT4-fs (loop5): mount failed [ 378.871404][T11457] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 378.951018][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.991096][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.100611][ T28] audit: type=1400 audit(1780031574.717:2826): avc: denied { read } for pid=11526 comm="syz.1.2445" path="socket:[31532]" dev="sockfs" ino=31532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.166427][T11534] netlink: 'syz.3.2447': attribute type 46 has an invalid length. [ 379.196800][ T28] audit: type=1326 audit(1780031574.817:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.226576][ T28] audit: type=1326 audit(1780031574.817:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.252658][ T28] audit: type=1326 audit(1780031574.817:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.281136][T11540] 9p: Bad value for 'rfdno' [ 379.286702][ T28] audit: type=1326 audit(1780031574.817:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.312817][ T28] audit: type=1326 audit(1780031574.817:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.339033][ T28] audit: type=1326 audit(1780031574.817:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.364860][ T28] audit: type=1326 audit(1780031574.817:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.390574][ T28] audit: type=1326 audit(1780031574.817:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.416234][ T28] audit: type=1326 audit(1780031574.817:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.3.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe46e9ce59 code=0x7ffc0000 [ 379.569485][T11547] loop2: detected capacity change from 0 to 1024 [ 379.580579][T11547] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 379.599526][T11547] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.2451: inode #131072: comm syz.2.2451: iget: illegal inode # [ 379.614264][T11550] loop1: detected capacity change from 0 to 256 [ 379.621012][T11547] loop2: lost filesystem error report for type 5 error -117 [ 379.622016][T11547] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.2451: Bad quota inode: 131072, type: 2 [ 379.640641][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 379.640657][ C0] EXT4-fs (loop2): initial error at time 1780031575: ext4_quota_enable:7225 [ 379.640680][ C0] EXT4-fs (loop2): last error at time 1780031575: ext4_quota_enable:7225 [ 379.687222][T11550] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.757848][T11550] netlink: 'syz.1.2452': attribute type 3 has an invalid length. [ 379.801647][T11547] loop2: lost filesystem error report for type 5 error -117 [ 379.803616][T11547] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 379.878565][T11547] EXT4-fs (loop2): mount failed [ 380.008125][ C1] ================================================================== [ 380.016240][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 380.023439][ C1] [ 380.025758][ C1] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 0: [ 380.033818][ C1] can_can_gw_rcv+0x863/0x870 [ 380.038498][ C1] can_rcv_filter+0xc3/0x480 [ 380.043098][ C1] can_receive+0x13e/0x190 [ 380.047519][ C1] can_rcv+0x17d/0x1f0 [ 380.051596][ C1] process_backlog+0x363/0x670 [ 380.056374][ C1] __napi_poll+0x61/0x300 [ 380.060718][ C1] net_rx_action+0x452/0x930 [ 380.065323][ C1] handle_softirqs+0xb9/0x280 [ 380.069997][ C1] run_ksoftirqd+0x1c/0x30 [ 380.074416][ C1] smpboot_thread_fn+0x32a/0x510 [ 380.079365][ C1] kthread+0x22a/0x280 [ 380.083425][ C1] ret_from_fork+0x146/0x330 [ 380.088022][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.092798][ C1] [ 380.095115][ C1] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 1: [ 380.103177][ C1] can_can_gw_rcv+0x863/0x870 [ 380.107856][ C1] can_rcv_filter+0xc3/0x480 [ 380.112456][ C1] can_receive+0x13e/0x190 [ 380.116878][ C1] can_rcv+0x17d/0x1f0 [ 380.120952][ C1] process_backlog+0x363/0x670 [ 380.125731][ C1] __napi_poll+0x61/0x300 [ 380.130071][ C1] net_rx_action+0x452/0x930 [ 380.134671][ C1] handle_softirqs+0xb9/0x280 [ 380.139349][ C1] do_softirq+0x45/0x60 [ 380.143517][ C1] __local_bh_enable_ip+0x70/0x80 [ 380.148561][ C1] __alloc_skb+0x2b6/0x690 [ 380.152971][ C1] netlink_alloc_large_skb+0xbf/0xf0 [ 380.158254][ C1] netlink_sendmsg+0x40c/0x6f0 [ 380.163020][ C1] ____sys_sendmsg+0x563/0x5b0 [ 380.167786][ C1] ___sys_sendmsg+0x195/0x1e0 [ 380.172458][ C1] __x64_sys_sendmsg+0xd4/0x160 [ 380.177309][ C1] x64_sys_call+0x194c/0x3020 [ 380.181978][ C1] do_syscall_64+0x12c/0x3b0 [ 380.186560][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.192441][ C1] [ 380.194747][ C1] value changed: 0x00005c74 -> 0x00005c75 [ 380.200443][ C1] [ 380.202749][ C1] Reported by Kernel Concurrency Sanitizer on: [ 380.208884][ C1] CPU: 1 UID: 0 PID: 11547 Comm: syz.2.2451 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 380.219808][ C1] Tainted: [W]=WARN [ 380.223592][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.233637][ C1] ================================================================== [ 380.332534][T11557] loop3: detected capacity change from 0 to 512 [ 380.411822][T11557] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.523399][T11557] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 380.571223][T11557] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2454: Corrupt directory, running e2fsck is recommended [ 380.675460][T11557] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 380.736114][T11557] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2454: corrupted in-inode xattr: e_name out of bounds [ 380.847524][T11557] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.851789][T11557] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2454: couldn't read orphan inode 15 (err -117) [ 380.860963][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 380.860977][ C0] EXT4-fs (loop3): initial error at time 1780031576: ext4_iget_extra_inode:5128: inode 15 [ 380.861006][ C0] EXT4-fs (loop3): last error at time 1780031576: ext4_iget_extra_inode:5128: inode 15 [ 381.146432][T11557] loop3: lost filesystem error report for type 5 error -117 [ 381.152304][T11557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.248037][T11556] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 381.261419][T11556] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 381.279883][T11556] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2454: Corrupt directory, running e2fsck is recommended [ 382.129893][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.074590][ C0] ================================================================== [ 383.082707][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 383.089904][ C0] [ 383.092212][ C0] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 1: [ 383.100268][ C0] can_can_gw_rcv+0x863/0x870 [ 383.104941][ C0] can_rcv_filter+0xc3/0x480 [ 383.109530][ C0] can_receive+0x13e/0x190 [ 383.113947][ C0] can_rcv+0x17d/0x1f0 [ 383.118018][ C0] process_backlog+0x363/0x670 [ 383.122791][ C0] __napi_poll+0x61/0x300 [ 383.127121][ C0] net_rx_action+0x452/0x930 [ 383.131717][ C0] handle_softirqs+0xb9/0x280 [ 383.136384][ C0] do_softirq+0x45/0x60 [ 383.140546][ C0] __local_bh_enable_ip+0x70/0x80 [ 383.145578][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 383.150522][ C0] nsim_dev_trap_report_work+0x53b/0x640 [ 383.156170][ C0] process_scheduled_works+0x4f0/0x9c0 [ 383.161632][ C0] worker_thread+0x58a/0x780 [ 383.166230][ C0] kthread+0x22a/0x280 [ 383.170289][ C0] ret_from_fork+0x146/0x330 [ 383.174886][ C0] ret_from_fork_asm+0x1a/0x30 [ 383.179651][ C0] [ 383.181966][ C0] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 0: [ 383.190018][ C0] can_can_gw_rcv+0x863/0x870 [ 383.194692][ C0] can_rcv_filter+0xc3/0x480 [ 383.199284][ C0] can_receive+0x13e/0x190 [ 383.203691][ C0] can_rcv+0x17d/0x1f0 [ 383.207750][ C0] process_backlog+0x363/0x670 [ 383.212505][ C0] __napi_poll+0x61/0x300 [ 383.216821][ C0] net_rx_action+0x452/0x930 [ 383.221406][ C0] handle_softirqs+0xb9/0x280 [ 383.226072][ C0] do_softirq+0x45/0x60 [ 383.230219][ C0] __local_bh_enable_ip+0x70/0x80 [ 383.235235][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 383.240153][ C0] release_sock+0x10c/0x180 [ 383.244635][ C0] tcp_recvmsg+0x134/0x460 [ 383.249040][ C0] inet_recvmsg+0x8d/0x210 [ 383.253446][ C0] sock_recvmsg+0xda/0x120 [ 383.257852][ C0] sock_read_iter+0x169/0x1b0 [ 383.262516][ C0] vfs_read+0x6c0/0x7f0 [ 383.266661][ C0] ksys_read+0xdc/0x1a0 [ 383.270810][ C0] __x64_sys_read+0x40/0x50 [ 383.275312][ C0] x64_sys_call+0x2886/0x3020 [ 383.279975][ C0] do_syscall_64+0x12c/0x3b0 [ 383.284557][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.290431][ C0] [ 383.292734][ C0] value changed: 0x000621a6 -> 0x000621a7 [ 383.298428][ C0] [ 383.300741][ C0] Reported by Kernel Concurrency Sanitizer on: [ 383.306886][ C0] CPU: 0 UID: 0 PID: 3286 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 383.317899][ C0] Tainted: [W]=WARN [ 383.321685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.331723][ C0] ================================================================== [ 386.094417][ C0] ================================================================== [ 386.102529][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 386.109719][ C0] [ 386.112034][ C0] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 1: [ 386.120085][ C0] can_can_gw_rcv+0x863/0x870 [ 386.124758][ C0] can_rcv_filter+0xc3/0x480 [ 386.129352][ C0] can_receive+0x13e/0x190 [ 386.133789][ C0] can_rcv+0x17d/0x1f0 [ 386.137859][ C0] process_backlog+0x363/0x670 [ 386.142630][ C0] __napi_poll+0x61/0x300 [ 386.146961][ C0] net_rx_action+0x452/0x930 [ 386.151562][ C0] handle_softirqs+0xb9/0x280 [ 386.156240][ C0] do_softirq+0x45/0x60 [ 386.160407][ C0] __local_bh_enable_ip+0x70/0x80 [ 386.165443][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 386.170376][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 386.175672][ C0] batadv_tt_purge+0x2b/0x610 [ 386.180363][ C0] process_scheduled_works+0x4f0/0x9c0 [ 386.185825][ C0] worker_thread+0x58a/0x780 [ 386.190415][ C0] kthread+0x22a/0x280 [ 386.194485][ C0] ret_from_fork+0x146/0x330 [ 386.199086][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.203850][ C0] [ 386.206162][ C0] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 0: [ 386.214216][ C0] can_can_gw_rcv+0x863/0x870 [ 386.218890][ C0] can_rcv_filter+0xc3/0x480 [ 386.223483][ C0] can_receive+0x13e/0x190 [ 386.227905][ C0] can_rcv+0x17d/0x1f0 [ 386.231969][ C0] process_backlog+0x363/0x670 [ 386.236737][ C0] __napi_poll+0x61/0x300 [ 386.241072][ C0] net_rx_action+0x452/0x930 [ 386.245674][ C0] handle_softirqs+0xb9/0x280 [ 386.250345][ C0] do_softirq+0x45/0x60 [ 386.254511][ C0] __local_bh_enable_ip+0x70/0x80 [ 386.259548][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 386.264477][ C0] nsim_dev_trap_report_work+0x53b/0x640 [ 386.270122][ C0] process_scheduled_works+0x4f0/0x9c0 [ 386.275584][ C0] worker_thread+0x58a/0x780 [ 386.280180][ C0] kthread+0x22a/0x280 [ 386.284246][ C0] ret_from_fork+0x146/0x330 [ 386.288839][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.293609][ C0] [ 386.295923][ C0] value changed: 0x000c7171 -> 0x000c7172 [ 386.301628][ C0] [ 386.303940][ C0] Reported by Kernel Concurrency Sanitizer on: [ 386.310085][ C0] CPU: 0 UID: 0 PID: 5932 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 386.321205][ C0] Tainted: [W]=WARN [ 386.325000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.335140][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 386.341914][ C0] ================================================================== [ 389.113247][ C1] ================================================================== [ 389.121359][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 389.128562][ C1] [ 389.130875][ C1] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 0: [ 389.138938][ C1] can_can_gw_rcv+0x863/0x870 [ 389.143620][ C1] can_rcv_filter+0xc3/0x480 [ 389.148211][ C1] can_receive+0x13e/0x190 [ 389.152634][ C1] can_rcv+0x17d/0x1f0 [ 389.156699][ C1] process_backlog+0x363/0x670 [ 389.161472][ C1] __napi_poll+0x61/0x300 [ 389.165803][ C1] net_rx_action+0x452/0x930 [ 389.170404][ C1] handle_softirqs+0xb9/0x280 [ 389.175072][ C1] do_softirq+0x45/0x60 [ 389.179232][ C1] __local_bh_enable_ip+0x70/0x80 [ 389.184269][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 389.189198][ C1] release_sock+0x10c/0x180 [ 389.193696][ C1] tcp_recvmsg+0x134/0x460 [ 389.198116][ C1] inet_recvmsg+0x8d/0x210 [ 389.202542][ C1] sock_recvmsg+0xda/0x120 [ 389.206969][ C1] sock_read_iter+0x169/0x1b0 [ 389.211737][ C1] vfs_read+0x6c0/0x7f0 [ 389.215901][ C1] ksys_read+0xdc/0x1a0 [ 389.220057][ C1] __x64_sys_read+0x40/0x50 [ 389.224567][ C1] x64_sys_call+0x2886/0x3020 [ 389.229245][ C1] do_syscall_64+0x12c/0x3b0 [ 389.233842][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.239731][ C1] [ 389.242046][ C1] read-write to 0xffff88810b37cec0 of 4 bytes by interrupt on cpu 1: [ 389.250104][ C1] can_can_gw_rcv+0x863/0x870 [ 389.254774][ C1] can_rcv_filter+0xc3/0x480 [ 389.259369][ C1] can_receive+0x13e/0x190 [ 389.263785][ C1] can_rcv+0x17d/0x1f0 [ 389.267857][ C1] process_backlog+0x363/0x670 [ 389.272624][ C1] __napi_poll+0x61/0x300 [ 389.276957][ C1] net_rx_action+0x452/0x930 [ 389.281552][ C1] handle_softirqs+0xb9/0x280 [ 389.286223][ C1] do_softirq+0x45/0x60 [ 389.290384][ C1] __local_bh_enable_ip+0x70/0x80 [ 389.295415][ C1] __alloc_skb+0x658/0x690 [ 389.299831][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 389.305474][ C1] process_scheduled_works+0x4f0/0x9c0 [ 389.310938][ C1] worker_thread+0x58a/0x780 [ 389.315532][ C1] kthread+0x22a/0x280 [ 389.319597][ C1] ret_from_fork+0x146/0x330 [ 389.324195][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.328965][ C1] [ 389.331282][ C1] value changed: 0x0012c592 -> 0x0012c593 [ 389.336989][ C1] [ 389.339302][ C1] Reported by Kernel Concurrency Sanitizer on: [ 389.345443][ C1] CPU: 1 UID: 0 PID: 5924 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 389.356553][ C1] Tainted: [W]=WARN [ 389.360347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.370399][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 389.377181][ C1] ==================================================================