last executing test programs: 1m46.493656423s ago: executing program 32 (id=462): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.773709335s ago: executing program 33 (id=567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2431000000050035000700000008000200", @ANYRES32=r3, @ANYBLOB="0500330004ffe40005"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1m36.847489886s ago: executing program 34 (id=583): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0000000}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd3d7b819fd3d44fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) modify_ldt$read(0x0, &(0x7f0000001900)=""/4096, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaabb0000080007"], 0x30}}, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m26.029443435s ago: executing program 35 (id=630): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m16.441483615s ago: executing program 36 (id=698): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001b00), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509685636", 0x10}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x64) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 36.649706901s ago: executing program 3 (id=1144): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x490, 0x30, 0xffff, 0xfffffffc, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x1, 0xfff, 0xfffffff8, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0xa7fc, 0xffe, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff89a, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x80004, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x40000, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0xffffffff, 0x6, 0xa0, 0x8, 0x6, 0x7, 0x100, 0x200, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x0, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x10e8, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x10000, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x400, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x7, 0x44, 0x3, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x0, 0x4, 0x7, 0x7f, 0x5, 0x4, 0x81, 0xffffffff, 0x8, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0xc, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x107e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3ff, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x1, 0x3, 0x7, 0x6, 0x8}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}}, 0x20000040) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 36.643251712s ago: executing program 8 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 36.449814627s ago: executing program 8 (id=1147): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x1010041}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[], 0xc) 36.409833669s ago: executing program 3 (id=1150): r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x2300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff}}, 0x0, 0x0, 0x1c, 0x0, "2ef32814ffb2a81a7a582162b0769bc6449ac8694052a5d9f94a1bd7c74f658b98219eba9d703b8a77bff554c847c5a246cfbf12428891f00aae2e5e2f35a692d909a31d29313ee182fdb442de94ccb4"}, 0xd8) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21032cbd7000fedbdf250100000004000300040001801c0002801800018008000100060000000c000180"], 0x38}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8cb37ccf6c18089744c6815f08bf4d8b6500d9d1e93d395b3fe47f902fc289ba01952b3bc2aaa6d2a26579ba3e44", @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250d0000002c000180140002007663616e300000000000000000000000140002006d6163766c616e300000000000000000340001801400020076657468305f746f5f7465616d0000000800030002000000140002006e657464657673696d30000000000000180001801400020077673100"/134], 0x8c}}, 0x20000000) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000380)={0x1, 0x4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() ptrace$cont(0x1f, r7, 0x8, 0x3) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 36.407333389s ago: executing program 8 (id=1151): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 35.889745015s ago: executing program 8 (id=1157): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2c}}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0xb, 0x0, 0x7ffffffe}, {0x6, 0x4, 0x60, 0x8000005}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000280)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4800000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111420031000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="0a00020040bd49943e0c0000"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 35.72949996s ago: executing program 8 (id=1161): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x1010041}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[], 0xc) 35.679125992s ago: executing program 37 (id=1161): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x1010041}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[], 0xc) 35.337738052s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000029a3f1f1ffffffff60d77f060500000000000096940cc128be4921bdd4add3b7e68e6e000000050000"], 0x1c}}, 0x40000010) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x800, 0x6, 0x10, 0x10001, 0x3, 0xfffc}) 35.311686074s ago: executing program 3 (id=1167): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 34.709107162s ago: executing program 9 (id=1173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x10000, 0x6, 0x9, 0x0, 0x3}}]}}}]}, 0x78}}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 34.574200467s ago: executing program 3 (id=1175): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@private1, @remote, 0xb, 0x1d}}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2505000000d6c616af0b526b097e2247368f339d504e963102de8c7a0b017275d8cd6274dd51a8e110242aecf93e76c6fa405793367d161943a40885b91175329015e87251b90d20d8711641e105c5b9814db4ba261d1ea1931c2edf2a4f4a5efa52b2d8be17a838a7e1065eb3fee1041d6a137c8180e6afecf0ccd6"], 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10010}, 0x4008054) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="140040001000010000000004000000000000000a14000000020a0900000000000000000000000000140000001100010000000000000000000000000a958bf32cb824132945c0fc0500d7f443fbcb90a7bcaed9362fe948fe4f9d2c90d99d300a5e25e10eba82ee1de8675e0d5e41c294c2021ffceff80f5e1d7c069f2094ed1c1f1b35536781c6e891d2851f"], 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001580)=ANY=[@ANYBLOB="002e962eb67bb039f6469c022fb170ec9f88843d1a0422526b9d6e24ce60fa3e2255ad710141b50ab3fbda1767e859e3b0bb72a8b0aa149335838822454e6ed2630ebc6bd23b38b169b7280c1181abbc04655e24db1fab914c06070b351ce3912f745a692df2c1774de2ac4cea4c3af5f6e1b735f23bb6b4e5328a8050803845bc0feb94ba68c33b0f8ece64943f57a4324eef2319841e5e811f2860d9e4d5ea00ce8d78e0c80c33559b593c89ce95089e18952d63ccb623441f1f50dd87d3d98ee7bfc2ef379fccb387781f239393f1977fd6561350161fcfa8cdc7589efda99764480439d633779dbfb19d185f54ef723306ce7134dce39f7681cc1a2afe86df16e401ddb9b1c4ef7381259df3dfc9cc10a142b014a5c8543522559ac0fdbca604593510619f07f12e2813a3ae82feded8cddd0d1cc0008c9b0001be97ae30227006f250d34a1b5ee22554fe242d53cbb1", @ANYRES16=r6, @ANYBLOB="090027bd7000fcdbdf25090000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4c0d6) close(r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f00000004c0), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3, 0xb42e}) execve(0x0, 0x0, 0x0) 33.877725968s ago: executing program 9 (id=1177): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10002, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") (async) r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10002, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7ffffe2, 0x10, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="052000000000000873113900000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) fallocate(r1, 0x0, 0x9, 0x8ffff) (async) fallocate(r1, 0x0, 0x9, 0x8ffff) clock_gettime(0x0, &(0x7f0000005240)) 33.397212274s ago: executing program 9 (id=1181): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtclass={0x34, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {0x3}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x34}}, 0x20040084) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000380, 0x2000000003b0, 0x2000000003e0], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101006, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) 32.728764294s ago: executing program 9 (id=1184): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 32.282853949s ago: executing program 3 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 32.276800298s ago: executing program 38 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 31.802084393s ago: executing program 9 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@delqdisc={0x60, 0x25, 0x411, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xffff}, {0x13, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "ba19991941f54548ab082a172515ebb4"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0xc, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d300000000000000500190001000000080010000409000008"], 0x44}}, 0x44000) 31.465774614s ago: executing program 9 (id=1192): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2c}}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0xb, 0x0, 0x7ffffffe}, {0x6, 0x4, 0x60, 0x8000005}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000280)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4800000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111420031000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="0a00020040bd49943e0c0000"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 31.462430824s ago: executing program 39 (id=1192): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2c}}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0xb, 0x0, 0x7ffffffe}, {0x6, 0x4, 0x60, 0x8000005}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000280)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4800000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111420031000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="0a00020040bd49943e0c0000"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 28.684397061s ago: executing program 6 (id=1207): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3a01, 0x17e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4087, 0xff7) 28.145856918s ago: executing program 6 (id=1211): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8, 0x9, 0x5}) 28.061315701s ago: executing program 6 (id=1212): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x6, 0x7f, 0xffffffff, 0xfffffffffffeffff, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0xee00, r2, r3, r5, 0xa0, 0x2}, 0x0, 0x0, 0xff03, 0xfff, 0x0, 0x4, 0x0, 0x4, 0xc, 0x4, r6, r7}) r8 = msgget(0x3, 0x305) msgctl$MSG_INFO(r8, 0xc, &(0x7f00000002c0)=""/121) r9 = inotify_init() msgctl$IPC_STAT(r8, 0x2, &(0x7f0000000340)=""/114) r10 = getpgid(r6) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000400)={0x0, @broadcast, 0x4e21, 0x4, 'rr\x00', 0x2, 0x5, 0x2d}, 0x2c) getsockopt$MRT(r11, 0x0, 0xcf, &(0x7f0000000440), &(0x7f0000000480)=0x4) msgctl$MSG_STAT(r8, 0xb, &(0x7f00000004c0)=""/251) sched_setattr(r6, &(0x7f00000005c0)={0x38, 0x6, 0x2, 0x8, 0x55f8, 0x3, 0xfffffffffffffffc, 0x2, 0x6, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r11, 0x0, 0xde, 0xc9, &(0x7f0000000600)="bead65a6378b4135fda71d2c47c76e347651a279e0660a8223d8ccbc6b5890daa91808b5035fe836c8da939ae47877149167e352529591a4e122ce3fb0ab07e4b697585e4dbd37e103b9e200d78d870a6384d8baa085395146ad6398bcad389f038f1563e97abc8a579f8915ed23bb6d52de813d4ac80b631b5928a8807f5a988581ef06f6d87aa9d2d47b5a93cac4ae428cbf14710b1b00c6d8b62cd1dd3e365430d59765907474c450d51aab210084348730f87b454eebbedd5ea9b84aeb16789d909ea4148a0ee3fa6b01842ce07b8496ee540de7affc08abe88bc3b6", &(0x7f0000000700)=""/201, 0x1, 0x0, 0xce, 0xf8, &(0x7f0000000800)="1cc2bd3042c9ddc243e6fa520711f5392eb4d08e217e9e166b2e2c666229e1bddc4cd63dbaaa34111bc94ec84ed95eca672bd7ceb8ac1a3c775aa95a108e8277342626f4e00436b994fcf75666eca0ce23b1b5d80a9f2bc73d4ab61a59b159458ff97e331ea985bcac9053c28a29a2bb47fd45ddd895636329138f43528bf6b2cba32ca4a34dfa9d32c7e4a635474db5ed6107753b7baa069926ab527de00d2c6de4784ec33b53a79274ecbf7385555877eb20d8ab1614d917a66ac953465635326952a427f631cb0dde319ecacb", &(0x7f0000000900)="379b61f1cc65ac1220bc152fbc018173433dc7383593db53fb6060cce33b90ffba76bc18dfbe6be47f10ba220c84f07351b8d59435952e813203eec370c2cd132631a407367765e29f277735b8a790716ddb5f62cf3b0319ca29c6d151ca58b9766566fc5577978ae0f3178933c5a61c382af9ba8f7ede97b03ad2be674a9c89ef7f5b68af1487cc9e4a0857a86c7a8a9b4ef336bd6e7fb07b5cc61a1e0bacbef2b26c5d5388446912368b4dcb5f9f63652a8da447cad9b5cc8d6faa5c0d1a8b985f98fc3428a4b53a7ce8051d7d168f81fbecedb28f3b6e7c79fee80e84ee4e3c2429facb1f093febd3397daa6759115aecf7663220775e"}, 0x50) r12 = msgget$private(0x0, 0x10) msgrcv(r12, &(0x7f0000000a80)={0x0, ""/123}, 0x83, 0x0, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) syz_open_procfs(r10, &(0x7f0000000c80)='clear_refs\x00') setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000cc0)=@gcm_256={{0x304}, "5f461fc225457158", "52194de29b2f5b2a7072d5d3d9aedce1bff0fbdce8f894306d179265a30db8da", "96c6cb3a", "bf8441345f279dfe"}, 0x38) r14 = fcntl$getown(r9, 0x9) kcmp(r6, r14, 0x5, r9, r11) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000d00)={{0x3, r3, r4, r1, r13, 0x23, 0x4}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x3c, 0x1, 0x7, 0x2, r10, r10}) r15 = msgget$private(0x0, 0x215) msgctl$MSG_STAT_ANY(r15, 0xd, &(0x7f0000000d80)=""/51) perf_event_open(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0xb, 0x5, 0x80, 0x0, 0x200, 0x922b2f086c79da19, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x400, 0x5}, 0x800, 0xffff, 0x3, 0x6, 0x200, 0xffff, 0x7, 0x0, 0x3, 0x0, 0x8a13}, r0, 0x4, r11, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x49}, @fwd={0xa}]}, {0x0, [0x51, 0x5f, 0x0]}}, &(0x7f0000000e80)=""/4096, 0x39, 0x1000, 0x1, 0x2, 0x10000}, 0x28) 28.025971151s ago: executing program 6 (id=1213): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 27.588854105s ago: executing program 6 (id=1215): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xffffffff, 0x831a, 0x5, "030000000000000000049dd0ffd76d7fcb0b0e", 0x1, 0x201}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 27.520232178s ago: executing program 7 (id=1216): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) 27.473907679s ago: executing program 7 (id=1217): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0x1, "4608e5", 0x2, 0x7}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 27.361694792s ago: executing program 7 (id=1218): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@private1, @remote, 0xb, 0x1d}}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2505000000d6c616af0b526b097e2247368f339d504e963102de8c7a0b017275d8cd6274dd51a8e110242aecf93e76c6fa405793367d161943a40885b91175329015e87251b90d20d8711641e105c5b9814db4ba261d1ea1931c2edf2a4f4a5efa52b2d8be17a838a7e1065eb3fee1041d6a137c8180e6afecf0ccd6"], 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10010}, 0x4008054) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="140040001000010000000004000000000000000a14000000020a0900000000000000000000000000140000001100010000000000000000000000000a958bf32cb824132945c0fc0500d7f443fbcb90a7bcaed9362fe948fe4f9d2c90d99d300a5e25e10eba82ee1de8675e0d5e41c294c2021ffceff80f5e1d7c069f2094ed1c1f1b35536781c6e891d2851f"], 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001580)=ANY=[@ANYBLOB="002e962eb67bb039f6469c022fb170ec9f88843d1a0422526b9d6e24ce60fa3e2255ad710141b50ab3fbda1767e859e3b0bb72a8b0aa149335838822454e6ed2630ebc6bd23b38b169b7280c1181abbc04655e24db1fab914c06070b351ce3912f745a692df2c1774de2ac4cea4c3af5f6e1b735f23bb6b4e5328a8050803845bc0feb94ba68c33b0f8ece64943f57a4324eef2319841e5e811f2860d9e4d5ea00ce8d78e0c80c33559b593c89ce95089e18952d63ccb623441f1f50dd87d3d98ee7bfc2ef379fccb387781f239393f1977fd6561350161fcfa8cdc7589efda99764480439d633779dbfb19d185f54ef723306ce7134dce39f7681cc1a2afe86df16e401ddb9b1c4ef7381259df3dfc9cc10a142b014a5c8543522559ac0fdbca604593510619f07f12e2813a3ae82feded8cddd0d1cc0008c9b0001be97ae30227006f250d34a1b5ee22554fe242d53cbb1", @ANYRES16=r6, @ANYBLOB="090027bd7000fcdbdf25090000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4c0d6) close(r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f00000004c0), 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3, 0xb42e}) execve(0x0, 0x0, 0x0) 27.356984203s ago: executing program 6 (id=1219): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 27.319170694s ago: executing program 40 (id=1219): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 26.529711029s ago: executing program 7 (id=1222): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 26.077709973s ago: executing program 7 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x10000, 0x6, 0x9, 0x0, 0x3}}]}}}]}, 0x78}}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) sendmsg$nl_route_sched(r5, 0x0, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 25.864539639s ago: executing program 7 (id=1224): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) 25.83997394s ago: executing program 41 (id=1224): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) 16.402050086s ago: executing program 0 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb5, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 15.812624804s ago: executing program 1 (id=1300): r0 = socket(0x2c, 0xa, 0x6000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) writev(r0, &(0x7f0000000500), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0xd0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x2f, 0x8, 0x4, "050000009582"}}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd15c06f0edf250400000005000a0001000000080001", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f00)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x8000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x4044804) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x400c0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6401f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x10202, 0x80000000, 0x43a1bd56, 0x5, 0x42f, 0x10007, 0x5, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 15.725855107s ago: executing program 1 (id=1301): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) truncate(&(0x7f0000000180)='./file0\x00', 0x8800000) 15.725043347s ago: executing program 1 (id=1302): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") socket(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfe8d, 0x3, 0x0, 0x1, 0x0, 0x200000000000b45, 0x100000000006, 0x7, 0x1, 0x3}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980), 0x0, 0x20008000) sendmsg$inet(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000002c0)="97a78e9edd981bc7c890c294e187e5", 0xf}], 0x1}, 0x0) 15.680142758s ago: executing program 0 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r1 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) connect$unix(r2, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106320, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x25, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x8}, 0x8, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) 15.542895743s ago: executing program 1 (id=1306): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 15.395374037s ago: executing program 0 (id=1309): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x20080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 14.111986638s ago: executing program 1 (id=1312): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 13.507596326s ago: executing program 1 (id=1318): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 13.506061086s ago: executing program 0 (id=1319): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 13.416578139s ago: executing program 42 (id=1318): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 9.88715491s ago: executing program 2 (id=1327): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb5, @loopback, 0x5}, 0x1c) r3 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x1b, 0x2, 0x70bd29, 0x25dfdbfc, {0x1}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r3}, @nested={0x18, 0xe1, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x5a}, @nested={0x4, 0x39}]}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0xa0293f0b67b519d8) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x2}, 0x24044810) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 9.743270204s ago: executing program 0 (id=1331): open$dir(&(0x7f0000000240)='./file0\x00', 0x42c40, 0x9a) r0 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, 0x0, 0x800c4, 0xf7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x101c) io_submit(r3, 0x2, &(0x7f0000000740)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000000000000}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xfff8, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x1}]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xc, 0xffff}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x138, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}, "a68e78"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3b5}}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x3d, 0x0, 0xf}, "bb7c3c6ea76b1ad8cbf809a711bd6b36d4936fdf1b5cf1955c74c26affdc3a86dd98e173cbabf46d1dcc"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x12b3, 0x8, 0x4}, {0x3, 0x4, 0x7}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x9, 0x4, 0xf3da}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7f386c37dd08e6e9", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="51961387c6"]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="79f74a", @TCF_META_TYPE_VAR="004d0e", @TCF_META_TYPE_VAR="156b", @TCF_META_TYPE_VAR='(\t', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a5a965c7", @TCF_META_TYPE_VAR="a36275318b71c63f", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0xffff}, {0x1, 0x7, 0x1, "43c269552c418c"}}}]}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 9.627573488s ago: executing program 2 (id=1332): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb5, @loopback, 0x5}, 0x1c) r3 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x1b, 0x2, 0x70bd29, 0x25dfdbfc, {0x1}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r3}, @nested={0x18, 0xe1, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x5a}, @nested={0x4, 0x39}]}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0xa0293f0b67b519d8) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x2}, 0x24044810) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 9.398457455s ago: executing program 0 (id=1335): r0 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x101006, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) 9.176407422s ago: executing program 2 (id=1336): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket(0x1a, 0x3, 0x7a1) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000aacefcc2e572bc880830a9a4b11742479df1dd02afaaaaaa900088f5"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000000c0)=0x3) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000002a40)) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x74}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000000c0)={0xa}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.176172312s ago: executing program 43 (id=1335): r0 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x101006, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) 6.756916038s ago: executing program 2 (id=1341): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2", 0x53}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 5.854197136s ago: executing program 2 (id=1345): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000436000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x6965}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r3, 0x10, 0xffff, 0x8001) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x16b}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) write$P9_RWALK(r3, 0x0, 0x4a) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 5.644568003s ago: executing program 4 (id=1349): r0 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101006, 0x0) pwrite64(r1, 0x0, 0x0, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) 5.167786878s ago: executing program 4 (id=1351): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@private1, @remote, 0xb, 0x1d}}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2505000000d6c616af0b526b097e2247368f339d504e963102de8c7a0b017275d8cd6274dd51a8e110242aecf93e76c6fa405793367d161943a40885b91175329015e87251b90d20d8711641e105c5b9814db4ba261d1ea1931c2edf2a4f4a5efa52b2d8be17a838a7e1065eb3fee1041d6a137c8180e6afecf0ccd6"], 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10010}, 0x4008054) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="140040001000010000000004000000000000000a14000000020a0900000000000000000000000000140000001100010000000000000000000000000a958bf32cb824132945c0fc0500d7f443fbcb90a7bcaed9362fe948fe4f9d2c90d99d300a5e25e10eba82ee1de8675e0d5e41c294c2021ffceff80f5e1d7c069f2094ed1c1f1b35536781c6e891d2851f"], 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001580)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="090027bd7000fcdbdf25090000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4c0d6) close(r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f00000004c0), 0x1, 0x50f, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.393793632s ago: executing program 2 (id=1352): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") socket(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfe8d, 0x3, 0x0, 0x1, 0x0, 0x200000000000b45, 0x100000000006, 0x7, 0x1, 0x3}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$inet(r3, 0x0, 0x0) 4.322034774s ago: executing program 44 (id=1352): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") socket(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfe8d, 0x3, 0x0, 0x1, 0x0, 0x200000000000b45, 0x100000000006, 0x7, 0x1, 0x3}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$inet(r3, 0x0, 0x0) 3.790014651s ago: executing program 5 (id=1355): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb5, @loopback, 0x5}, 0x1c) r3 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x1b, 0x2, 0x70bd29, 0x25dfdbfc, {0x1}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r3}, @nested={0x18, 0xe1, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x5a}, @nested={0x4, 0x39}]}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0xa0293f0b67b519d8) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x2}, 0x24044810) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 3.440417652s ago: executing program 5 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1199"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xf3cc082e, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000240)={0x1, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, r7, 0x2f, 0x0, @val=@iter={&(0x7f0000000580)=@task, 0x10}}, 0x20) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r8, r7, 0x4, r7}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 3.362813884s ago: executing program 4 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x10000, 0x6, 0x9, 0x0, 0x3}}]}}}]}, 0x78}}, 0x20000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 3.17273242s ago: executing program 4 (id=1358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x20080) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.17171112s ago: executing program 5 (id=1359): r0 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101006, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) 3.040613374s ago: executing program 5 (id=1360): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.997362956s ago: executing program 4 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xd, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$RTC_UIE_ON(r1, 0x7003) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 2.612420078s ago: executing program 5 (id=1362): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x20080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 197.579973ms ago: executing program 5 (id=1363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xd4, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4805) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x100000, '\x00', 0x0, r1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 84.176247ms ago: executing program 4 (id=1364): r0 = dup(0xffffffffffffffff) file_setattr(r0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000c936a5358bace65d2745beef83548f3c000000004000946867f2c76887898cbb502183d91fff0800000000000000289784709b49923564156636c3c1a798d767423266ad93ae7c68a933cd932e62dcfd7f8a3fae21dce74dea9e", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2503000000240001800800030000000000060005004e23000008000600110000000600010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf250a00000018000480130005"], 0x2c}, 0x1, 0x0, 0x0, 0x4400}, 0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r6, &(0x7f0000000300)={0x9, 0x5, 0x1, 0x3}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r9 = socket$kcm(0x2, 0x1, 0x84) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x24, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc091, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x4c, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18fc3000070b000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=1320): open$dir(&(0x7f0000000240)='./file0\x00', 0x42c40, 0x9a) r0 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, 0x0, 0x800c4, 0xf7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x101c) io_submit(r4, 0x2, &(0x7f0000000740)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, 0x0, 0x0, 0x3000000000000000}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xfff8, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x1, r3}]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xc, 0xffff}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x138, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}, "a68e78"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3b5}}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x3d, 0x0, 0xf}, "bb7c3c6ea76b1ad8cbf809a711bd6b36d4936fdf1b5cf1955c74c26affdc3a86dd98e173cbabf46d1dcc"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x12b3, 0x8, 0x4}, {0x3, 0x4, 0x7}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x9, 0x4, 0xf3da}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7f386c37dd08e6e9", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="51961387c6"]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="79f74a", @TCF_META_TYPE_VAR="004d0e", @TCF_META_TYPE_VAR="156b", @TCF_META_TYPE_VAR='(\t', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a5a965c7", @TCF_META_TYPE_VAR="a36275318b71c63f", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0xffff}, {0x1, 0x7, 0x1, "43c269552c418c"}}}]}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") kernel console output (not intermixed with test programs): lesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.342922][ T7719] syzkaller0: entered promiscuous mode [ 141.350840][ T7719] syzkaller0: entered allmulticast mode [ 141.361711][ T7727] loop7: detected capacity change from 0 to 512 [ 141.393823][ T7727] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1153: iget: bad i_size value: 38620345925642 [ 141.418138][ T7727] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.418774][ T7727] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1153: couldn't read orphan inode 15 (err -117) [ 141.421944][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 141.443614][ T7727] loop7: lost filesystem error report for type 5 error -117 [ 141.446887][ C0] EXT4-fs (loop7): initial error at time 2000000085: ext4_orphan_get:1397: inode 15 [ 141.460985][ T7727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.463683][ C0] EXT4-fs (loop7): last error at time 2000000085: ext4_orphan_get:1402 [ 141.545234][ T7724] bridge0: port 3(syz_tun) entered disabled state [ 141.573573][ T5217] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.585576][ T7724] syz_tun (unregistering): left allmulticast mode [ 141.599019][ T7724] syz_tun (unregistering): left promiscuous mode [ 141.606350][ T7724] bridge0: port 3(syz_tun) entered disabled state [ 141.614035][ T7739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.657942][ T7742] syzkaller0: entered promiscuous mode [ 141.666715][ T7724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.676206][ T5993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.685222][ T7742] syzkaller0: entered allmulticast mode [ 141.714674][ T273] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.786575][ T273] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.829479][ T7746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.859351][ T7746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.881117][ T273] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.923893][ T7755] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.967888][ T7755] JBD2: no valid journal superblock found [ 141.986415][ T273] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.001225][ T5993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.011725][ T7755] EXT4-fs (loop7): Could not load journal inode [ 142.070379][ T7761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7761 comm=syz.3.1166 [ 142.094044][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 142.094094][ T28] audit: type=1400 audit(2000000086.439:972): avc: denied { ioctl } for pid=7760 comm="syz.3.1166" path="socket:[19652]" dev="sockfs" ino=19652 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.160941][ T28] audit: type=1400 audit(2000000086.489:973): avc: denied { validate_trans } for pid=7769 comm="syz.7.1168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.201136][ T7772] EXT4-fs: Ignoring removed oldalloc option [ 142.208010][ T28] audit: type=1400 audit(2000000086.549:974): avc: denied { nlmsg_read } for pid=7769 comm="syz.7.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.234451][ T7772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.285800][ T7772] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1167: invalid indirect mapped block 83886080 (level 1) [ 142.303046][ T7772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 142.304135][ T7772] EXT4-fs (loop3): Remounting filesystem read-only [ 142.313290][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 142.313305][ C1] EXT4-fs (loop3): initial error at time 2000000086: ext4_free_branches:1023: inode 16 [ 142.313333][ C1] EXT4-fs (loop3): last error at time 2000000086: ext4_free_branches:1023: inode 16 [ 142.379673][ T273] bridge_slave_1: left allmulticast mode [ 142.385421][ T273] bridge_slave_1: left promiscuous mode [ 142.391115][ T273] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.398725][ T7772] EXT4-fs (loop3): 1 orphan inode deleted [ 142.404698][ T7772] EXT4-fs (loop3): 1 truncate cleaned up [ 142.410810][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.422469][ T7780] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 142.433284][ T273] bridge_slave_0: left allmulticast mode [ 142.441554][ T273] bridge_slave_0: left promiscuous mode [ 142.449743][ T273] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.482444][ T28] audit: type=1400 audit(2000000086.819:975): avc: denied { connect } for pid=7779 comm="syz.7.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.519078][ T7781] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 142.529825][ T7781] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 142.624099][ T273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.634356][ T273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.644091][ T273] bond0 (unregistering): Released all slaves [ 142.652278][ T273] bond1 (unregistering): Released all slaves [ 142.714547][ T273] tipc: Left network mode [ 142.735573][ T7772] syzkaller0: entered promiscuous mode [ 142.746181][ T7772] syzkaller0: entered allmulticast mode [ 142.784471][ T273] hsr_slave_0: left promiscuous mode [ 142.793879][ T273] hsr_slave_1: left promiscuous mode [ 142.809632][ T273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.825842][ T7818] EXT4-fs: Ignoring removed oldalloc option [ 142.835725][ T28] audit: type=1400 audit(2000000087.179:976): avc: denied { write } for pid=7801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.843183][ T273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.873144][ T273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.881058][ T7818] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 142.891165][ T28] audit: type=1400 audit(2000000087.219:977): avc: denied { write } for pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.916507][ T273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.929519][ T7818] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1174: invalid indirect mapped block 83886080 (level 1) [ 142.943760][ T7818] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 142.943905][ T7818] EXT4-fs (loop7): Remounting filesystem read-only [ 142.946083][ T273] veth1_macvtap: left promiscuous mode [ 142.953139][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 142.971813][ C1] EXT4-fs (loop7): initial error at time 2000000087: ext4_free_branches:1023: inode 16 [ 142.981494][ C1] EXT4-fs (loop7): last error at time 2000000087: ext4_free_branches:1023: inode 16 [ 142.983449][ T273] veth0_macvtap: left promiscuous mode [ 142.996755][ T273] veth1_vlan: left promiscuous mode [ 143.002205][ T273] veth0_vlan: left promiscuous mode [ 143.007852][ T7818] EXT4-fs (loop7): 1 orphan inode deleted [ 143.018169][ T7818] EXT4-fs (loop7): 1 truncate cleaned up [ 143.024523][ T7818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.037922][ T7818] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.089581][ T7826] Cannot find add_set index 0 as target [ 143.105002][ T273] team0 (unregistering): Port device team_slave_1 removed [ 143.113970][ T7826] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1176'. [ 143.126104][ T273] team0 (unregistering): Port device team_slave_0 removed [ 143.170993][ T7800] syzkaller0: entered promiscuous mode [ 143.176698][ T7800] syzkaller0: entered allmulticast mode [ 143.185808][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 143.198126][ T7782] syz_tun (unregistering): left allmulticast mode [ 143.204651][ T7782] syz_tun (unregistering): left promiscuous mode [ 143.211158][ T7782] bridge0: port 3(syz_tun) entered disabled state [ 143.262144][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1174'. [ 143.274514][ T7829] 9p: Bad value for 'source' [ 143.585292][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.627379][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.647428][ T7838] set_capacity_and_notify: 8 callbacks suppressed [ 143.647489][ T7838] loop9: detected capacity change from 0 to 1024 [ 143.652669][ T7748] bridge_slave_0: entered allmulticast mode [ 143.667797][ T7838] EXT4-fs: Ignoring removed bh option [ 143.685130][ T7748] bridge_slave_0: entered promiscuous mode [ 143.703153][ T7838] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.715856][ T273] IPVS: stop unused estimator thread 0... [ 143.736060][ T7838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.752976][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.763348][ T7850] FAULT_INJECTION: forcing a failure. [ 143.763348][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 143.775966][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.7.1178 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.776061][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.776070][ T7850] Call Trace: [ 143.776076][ T7850] [ 143.776084][ T7850] __dump_stack+0x1d/0x30 [ 143.776103][ T7850] dump_stack_lvl+0x95/0xd0 [ 143.776117][ T7850] dump_stack+0x15/0x1b [ 143.776131][ T7850] should_fail_ex+0x263/0x280 [ 143.776185][ T7850] should_failslab+0x8c/0xb0 [ 143.776207][ T7850] kmem_cache_alloc_noprof+0x66/0x3f0 [ 143.776282][ T7850] ? __send_signal_locked+0x14b/0x760 [ 143.776368][ T7850] __send_signal_locked+0x14b/0x760 [ 143.776407][ T7850] send_signal_locked+0x34c/0x3c0 [ 143.776425][ T7850] force_sig_info_to_task+0x1fb/0x290 [ 143.776478][ T7850] force_sig_fault+0x91/0xc0 [ 143.776498][ T7850] exc_page_fault+0x62/0xa0 [ 143.776517][ T7850] asm_exc_page_fault+0x26/0x30 [ 143.776594][ T7850] RIP: 0033:0x7ff7f7a9bbf9 [ 143.776606][ T7850] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 143.776619][ T7850] RSP: 002b:00007ff7f650ee58 EFLAGS: 00010283 [ 143.776632][ T7850] RAX: 0000000000000000 RBX: 00007ff7f650eee0 RCX: 0000000000000000 [ 143.776703][ T7850] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 143.776713][ T7850] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 143.776723][ T7850] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 143.776733][ T7850] R13: 00007ff7f650eea0 R14: 0000000000000000 R15: 0000000000000000 [ 143.776805][ T7850] [ 143.938591][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.947424][ T7748] bridge_slave_1: entered allmulticast mode [ 143.954405][ T7748] bridge_slave_1: entered promiscuous mode [ 143.984981][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.013959][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.051597][ T28] audit: type=1400 audit(2000000088.389:978): avc: denied { write } for pid=7841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.132136][ T7782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.156245][ T7748] team0: Port device team_slave_0 added [ 144.163017][ T7748] team0: Port device team_slave_1 added [ 144.163881][ T28] audit: type=1400 audit(2000000088.489:979): avc: denied { write } for pid=7870 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.198937][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.210267][ T7873] loop9: detected capacity change from 0 to 1024 [ 144.216882][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.333527][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.359924][ T7877] loop7: detected capacity change from 0 to 1024 [ 144.367924][ T7877] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.423340][ T7873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.447978][ T7877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.557757][ T7873] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.583905][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.593960][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.623301][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.639653][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 144.715078][ T273] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.780375][ T273] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 144.836453][ T7748] hsr_slave_0: entered promiscuous mode [ 144.909306][ T7748] hsr_slave_1: entered promiscuous mode [ 144.921824][ T273] EXT4-fs (loop9): This should not happen!! Data will be lost [ 144.921824][ T273] [ 145.039467][ T5993] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.072454][ T7893] syzkaller0: entered promiscuous mode [ 145.096982][ T7893] syzkaller0: entered allmulticast mode [ 145.105983][ T5993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.193529][ T7907] loop9: detected capacity change from 0 to 512 [ 145.235434][ T7907] EXT4-fs: Ignoring removed oldalloc option [ 145.280290][ T7907] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 145.303073][ T28] audit: type=1400 audit(2000000089.549:980): avc: denied { write } for pid=7890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.340369][ T7907] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1184: invalid indirect mapped block 83886080 (level 1) [ 145.354597][ T28] audit: type=1400 audit(2000000089.569:981): avc: denied { write } for pid=7913 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.376808][ T7907] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.380126][ T7907] EXT4-fs (loop9): Remounting filesystem read-only [ 145.389295][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 145.389311][ C1] EXT4-fs (loop9): initial error at time 2000000089: ext4_free_branches:1023: inode 16 [ 145.389341][ C1] EXT4-fs (loop9): last error at time 2000000089: ext4_free_branches:1023: inode 16 [ 145.430378][ T7918] loop6: detected capacity change from 0 to 2048 [ 145.437167][ T7918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.466570][ T7907] EXT4-fs (loop9): 1 orphan inode deleted [ 145.473830][ T7918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.491194][ T7907] EXT4-fs (loop9): 1 truncate cleaned up [ 145.500439][ T7907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.516188][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 145.533154][ T5126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.555514][ T7907] syzkaller0: entered promiscuous mode [ 145.561734][ T7907] syzkaller0: entered allmulticast mode [ 145.751788][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 145.825140][ T5217] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.857592][ T7950] loop6: detected capacity change from 0 to 128 [ 145.872883][ T7950] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.900136][ T7921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.914588][ T7894] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.925490][ T7950] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.936899][ T7894] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.006699][ T7894] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.017068][ T7894] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.059152][ T7950] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.121262][ T7748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.135620][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.143651][ T7805] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.157621][ T7894] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.188963][ T7894] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.190582][ T7983] loop6: detected capacity change from 0 to 4096 [ 146.211089][ T7983] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.223885][ T7983] SELinux: failed to load policy [ 146.236240][ T7748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.255668][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.269272][ T7748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.296327][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.317899][ T7995] loop7: detected capacity change from 0 to 2048 [ 146.324472][ T7748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.332126][ T7995] EXT4-fs (loop7): Invalid log block size: 64 [ 146.333724][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.353795][ T7894] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.370947][ T7894] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.423162][ T8013] syzkaller0: entered promiscuous mode [ 146.440539][ T8013] syzkaller0: entered allmulticast mode [ 146.540969][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.556521][ T8028] loop7: detected capacity change from 0 to 512 [ 146.562486][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.570061][ T7944] bridge_slave_0: entered allmulticast mode [ 146.575311][ T8028] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 146.577775][ T7944] bridge_slave_0: entered promiscuous mode [ 146.596093][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop7 [ 146.611185][ T7894] bridge_slave_1: left allmulticast mode [ 146.617109][ T7894] bridge_slave_1: left promiscuous mode [ 146.625288][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.645355][ T7894] bridge_slave_0: left allmulticast mode [ 146.657254][ T7894] bridge_slave_0: left promiscuous mode [ 146.664332][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.904001][ T7894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.941768][ T7894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.962583][ T7894] bond0 (unregistering): Released all slaves [ 146.974777][ T7894] bond1 (unregistering): Released all slaves [ 147.000907][ T7894] bond2 (unregistering): Released all slaves [ 147.067488][ T7894] bond3 (unregistering): Released all slaves [ 147.199824][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.320586][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.350848][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.398139][ T7944] bridge_slave_1: entered allmulticast mode [ 147.428732][ T7944] bridge_slave_1: entered promiscuous mode [ 147.484071][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 147.484100][ T28] audit: type=1400 audit(2000000091.829:995): avc: denied { write } for pid=8057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.527758][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.549436][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.569980][ T28] audit: type=1400 audit(2000000091.909:996): avc: denied { write } for pid=8074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.613167][ T7944] team0: Port device team_slave_0 added [ 147.631545][ T7944] team0: Port device team_slave_1 added [ 147.649594][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.657414][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.683891][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.695307][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.703831][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.730132][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.751713][ T8070] FAULT_INJECTION: forcing a failure. [ 147.751713][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 147.766842][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.6.1202 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.766869][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.766880][ T8070] Call Trace: [ 147.766885][ T8070] [ 147.766891][ T8070] __dump_stack+0x1d/0x30 [ 147.766911][ T8070] dump_stack_lvl+0x95/0xd0 [ 147.767001][ T8070] dump_stack+0x15/0x1b [ 147.767016][ T8070] should_fail_ex+0x263/0x280 [ 147.767034][ T8070] should_failslab+0x8c/0xb0 [ 147.767087][ T8070] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 147.767120][ T8070] ? __alloc_skb+0x2d6/0x690 [ 147.767176][ T8070] __alloc_skb+0x2d6/0x690 [ 147.767198][ T8070] ? __alloc_skb+0x200/0x690 [ 147.767219][ T8070] ndisc_alloc_skb+0x69/0x180 [ 147.767242][ T8070] ndisc_send_rs+0x18a/0x360 [ 147.767284][ T8070] inet6_set_link_af+0x51e/0x620 [ 147.767310][ T8070] ? validate_linkmsg+0x5e2/0x5f0 [ 147.767336][ T8070] do_setlink+0x1d87/0x2950 [ 147.767432][ T8070] ? synchronize_rcu_expedited+0x6ba/0x770 [ 147.767580][ T8070] ? __pfx_autoremove_wake_function+0x10/0x10 [ 147.767610][ T8070] ? synchronize_net+0x54/0x70 [ 147.767634][ T8070] ? geneve_changelink+0x397/0x3f0 [ 147.767723][ T8070] ? __mutex_lock_slowpath+0xa/0x10 [ 147.767770][ T8070] rtnl_newlink+0x108a/0x1400 [ 147.767800][ T8070] ? __siphash_unaligned+0x197/0x2e0 [ 147.767822][ T8070] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 147.767848][ T8070] ? __rcu_read_unlock+0x4e/0x70 [ 147.767934][ T8070] ? avc_has_perm_noaudit+0xab/0x130 [ 147.768007][ T8070] ? cred_has_capability+0x224/0x2a0 [ 147.768032][ T8070] ? selinux_capable+0x31/0x40 [ 147.768061][ T8070] ? security_capable+0x7b/0x90 [ 147.768087][ T8070] ? ns_capable+0x7c/0xb0 [ 147.768130][ T8070] ? __pfx_rtnl_newlink+0x10/0x10 [ 147.768160][ T8070] rtnetlink_rcv_msg+0x64b/0x720 [ 147.768188][ T8070] netlink_rcv_skb+0x123/0x220 [ 147.768290][ T8070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.768368][ T8070] rtnetlink_rcv+0x1c/0x30 [ 147.768390][ T8070] netlink_unicast+0x5a8/0x680 [ 147.768413][ T8070] netlink_sendmsg+0x5c8/0x6f0 [ 147.768470][ T8070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.768494][ T8070] ____sys_sendmsg+0x563/0x5b0 [ 147.768516][ T8070] ___sys_sendmsg+0x195/0x1e0 [ 147.768546][ T8070] __x64_sys_sendmsg+0xd4/0x160 [ 147.768616][ T8070] x64_sys_call+0x194c/0x3020 [ 147.768638][ T8070] do_syscall_64+0x12c/0x3b0 [ 147.768705][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.768723][ T8070] RIP: 0033:0x7f1670f4ce59 [ 147.768736][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.768751][ T8070] RSP: 002b:00007f166f9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.768769][ T8070] RAX: ffffffffffffffda RBX: 00007f16711c5fa0 RCX: 00007f1670f4ce59 [ 147.768815][ T8070] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 147.768827][ T8070] RBP: 00007f166f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.768920][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.768934][ T8070] R13: 00007f16711c6038 R14: 00007f16711c5fa0 R15: 00007ffdb65bda68 [ 147.768954][ T8070] [ 148.127236][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1204'. [ 148.137960][ T7894] hsr_slave_0: left promiscuous mode [ 148.144946][ T7894] hsr_slave_1: left promiscuous mode [ 148.150887][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.158507][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.181170][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.188714][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.208467][ T7894] veth1_macvtap: left promiscuous mode [ 148.222195][ T7894] veth0_macvtap: left promiscuous mode [ 148.234366][ T7894] veth1_vlan: left promiscuous mode [ 148.244593][ T7894] veth0_vlan: left promiscuous mode [ 148.399359][ T7894] team0 (unregistering): Port device team_slave_1 removed [ 148.429196][ T7894] team0 (unregistering): Port device team_slave_0 removed [ 148.481483][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.514377][ T8083] syzkaller0: entered promiscuous mode [ 148.520045][ T8083] syzkaller0: entered allmulticast mode [ 148.557570][ T7944] hsr_slave_0: entered promiscuous mode [ 148.559236][ T8091] loop7: detected capacity change from 0 to 512 [ 148.569996][ T7944] hsr_slave_1: entered promiscuous mode [ 148.598570][ T8091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.599047][ T28] audit: type=1400 audit(2000000092.939:997): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.611497][ T7944] debugfs: 'hsr0' already exists in 'hsr' [ 148.642004][ T8091] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.643134][ T7944] Cannot create hsr debugfs directory [ 148.662258][ T28] audit: type=1400 audit(2000000093.009:998): avc: denied { write } for pid=8090 comm="syz.7.1206" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.684435][ T28] audit: type=1400 audit(2000000093.019:999): avc: denied { write } for pid=8102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.723171][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.730256][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.763556][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.770687][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.781160][ T8107] FAULT_INJECTION: forcing a failure. [ 148.781160][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 148.796478][ T8117] loop6: detected capacity change from 0 to 128 [ 148.797305][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.7.1206 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.797360][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.797372][ T8107] Call Trace: [ 148.797379][ T8107] [ 148.797387][ T8107] __dump_stack+0x1d/0x30 [ 148.797409][ T8107] dump_stack_lvl+0x95/0xd0 [ 148.797430][ T8107] dump_stack+0x15/0x1b [ 148.797448][ T8107] should_fail_ex+0x263/0x280 [ 148.797468][ T8107] should_failslab+0x8c/0xb0 [ 148.797616][ T8107] __kmalloc_noprof+0xb8/0x4d0 [ 148.797697][ T8107] ? ext4_ext_precache+0xa1/0x380 [ 148.797722][ T8107] ext4_ext_precache+0xa1/0x380 [ 148.797744][ T8107] ext4_get_es_cache+0x163/0x4f0 [ 148.797843][ T8107] ? avc_has_extended_perms+0x689/0x890 [ 148.797868][ T8107] ? should_fail_ex+0xd9/0x280 [ 148.797888][ T8107] ext4_ioctl+0x1766/0x31b0 [ 148.797921][ T8107] ? file_ioctl+0x146/0x5c0 [ 148.797987][ T8107] ? ioctl_has_perm+0x27e/0x2d0 [ 148.798013][ T8107] ? do_vfs_ioctl+0x7c9/0xe70 [ 148.798039][ T8107] ? selinux_file_ioctl+0x338/0x3b0 [ 148.798106][ T8107] ? __fget_files+0x184/0x1c0 [ 148.798124][ T8107] ? mutex_lock+0x57/0x90 [ 148.798144][ T8107] ? __pfx_ext4_ioctl+0x10/0x10 [ 148.798162][ T8107] __se_sys_ioctl+0xce/0x140 [ 148.798237][ T8107] __x64_sys_ioctl+0x43/0x50 [ 148.798266][ T8107] x64_sys_call+0x1563/0x3020 [ 148.798288][ T8107] do_syscall_64+0x12c/0x3b0 [ 148.798358][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.798458][ T8107] RIP: 0033:0x7ff7f7abce59 [ 148.798473][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.798495][ T8107] RSP: 002b:00007ff7f64ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.798515][ T8107] RAX: ffffffffffffffda RBX: 00007ff7f7d36090 RCX: 00007ff7f7abce59 [ 148.798529][ T8107] RDX: 0000200000000200 RSI: 00000000c020662a RDI: 0000000000000004 [ 148.798541][ T8107] RBP: 00007ff7f64ee090 R08: 0000000000000000 R09: 0000000000000000 [ 148.798694][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.798706][ T8107] R13: 00007ff7f7d36128 R14: 00007ff7f7d36090 R15: 00007ffd949839e8 [ 148.798724][ T8107] [ 148.888843][ T28] audit: type=1400 audit(2000000093.169:1000): avc: denied { write } for pid=8106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.921588][ T7748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.971548][ T28] audit: type=1400 audit(2000000093.189:1001): avc: denied { write } for pid=8121 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.007217][ T7748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.063692][ T5217] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.095834][ T28] audit: type=1400 audit(2000000093.449:1002): avc: denied { write } for pid=8123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.115942][ T8117] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 149.175029][ T28] audit: type=1400 audit(2000000093.519:1003): avc: denied { write } for pid=8137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.180226][ T8117] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 149.205808][ T8144] loop7: detected capacity change from 0 to 512 [ 149.223189][ T8117] FAT-fs (loop6): Filesystem has been set read-only [ 149.256492][ T8144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.257307][ T5126] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 149.269750][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.280727][ T8144] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.295972][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.308609][ T7971] bridge_slave_0: entered allmulticast mode [ 149.311057][ T28] audit: type=1400 audit(2000000093.649:1004): avc: denied { write } for pid=8143 comm="syz.7.1210" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.317606][ T7971] bridge_slave_0: entered promiscuous mode [ 149.338194][ T8144] netlink: 5759 bytes leftover after parsing attributes in process `syz.7.1210'. [ 149.371268][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.389902][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.400524][ T7971] bridge_slave_1: entered allmulticast mode [ 149.407147][ T7971] bridge_slave_1: entered promiscuous mode [ 149.427249][ T8158] loop6: detected capacity change from 0 to 512 [ 149.437453][ T8158] EXT4-fs: Ignoring removed oldalloc option [ 149.449365][ T8158] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.481308][ T8158] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1213: invalid indirect mapped block 83886080 (level 1) [ 149.498282][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.515612][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.524422][ T8158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 149.524961][ T8158] EXT4-fs (loop6): Remounting filesystem read-only [ 149.534147][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 149.534168][ C1] EXT4-fs (loop6): initial error at time 2000000093: ext4_free_branches:1023: inode 16 [ 149.534199][ C1] EXT4-fs (loop6): last error at time 2000000093: ext4_free_branches:1023: inode 16 [ 149.562364][ T7971] team0: Port device team_slave_0 added [ 149.579066][ T8158] EXT4-fs (loop6): 1 orphan inode deleted [ 149.583227][ T7971] team0: Port device team_slave_1 added [ 149.593574][ T8158] EXT4-fs (loop6): 1 truncate cleaned up [ 149.604355][ T8158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.623393][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.627624][ T5217] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.630351][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.667670][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.679523][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.687156][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.713291][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.750046][ T8158] syzkaller0: entered promiscuous mode [ 149.755840][ T8158] syzkaller0: entered allmulticast mode [ 149.776649][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.794275][ T8180] syzkaller0: entered promiscuous mode [ 149.799882][ T8180] syzkaller0: entered allmulticast mode [ 149.825392][ T7971] hsr_slave_0: entered promiscuous mode [ 149.831366][ T7971] hsr_slave_1: entered promiscuous mode [ 149.837832][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 149.854630][ T7971] Cannot create hsr debugfs directory [ 149.900267][ T8173] bridge0: port 3(syz_tun) entered disabled state [ 149.936522][ T8173] syz_tun (unregistering): left allmulticast mode [ 149.943744][ T8173] syz_tun (unregistering): left promiscuous mode [ 149.950339][ T8173] bridge0: port 3(syz_tun) entered disabled state [ 150.015996][ T7944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.028503][ T7944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.039413][ T7944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.053417][ T8173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.061303][ T7944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.069583][ T8220] Cannot find add_set index 0 as target [ 150.071030][ T8220] siw: device registration error -23 [ 150.094896][ T7944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.102799][ T8220] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1218'. [ 150.115999][ T7944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.123831][ T7944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.133013][ T7944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.168498][ T8220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.188070][ T8220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.196770][ T8225] loop7: detected capacity change from 0 to 8192 [ 150.212280][ T8220] bond0 (unregistering): Released all slaves [ 150.250340][ T7748] veth0_vlan: entered promiscuous mode [ 150.276254][ T7748] veth1_vlan: entered promiscuous mode [ 150.366448][ T7748] veth0_macvtap: entered promiscuous mode [ 150.392469][ T7748] veth1_macvtap: entered promiscuous mode [ 150.401947][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.424403][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.448442][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.459636][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 150.477295][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.487240][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.496194][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.514422][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.523228][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.534377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.541530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.561263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.568485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.598073][ T7971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.608658][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.618463][ T7971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.627398][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.644358][ T7971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.653818][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.661540][ T7971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.671386][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.690064][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 150.706792][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.714248][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.721507][ T8226] bridge_slave_0: entered allmulticast mode [ 150.728080][ T8226] bridge_slave_0: entered promiscuous mode [ 150.739985][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.747523][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.755331][ T8226] bridge_slave_1: entered allmulticast mode [ 150.762320][ T8226] bridge_slave_1: entered promiscuous mode [ 150.823376][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.839590][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.894233][ T8226] team0: Port device team_slave_0 added [ 150.915949][ T8226] team0: Port device team_slave_1 added [ 150.926380][ T8298] loop7: detected capacity change from 0 to 512 [ 150.953858][ T8298] EXT4-fs: Ignoring removed oldalloc option [ 150.960029][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.972343][ T8298] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 151.002221][ T8298] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1222: invalid indirect mapped block 83886080 (level 1) [ 151.012317][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.019301][ T8298] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 151.030184][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.031388][ T8298] EXT4-fs (loop7): Remounting filesystem read-only [ 151.039356][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 151.039374][ C1] EXT4-fs (loop7): initial error at time 2000000095: ext4_free_branches:1023: inode 16 [ 151.039400][ C1] EXT4-fs (loop7): last error at time 2000000095: ext4_free_branches:1023: inode 16 [ 151.054932][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.060129][ T8298] EXT4-fs (loop7): 1 orphan inode deleted [ 151.090567][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.105184][ T8298] EXT4-fs (loop7): 1 truncate cleaned up [ 151.123310][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.128011][ T8298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.141090][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.174359][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.188179][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.195274][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.204286][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.211361][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.220748][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 151.254808][ T8298] syzkaller0: entered promiscuous mode [ 151.260360][ T8298] syzkaller0: entered allmulticast mode [ 151.274752][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.285449][ T8226] hsr_slave_0: entered promiscuous mode [ 151.291508][ T8226] hsr_slave_1: entered promiscuous mode [ 151.297860][ T8226] debugfs: 'hsr0' already exists in 'hsr' [ 151.303976][ T8226] Cannot create hsr debugfs directory [ 151.408353][ T8317] bridge0: port 3(syz_tun) entered disabled state [ 151.435991][ T8317] syz_tun (unregistering): left allmulticast mode [ 151.442744][ T8317] syz_tun (unregistering): left promiscuous mode [ 151.457264][ T8317] bridge0: port 3(syz_tun) entered disabled state [ 151.497294][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 151.543426][ T8317] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.558079][ T7894] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.604412][ T7944] veth0_vlan: entered promiscuous mode [ 151.616521][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.648068][ T7894] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.661223][ T7944] veth1_vlan: entered promiscuous mode [ 151.692719][ T7944] veth0_macvtap: entered promiscuous mode [ 151.714935][ T7944] veth1_macvtap: entered promiscuous mode [ 151.740316][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.769666][ T7894] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.790005][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.829934][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.850489][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.863049][ T7894] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.881625][ T8408] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1226'. [ 151.895168][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.911415][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.938570][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8408 comm=syz.1.1226 [ 151.955904][ T8408] 8021q: VLANs not supported on vcan0 [ 151.973150][ T7971] veth0_vlan: entered promiscuous mode [ 152.019478][ T8226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.030288][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.046146][ T7971] veth1_vlan: entered promiscuous mode [ 152.057665][ T8226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.067448][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.101651][ T8226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.104466][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.122427][ T7894] bridge_slave_1: left allmulticast mode [ 152.128144][ T7894] bridge_slave_1: left promiscuous mode [ 152.128275][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.141512][ T7894] bridge_slave_0: left allmulticast mode [ 152.147563][ T7894] bridge_slave_0: left promiscuous mode [ 152.153395][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.238947][ T8226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.249080][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.261779][ T7971] veth0_macvtap: entered promiscuous mode [ 152.274074][ T8428] loop5: detected capacity change from 0 to 4096 [ 152.292540][ T8428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.307958][ T7894] hsr_slave_0: left promiscuous mode [ 152.314121][ T7894] hsr_slave_1: left promiscuous mode [ 152.319687][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.328161][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.336291][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.336905][ T8428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.343794][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.365072][ T7894] veth1_macvtap: left promiscuous mode [ 152.375223][ T7894] veth0_macvtap: left promiscuous mode [ 152.380794][ T7894] veth1_vlan: left promiscuous mode [ 152.386339][ T7894] veth0_vlan: left promiscuous mode [ 152.413408][ T8439] FAULT_INJECTION: forcing a failure. [ 152.413408][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.426591][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.5.1228 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.426616][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.426631][ T8439] Call Trace: [ 152.426653][ T8439] [ 152.426660][ T8439] __dump_stack+0x1d/0x30 [ 152.426683][ T8439] dump_stack_lvl+0x95/0xd0 [ 152.426700][ T8439] dump_stack+0x15/0x1b [ 152.426770][ T8439] should_fail_ex+0x263/0x280 [ 152.426790][ T8439] should_fail+0xb/0x20 [ 152.426804][ T8439] should_fail_usercopy+0x1a/0x20 [ 152.426865][ T8439] _copy_to_user+0x20/0xa0 [ 152.427005][ T8439] simple_read_from_buffer+0xb5/0x130 [ 152.427034][ T8439] proc_fail_nth_read+0x10e/0x150 [ 152.427057][ T8439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.427092][ T8439] vfs_read+0x1ab/0x7f0 [ 152.427115][ T8439] ? __rcu_read_unlock+0x4e/0x70 [ 152.427135][ T8439] ? __fget_files+0x184/0x1c0 [ 152.427153][ T8439] ? mutex_lock+0x57/0x90 [ 152.427175][ T8439] ksys_read+0xdc/0x1a0 [ 152.427197][ T8439] __x64_sys_read+0x40/0x50 [ 152.427267][ T8439] x64_sys_call+0x2886/0x3020 [ 152.427337][ T8439] do_syscall_64+0x12c/0x3b0 [ 152.427364][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.427436][ T8439] RIP: 0033:0x7f6bb7bdd68e [ 152.427451][ T8439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.427467][ T8439] RSP: 002b:00007f6bb6676fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.427486][ T8439] RAX: ffffffffffffffda RBX: 00007f6bb66776c0 RCX: 00007f6bb7bdd68e [ 152.427500][ T8439] RDX: 000000000000000f RSI: 00007f6bb66770a0 RDI: 0000000000000004 [ 152.427588][ T8439] RBP: 00007f6bb6677090 R08: 0000000000000000 R09: 0000000000000000 [ 152.427599][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.427610][ T8439] R13: 00007f6bb7e96038 R14: 00007f6bb7e95fa0 R15: 00007ffe41dc2858 [ 152.427674][ T8439] [ 152.654855][ T7894] team0 (unregistering): Port device team_slave_1 removed [ 152.705082][ T7971] veth1_macvtap: entered promiscuous mode [ 152.706756][ T8443] loop1: detected capacity change from 0 to 128 [ 152.745786][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.758681][ T8443] FAULT_INJECTION: forcing a failure. [ 152.758681][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.758775][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.780864][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.1.1230 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.780893][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.780906][ T8443] Call Trace: [ 152.780912][ T8443] [ 152.780919][ T8443] __dump_stack+0x1d/0x30 [ 152.780944][ T8443] dump_stack_lvl+0x95/0xd0 [ 152.781021][ T8443] dump_stack+0x15/0x1b [ 152.781047][ T8443] should_fail_ex+0x263/0x280 [ 152.781068][ T8443] should_fail+0xb/0x20 [ 152.781085][ T8443] should_fail_usercopy+0x1a/0x20 [ 152.781107][ T8443] strncpy_from_user+0x27/0x250 [ 152.781185][ T8443] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 152.781212][ T8443] do_getname+0x59/0x1c0 [ 152.781231][ T8443] getname_uflags+0x23/0x30 [ 152.781315][ T8443] do_fchownat+0x89/0x210 [ 152.781330][ T8443] ? ksys_write+0x194/0x1a0 [ 152.781358][ T8443] __x64_sys_chown+0x47/0x60 [ 152.781410][ T8443] x64_sys_call+0x285a/0x3020 [ 152.781433][ T8443] do_syscall_64+0x12c/0x3b0 [ 152.781508][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.781528][ T8443] RIP: 0033:0x7f1e3b9cce59 [ 152.781544][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.781561][ T8443] RSP: 002b:00007f1e3a427028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 152.781582][ T8443] RAX: ffffffffffffffda RBX: 00007f1e3bc45fa0 RCX: 00007f1e3b9cce59 [ 152.781596][ T8443] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 152.781729][ T8443] RBP: 00007f1e3a427090 R08: 0000000000000000 R09: 0000000000000000 [ 152.781742][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.781755][ T8443] R13: 00007f1e3bc46038 R14: 00007f1e3bc45fa0 R15: 00007ffd706c82a8 [ 152.781774][ T8443] [ 153.014158][ T7805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.023403][ T7805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.033122][ T8446] syzkaller0: entered promiscuous mode [ 153.038648][ T8446] syzkaller0: entered allmulticast mode [ 153.057755][ T7805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.070211][ T7805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.103128][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.110225][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.117411][ T8373] bridge_slave_0: entered allmulticast mode [ 153.123961][ T8373] bridge_slave_0: entered promiscuous mode [ 153.136688][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.143957][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.151268][ T8373] bridge_slave_1: entered allmulticast mode [ 153.157993][ T8373] bridge_slave_1: entered promiscuous mode [ 153.189440][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.221549][ T8455] xt_hashlimit: size too large, truncated to 1048576 [ 153.227737][ T8458] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.238010][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.249993][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.255554][ T8452] loop4: detected capacity change from 0 to 1024 [ 153.277570][ T8458] loop1: detected capacity change from 0 to 512 [ 153.289570][ T8373] team0: Port device team_slave_0 added [ 153.295840][ T8452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.308295][ T8452] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.308436][ T8458] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1233: iget: bad i_size value: 38620345925642 [ 153.334825][ T8373] team0: Port device team_slave_1 added [ 153.342024][ T8458] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.344264][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.353418][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 153.353433][ C0] EXT4-fs (loop1): initial error at time 2000000097: ext4_orphan_get:1397: inode 15 [ 153.353456][ C0] EXT4-fs (loop1): last error at time 2000000097: ext4_orphan_get:1397: inode 15 [ 153.387564][ T8458] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1233: couldn't read orphan inode 15 (err -117) [ 153.399508][ T8458] loop1: lost filesystem error report for type 5 error -117 [ 153.401797][ T8458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.424833][ T28] kauditd_printk_skb: 353 callbacks suppressed [ 153.424845][ T28] audit: type=1400 audit(2000000097.769:1358): avc: denied { read } for pid=8454 comm="syz.5.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.470486][ T7805] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:18: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.486348][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.493459][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.508242][ T7805] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 153.520397][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.549268][ T7805] EXT4-fs (loop4): This should not happen!! Data will be lost [ 153.549268][ T7805] [ 153.561644][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.568741][ T7896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.578657][ T7971] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 153.591417][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.598481][ T7896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.658500][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.666181][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.695878][ T8468] loop5: detected capacity change from 0 to 512 [ 153.704551][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.736888][ T8468] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.796643][ T8373] hsr_slave_0: entered promiscuous mode [ 153.803569][ T8373] hsr_slave_1: entered promiscuous mode [ 153.810215][ T8373] debugfs: 'hsr0' already exists in 'hsr' [ 153.818675][ T8373] Cannot create hsr debugfs directory [ 153.872772][ T8477] loop1: detected capacity change from 0 to 512 [ 153.901946][ T28] audit: type=1400 audit(2000000098.229:1359): avc: denied { write } for pid=8472 comm="syz.4.1234" path="socket:[22465]" dev="sockfs" ino=22465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.980340][ T8477] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.229129][ T28] audit: type=1400 audit(2000000098.289:1360): avc: denied { bind } for pid=8472 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.253759][ T28] audit: type=1400 audit(2000000098.489:1361): avc: denied { listen } for pid=8472 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.389871][ T28] audit: type=1400 audit(2000000098.729:1362): avc: denied { write } for pid=8476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.430739][ T28] audit: type=1400 audit(2000000098.769:1363): avc: denied { write } for pid=8501 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.475981][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1236'. [ 154.487978][ T28] audit: type=1400 audit(2000000098.829:1364): avc: denied { map } for pid=8467 comm="syz.5.1236" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.526667][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.655993][ T28] audit: type=1400 audit(2000000098.999:1365): avc: denied { write } for pid=8507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.714842][ T28] audit: type=1400 audit(2000000099.049:1366): avc: denied { write } for pid=8530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.775871][ T8226] veth0_vlan: entered promiscuous mode [ 154.787315][ T8524] loop1: detected capacity change from 0 to 2048 [ 154.804340][ T8226] veth1_vlan: entered promiscuous mode [ 154.824012][ T8524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.887950][ T8373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.899729][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.914978][ T8226] veth0_macvtap: entered promiscuous mode [ 154.923936][ T28] audit: type=1400 audit(2000000099.269:1367): avc: denied { write } for pid=8534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.938053][ T8226] veth1_macvtap: entered promiscuous mode [ 155.005665][ T8373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.018869][ T8559] loop5: detected capacity change from 0 to 1024 [ 155.028638][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.054357][ T8373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.064912][ T8559] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.087624][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.097116][ T8373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.107647][ T8373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.129966][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.139765][ T8564] syzkaller0: entered promiscuous mode [ 155.149388][ T8564] syzkaller0: entered allmulticast mode [ 155.161091][ T5293] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.190018][ T5293] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 155.205719][ T5293] EXT4-fs (loop5): This should not happen!! Data will be lost [ 155.205719][ T5293] [ 155.220133][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.230630][ T7944] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 155.276863][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.287380][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.306843][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.316373][ T8588] loop5: detected capacity change from 0 to 2048 [ 155.339042][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.364994][ T8594] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.371870][ T8588] loop5: p2 p3 < > p4 < p5 > [ 155.380265][ T8588] loop5: partition table partially beyond EOD, truncated [ 155.401350][ T8594] loop1: detected capacity change from 0 to 512 [ 155.407925][ T8588] loop5: p3 start 4284289 is beyond EOD, truncated [ 155.442621][ T8594] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1245: iget: bad i_size value: 38620345925642 [ 155.457248][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.472642][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.486892][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.487537][ T8594] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.494013][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.505127][ T8594] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1245: couldn't read orphan inode 15 (err -117) [ 155.522235][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 155.522254][ C0] EXT4-fs (loop1): initial error at time 2000000099: ext4_orphan_get:1397: inode 15 [ 155.522284][ C0] EXT4-fs (loop1): last error at time 2000000099: ext4_orphan_get:1397: inode 15 [ 155.547682][ T8594] loop1: lost filesystem error report for type 5 error -117 [ 155.565258][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.577781][ T8608] FAULT_INJECTION: forcing a failure. [ 155.577781][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.579677][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.625472][ T8373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.636443][ T8373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.640496][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.2.1220 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.640522][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.640534][ T8608] Call Trace: [ 155.640541][ T8608] [ 155.640550][ T8608] __dump_stack+0x1d/0x30 [ 155.640572][ T8608] dump_stack_lvl+0x95/0xd0 [ 155.640632][ T8608] dump_stack+0x15/0x1b [ 155.640650][ T8608] should_fail_ex+0x263/0x280 [ 155.640669][ T8608] should_fail+0xb/0x20 [ 155.640733][ T8608] should_fail_usercopy+0x1a/0x20 [ 155.640807][ T8608] _copy_to_user+0x20/0xa0 [ 155.640872][ T8608] bpf_prog_test_run_raw_tp+0x3a5/0x410 [ 155.640903][ T8608] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 155.640929][ T8608] bpf_prog_test_run+0x204/0x340 [ 155.640957][ T8608] __sys_bpf+0x52e/0x7e0 [ 155.641023][ T8608] __x64_sys_bpf+0x41/0x50 [ 155.641044][ T8608] x64_sys_call+0x10cb/0x3020 [ 155.641064][ T8608] do_syscall_64+0x12c/0x3b0 [ 155.641093][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.641210][ T8608] RIP: 0033:0x7f9af3e2ce59 [ 155.641224][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.641248][ T8608] RSP: 002b:00007f9af287f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.641267][ T8608] RAX: ffffffffffffffda RBX: 00007f9af40a5fa0 RCX: 00007f9af3e2ce59 [ 155.641281][ T8608] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 155.641293][ T8608] RBP: 00007f9af287f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.641379][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.641391][ T8608] R13: 00007f9af40a6038 R14: 00007f9af40a5fa0 R15: 00007ffdb20102d8 [ 155.641410][ T8608] [ 155.904084][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 156.031016][ T8636] loop1: detected capacity change from 0 to 2048 [ 156.066671][ T8636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.114055][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.156035][ T8663] hub 8-0:1.0: USB hub found [ 156.160792][ T8663] hub 8-0:1.0: 8 ports detected [ 156.241745][ T8668] loop1: detected capacity change from 0 to 1024 [ 156.295057][ T8668] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.324172][ T8373] veth0_vlan: entered promiscuous mode [ 156.339855][ T8373] veth1_vlan: entered promiscuous mode [ 156.357507][ T8373] veth0_macvtap: entered promiscuous mode [ 156.371391][ T5293] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 156.373886][ T8373] veth1_macvtap: entered promiscuous mode [ 156.394029][ T5293] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 156.406805][ T8696] syzkaller0: entered promiscuous mode [ 156.409232][ T5293] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.409232][ T5293] [ 156.422629][ T8696] syzkaller0: entered allmulticast mode [ 156.428324][ T7748] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 156.447281][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.472046][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.491363][ T8711] loop1: detected capacity change from 0 to 1024 [ 156.501527][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.518485][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.537678][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.547876][ T8711] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.550368][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.561410][ T8711] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.583135][ T8711] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 156.595630][ T8711] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.595630][ T8711] [ 156.614850][ T8716] loop5: detected capacity change from 0 to 1764 [ 156.621601][ T8716] iso9660: Unknown parameter 'euid' [ 156.636493][ T8716] xt_socket: unknown flags 0x48 [ 156.663608][ T8718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.680594][ T8718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.697824][ T8718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.722336][ T8718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.739441][ T8718] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.742229][ T8731] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.758940][ T8711] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.777965][ T8731] loop5: detected capacity change from 0 to 512 [ 156.787834][ T8711] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.806584][ T8711] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.808325][ T8731] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1257: iget: bad i_size value: 38620345925642 [ 156.821183][ T8711] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1254: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.847883][ T8731] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.848079][ T8731] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1257: couldn't read orphan inode 15 (err -117) [ 156.857538][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 156.857560][ C0] EXT4-fs (loop5): initial error at time 2000000101: ext4_orphan_get:1397: inode 15 [ 156.857586][ C0] EXT4-fs (loop5): last error at time 2000000101: ext4_orphan_get:1397: inode 15 [ 156.896054][ T8731] loop5: lost filesystem error report for type 5 error -117 [ 156.931839][ T8743] FAULT_INJECTION: forcing a failure. [ 156.931839][ T8743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.963087][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.963114][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.963126][ T8743] Call Trace: [ 156.963133][ T8743] [ 156.963141][ T8743] __dump_stack+0x1d/0x30 [ 156.963202][ T8743] dump_stack_lvl+0x95/0xd0 [ 156.963222][ T8743] dump_stack+0x15/0x1b [ 156.963239][ T8743] should_fail_ex+0x263/0x280 [ 156.963304][ T8743] should_fail+0xb/0x20 [ 156.963340][ T8743] should_fail_usercopy+0x1a/0x20 [ 156.963361][ T8743] strncpy_from_user+0x27/0x250 [ 156.963387][ T8743] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 156.963418][ T8743] do_getname+0x59/0x1c0 [ 156.963446][ T8743] __se_sys_renameat+0x35/0x1c0 [ 156.963465][ T8743] __x64_sys_renameat+0x55/0x70 [ 156.963481][ T8743] x64_sys_call+0x2c90/0x3020 [ 156.963516][ T8743] do_syscall_64+0x12c/0x3b0 [ 156.963543][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.963602][ T8743] RIP: 0033:0x7f9af3e2ce59 [ 156.963618][ T8743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.963633][ T8743] RSP: 002b:00007f9af287f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 156.963650][ T8743] RAX: ffffffffffffffda RBX: 00007f9af40a5fa0 RCX: 00007f9af3e2ce59 [ 156.963774][ T8743] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 156.963843][ T8743] RBP: 00007f9af287f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.963857][ T8743] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 156.963871][ T8743] R13: 00007f9af40a6038 R14: 00007f9af40a5fa0 R15: 00007ffdb20102d8 [ 156.963890][ T8743] [ 157.279149][ T8768] syzkaller0: entered promiscuous mode [ 157.285421][ T8758] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.302101][ T8768] syzkaller0: entered allmulticast mode [ 157.302365][ T8753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.358320][ T7896] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:21: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.378002][ T64] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 157.391259][ T7896] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 157.410292][ T64] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.410292][ T64] [ 157.421363][ T7896] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.421363][ T7896] [ 157.432642][ T7971] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 157.446765][ T7748] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 157.460657][ T8787] EXT4-fs: Ignoring removed nobh option [ 157.469320][ T8787] EXT4-fs: Ignoring removed i_version option [ 157.549481][ T8793] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1266: corrupted in-inode xattr: e_value size too large [ 157.579177][ T8795] xt_hashlimit: size too large, truncated to 1048576 [ 157.590036][ T8799] Cannot find add_set index 0 as target [ 157.618920][ T8787] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 157.634784][ T8799] siw: device registration error -23 [ 157.641728][ T8793] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.641865][ T8793] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1266: couldn't read orphan inode 15 (err -117) [ 157.641934][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 157.669342][ C0] EXT4-fs (loop1): initial error at time 2000000101: ext4_iget_extra_inode:5128: inode 15 [ 157.679316][ C0] EXT4-fs (loop1): last error at time 2000000101: ext4_iget_extra_inode:5128: inode 15 [ 157.696371][ T8827] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1265'. [ 157.715720][ T8787] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 600 with error 28 [ 157.740816][ T8787] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.740816][ T8787] [ 157.762402][ T8827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.776581][ T8787] EXT4-fs (loop5): Total free blocks count 0 [ 157.786088][ T8793] loop1: lost filesystem error report for type 5 error -117 [ 157.786568][ T8793] EXT4-fs mount: 25 callbacks suppressed [ 157.786585][ T8793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.787400][ T8827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.801124][ T8787] EXT4-fs (loop5): Free/Dirty block details [ 157.832427][ T8787] EXT4-fs (loop5): free_blocks=20480 [ 157.844271][ T8787] EXT4-fs (loop5): dirty_blocks=608 [ 157.863310][ T8787] EXT4-fs (loop5): Block reservation details [ 157.888448][ T8827] bond0 (unregistering): Released all slaves [ 157.896344][ T7748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.905958][ T8787] EXT4-fs (loop5): i_reserved_data_blocks=38 [ 157.923991][ T8811] FAULT_INJECTION: forcing a failure. [ 157.923991][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 157.961173][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.5.1267 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.961200][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.961213][ T8811] Call Trace: [ 157.961219][ T8811] [ 157.961237][ T8811] __dump_stack+0x1d/0x30 [ 157.961261][ T8811] dump_stack_lvl+0x95/0xd0 [ 157.961281][ T8811] dump_stack+0x15/0x1b [ 157.961298][ T8811] should_fail_ex+0x263/0x280 [ 157.961385][ T8811] should_failslab+0x8c/0xb0 [ 157.961414][ T8811] __kmalloc_noprof+0xb8/0x4d0 [ 157.961443][ T8811] ? ext4_find_extent+0x17a/0x790 [ 157.961489][ T8811] ext4_find_extent+0x17a/0x790 [ 157.961512][ T8811] ext4_ext_map_blocks+0x10d/0x2ea0 [ 157.961551][ T8811] ? __css_rstat_updated+0xbb/0x280 [ 157.961574][ T8811] ? __mod_memcg_lruvec_state+0x1bf/0x2b0 [ 157.961655][ T8811] ? __rcu_read_unlock+0x4e/0x70 [ 157.961702][ T8811] ? drain_obj_stock+0x438/0x680 [ 157.961733][ T8811] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 157.961806][ T8811] ext4_map_query_blocks+0xb2/0x550 [ 157.961832][ T8811] ? ext4_es_lookup_extent+0x3a2/0x500 [ 157.961862][ T8811] ext4_da_get_block_prep+0x2d2/0xcc0 [ 157.961894][ T8811] ? __rcu_read_unlock+0x4e/0x70 [ 157.961912][ T8811] ? folio_alloc_buffers+0x30d/0x3d0 [ 157.961934][ T8811] __block_write_begin_int+0x400/0xf90 [ 157.962060][ T8811] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 157.962096][ T8811] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 157.962125][ T8811] block_page_mkwrite+0x183/0x300 [ 157.962180][ T8811] ext4_page_mkwrite+0x835/0xad0 [ 157.962202][ T8811] do_wp_page+0xc65/0x2040 [ 157.962226][ T8811] ? __schedule+0x951/0xd40 [ 157.962278][ T8811] ? __rcu_read_lock+0x36/0x50 [ 157.962292][ T8811] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 157.962310][ T8811] handle_mm_fault+0x8bb/0x2e70 [ 157.962393][ T8811] do_user_addr_fault+0x3fd/0x1050 [ 157.962416][ T8811] exc_page_fault+0x62/0xa0 [ 157.962498][ T8811] asm_exc_page_fault+0x26/0x30 [ 157.962514][ T8811] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 157.962531][ T8811] Code: 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 1e 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 157.962545][ T8811] RSP: 0018:ffffc900016a7998 EFLAGS: 00050206 [ 157.962563][ T8811] RAX: ffff88810270e000 RBX: ffff8881224f9000 RCX: 0000000000000a80 [ 157.962575][ T8811] RDX: 0000000000000000 RSI: ffff8881224f9580 RDI: 0000200000002000 [ 157.962585][ T8811] RBP: 0000200000001a80 R08: 0000000000000550 R09: 0000000000000000 [ 157.962596][ T8811] R10: 00018881224f9000 R11: 00018881224f9fff R12: 0000200000002a80 [ 157.962607][ T8811] R13: ffffc900016a7dc8 R14: 0000000000001000 R15: 00007ffffffff000 [ 157.962622][ T8811] _copy_to_iter+0x141/0xea0 [ 157.962714][ T8811] ? folio_mark_accessed+0xb1/0x3a0 [ 157.962738][ T8811] ? __sanitizer_cov_trace_const_cmp8+0x36/0x90 [ 157.962786][ T8811] copy_page_to_iter+0x178/0x210 [ 157.962866][ T8811] filemap_read+0x52a/0xa10 [ 157.962898][ T8811] generic_file_read_iter+0x79/0x330 [ 157.962950][ T8811] ? _parse_integer+0x27/0x40 [ 157.962971][ T8811] ? kstrtoull+0x111/0x140 [ 157.962992][ T8811] ext4_file_read_iter+0x1cc/0x290 [ 157.963035][ T8811] do_iter_readv_writev+0x4fd/0x5a0 [ 157.963059][ T8811] vfs_readv+0x1f4/0x6e0 [ 157.963081][ T8811] __x64_sys_preadv+0xfd/0x1c0 [ 157.963177][ T8811] x64_sys_call+0x2915/0x3020 [ 157.963194][ T8811] do_syscall_64+0x12c/0x3b0 [ 157.963216][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.963233][ T8811] RIP: 0033:0x7f6bb7c1ce59 [ 157.963330][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.963342][ T8811] RSP: 002b:00007f6bb6656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 157.963357][ T8811] RAX: ffffffffffffffda RBX: 00007f6bb7e96090 RCX: 00007f6bb7c1ce59 [ 157.963367][ T8811] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004 [ 157.963382][ T8811] RBP: 00007f6bb6656090 R08: 0000000000000000 R09: 0000000000000000 [ 157.963392][ T8811] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 157.963402][ T8811] R13: 00007f6bb7e96128 R14: 00007f6bb7e96090 R15: 00007ffe41dc2858 [ 157.963416][ T8811] [ 158.435883][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 158.435899][ T28] audit: type=1400 audit(2000000102.779:1480): avc: denied { ioctl } for pid=8850 comm="syz.2.1270" path="socket:[24729]" dev="sockfs" ino=24729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.471571][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 592 with error 28 [ 158.495059][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 158.495059][ T12] [ 158.522024][ T7944] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 158.574592][ T8871] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.587150][ T28] audit: type=1400 audit(2000000102.929:1481): avc: denied { write } for pid=8845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.617723][ T8871] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1273: iget: bad i_size value: 38620345925642 [ 158.633012][ T8869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.648326][ T8871] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.648535][ T8871] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1273: couldn't read orphan inode 15 (err -117) [ 158.657728][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 158.657751][ C1] EXT4-fs (loop5): initial error at time 2000000102: ext4_orphan_get:1397: inode 15 [ 158.657792][ C1] EXT4-fs (loop5): last error at time 2000000102: ext4_orphan_get:1397: inode 15 [ 158.708481][ T8880] syzkaller0: entered promiscuous mode [ 158.721099][ T8880] syzkaller0: entered allmulticast mode [ 158.724829][ T8869] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.737307][ T8871] loop5: lost filesystem error report for type 5 error -117 [ 158.740726][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.760608][ T28] audit: type=1400 audit(2000000103.069:1482): avc: denied { write } for pid=8881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.809671][ T7894] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 1) [ 158.824055][ T7894] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 158.849942][ T7894] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.849942][ T7894] [ 158.883983][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.973525][ T8886] set_capacity_and_notify: 6 callbacks suppressed [ 158.973600][ T8886] loop1: detected capacity change from 0 to 1024 [ 158.999400][ T8886] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 159.028897][ T8226] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 159.081311][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.210247][ T8226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.660199][ T8907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1281'. [ 159.734922][ T8917] FAULT_INJECTION: forcing a failure. [ 159.734922][ T8917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.769122][ T28] audit: type=1400 audit(2000000104.109:1483): avc: denied { write } for pid=8884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.811061][ T8917] CPU: 0 UID: 0 PID: 8917 Comm: syz.0.1284 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.811150][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.811209][ T8917] Call Trace: [ 159.811217][ T8917] [ 159.811225][ T8917] __dump_stack+0x1d/0x30 [ 159.811249][ T8917] dump_stack_lvl+0x95/0xd0 [ 159.811268][ T8917] dump_stack+0x15/0x1b [ 159.811297][ T8917] should_fail_ex+0x263/0x280 [ 159.811327][ T8917] should_fail+0xb/0x20 [ 159.811340][ T8917] should_fail_usercopy+0x1a/0x20 [ 159.811361][ T8917] _copy_to_user+0x20/0xa0 [ 159.811385][ T8917] simple_read_from_buffer+0xb5/0x130 [ 159.811460][ T8917] proc_fail_nth_read+0x10e/0x150 [ 159.811488][ T8917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.811526][ T8917] vfs_read+0x1ab/0x7f0 [ 159.811552][ T8917] ? inet_dgram_connect+0x125/0x1c0 [ 159.811615][ T8917] ? __pfx_inet_dgram_connect+0x10/0x10 [ 159.811642][ T8917] ? __sys_connect+0x20a/0x2a0 [ 159.811666][ T8917] ksys_read+0xdc/0x1a0 [ 159.811688][ T8917] __x64_sys_read+0x40/0x50 [ 159.811779][ T8917] x64_sys_call+0x2886/0x3020 [ 159.811802][ T8917] do_syscall_64+0x12c/0x3b0 [ 159.811829][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.811846][ T8917] RIP: 0033:0x7f71dc10d68e [ 159.811862][ T8917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.811912][ T8917] RSP: 002b:00007f71daba6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.811933][ T8917] RAX: ffffffffffffffda RBX: 00007f71daba76c0 RCX: 00007f71dc10d68e [ 159.811947][ T8917] RDX: 000000000000000f RSI: 00007f71daba70a0 RDI: 0000000000000004 [ 159.811961][ T8917] RBP: 00007f71daba7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.811974][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.811987][ T8917] R13: 00007f71dc3c6038 R14: 00007f71dc3c5fa0 R15: 00007ffd90e09f58 [ 159.812007][ T8917] [ 160.080720][ T28] audit: type=1400 audit(2000000104.379:1484): avc: denied { write } for pid=8926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.264899][ T8929] loop2: detected capacity change from 0 to 2048 [ 160.273091][ T28] audit: type=1400 audit(2000000104.409:1485): avc: denied { name_bind } for pid=8923 comm="syz.5.1279" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 160.307043][ T8929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.381399][ T8929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.397691][ T28] audit: type=1400 audit(2000000104.409:1486): avc: denied { getopt } for pid=8923 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.450347][ T8946] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.492118][ T8946] loop0: detected capacity change from 0 to 512 [ 160.503106][ T7748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.518465][ T8226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.547538][ T28] audit: type=1400 audit(2000000104.889:1487): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.583276][ T8946] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1289: iget: bad i_size value: 38620345925642 [ 160.651452][ T8946] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.651726][ T8946] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1289: couldn't read orphan inode 15 (err -117) [ 160.661059][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 160.661084][ C0] EXT4-fs (loop0): initial error at time 2000000104: ext4_orphan_get:1397: inode 15 [ 160.661117][ C0] EXT4-fs (loop0): last error at time 2000000104: ext4_orphan_get:1397: inode 15 [ 160.673278][ T8948] SELinux: failed to load policy [ 160.705286][ T28] audit: type=1400 audit(2000000104.889:1488): avc: denied { write } for pid=8959 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.715476][ T8946] loop0: lost filesystem error report for type 5 error -117 [ 160.737953][ T28] audit: type=1400 audit(2000000105.009:1489): avc: denied { getopt } for pid=8947 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.778496][ T8946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.802768][ T8981] loop1: detected capacity change from 0 to 128 [ 160.815295][ T8981] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 160.837544][ T8981] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.943914][ T8989] loop2: detected capacity change from 0 to 512 [ 160.952089][ T8948] loop4: detected capacity change from 0 to 4096 [ 160.961701][ T8948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.972581][ T8981] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.984560][ T8948] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 161.003111][ T8948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.004145][ T8989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.028781][ T8989] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.098330][ T9000] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1295'. [ 161.263691][ T7971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.376184][ T7748] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.397085][ T8226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.514401][ T8373] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.782626][ T9036] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.800275][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 161.817816][ T9032] loop1: detected capacity change from 0 to 2048 [ 161.826001][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'. [ 161.836219][ T9032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.867742][ T9032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.897278][ T7748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.900582][ T9045] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.936604][ T9057] loop1: detected capacity change from 0 to 512 [ 161.975467][ T9057] EXT4-fs: Ignoring removed oldalloc option [ 161.994164][ T9057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.012397][ T9066] xt_hashlimit: size too large, truncated to 1048576 [ 162.023306][ T9062] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.055127][ T9062] loop5: detected capacity change from 0 to 512 [ 162.064775][ T9057] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1306: invalid indirect mapped block 83886080 (level 1) [ 162.169744][ T9057] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.171911][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 162.187667][ C0] EXT4-fs (loop1): initial error at time 2000000106: ext4_free_branches:1023: inode 16 [ 162.197357][ C0] EXT4-fs (loop1): last error at time 2000000106: ext4_free_branches:1023: inode 16 [ 162.224244][ T9057] EXT4-fs (loop1): Remounting filesystem read-only [ 162.253936][ T9062] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1307: iget: bad i_size value: 38620345925642 [ 162.266871][ T9057] EXT4-fs (loop1): 1 orphan inode deleted [ 162.288868][ T9057] EXT4-fs (loop1): 1 truncate cleaned up [ 162.292155][ T9062] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.296815][ T9057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.424150][ T9089] loop0: detected capacity change from 0 to 1024 [ 162.470640][ T9089] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 162.480675][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 162.480692][ C1] EXT4-fs (loop5): initial error at time 2000000106: ext4_orphan_get:1397: inode 15 [ 162.480735][ C1] EXT4-fs (loop5): last error at time 2000000106: ext4_orphan_get:1397: inode 15 [ 162.509513][ T9062] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1307: couldn't read orphan inode 15 (err -117) [ 162.572966][ T9089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.687311][ T9062] loop5: lost filesystem error report for type 5 error -117 [ 162.694109][ T9062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.775263][ T9094] syzkaller0: entered promiscuous mode [ 162.807420][ T9094] syzkaller0: entered allmulticast mode [ 163.256149][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.390581][ T9105] 0: reclassify loop, rule prio 0, protocol 800 [ 163.628215][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 163.628230][ T28] audit: type=1400 audit(2000000107.969:1502): avc: denied { read } for pid=9110 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.683501][ T9087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.700498][ T5293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.795468][ T5293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.844480][ T9118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.867899][ T5293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.906716][ T9118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.940297][ T8373] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.971960][ T5293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.984676][ T9123] set_capacity_and_notify: 1 callbacks suppressed [ 163.984691][ T9123] loop0: detected capacity change from 0 to 512 [ 164.002931][ T9123] EXT4-fs: Ignoring removed oldalloc option [ 164.023786][ T9123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.037101][ T9123] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1319: invalid indirect mapped block 83886080 (level 1) [ 164.078998][ T8226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.093340][ T28] audit: type=1400 audit(2000000108.439:1503): avc: denied { write } for pid=9096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.181050][ T9123] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 164.181259][ T9123] EXT4-fs (loop0): Remounting filesystem read-only [ 164.183021][ T9131] loop5: detected capacity change from 0 to 128 [ 164.190522][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 164.209668][ C0] EXT4-fs (loop0): initial error at time 2000000108: ext4_free_branches:1023: inode 16 [ 164.219376][ C0] EXT4-fs (loop0): last error at time 2000000108: ext4_free_branches:1023: inode 16 [ 164.270464][ T28] audit: type=1400 audit(2000000108.609:1504): avc: denied { write } for pid=9132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.284864][ T9123] EXT4-fs (loop0): 1 orphan inode deleted [ 164.304969][ T5293] bridge_slave_1: left allmulticast mode [ 164.310837][ T5293] bridge_slave_1: left promiscuous mode [ 164.318989][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.335615][ T5293] bridge_slave_0: left allmulticast mode [ 164.341524][ T5293] bridge_slave_0: left promiscuous mode [ 164.347261][ T9123] EXT4-fs (loop0): 1 truncate cleaned up [ 164.368935][ T9123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.381736][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.619262][ T9150] loop2: detected capacity change from 0 to 1024 [ 164.680925][ T9150] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 164.750321][ T9150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.967333][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.988490][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.518727][ T5293] bond0 (unregistering): Released all slaves [ 167.126851][ T28] audit: type=1400 audit(2000000111.469:1505): avc: denied { write } for pid=9146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.181368][ T28] audit: type=1400 audit(2000000111.509:1506): avc: denied { write } for pid=9194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.279484][ T28] audit: type=1400 audit(2000000111.619:1507): avc: denied { write } for pid=9196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.320625][ T28] audit: type=1400 audit(2000000111.659:1508): avc: denied { write } for pid=9207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.426567][ T28] audit: type=1400 audit(2000000111.769:1509): avc: denied { write } for pid=9210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.541091][ T8226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.564690][ T28] audit: type=1400 audit(2000000111.909:1510): avc: denied { write } for pid=9223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.608436][ T5293] hsr_slave_0: left promiscuous mode [ 167.615115][ T9229] xt_hashlimit: size too large, truncated to 1048576 [ 167.641167][ T5293] hsr_slave_1: left promiscuous mode [ 167.665324][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.673008][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.682396][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.689833][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.701012][ T5293] veth1_macvtap: left promiscuous mode [ 167.706719][ T5293] veth0_macvtap: left promiscuous mode [ 167.712491][ T5293] veth1_vlan: left promiscuous mode [ 167.717775][ T5293] veth0_vlan: left promiscuous mode [ 167.747656][ T9237] loop5: detected capacity change from 0 to 2048 [ 167.757646][ T9237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.774640][ T9237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.808771][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 167.822681][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 167.834025][ T9241] xt_hashlimit: size too large, truncated to 1048576 [ 167.921360][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.995493][ T9148] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.018592][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1333'. [ 168.082124][ T28] audit: type=1400 audit(2000000112.419:1511): avc: denied { write } for pid=9245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.159864][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 168.223689][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.230816][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.239088][ T9135] bridge_slave_0: entered allmulticast mode [ 168.245699][ T9135] bridge_slave_0: entered promiscuous mode [ 168.258019][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.277487][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.285002][ T9135] bridge_slave_1: entered allmulticast mode [ 168.291544][ T9135] bridge_slave_1: entered promiscuous mode [ 168.302708][ T9264] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 168.327634][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.339857][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.403907][ T9135] team0: Port device team_slave_0 added [ 168.411703][ T9135] team0: Port device team_slave_1 added [ 168.551634][ T9287] loop5: detected capacity change from 0 to 1024 [ 169.326838][ T9287] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.377256][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.384233][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.410146][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.295806][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.302802][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.336053][ T9287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.357544][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.406850][ T5293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.472519][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 170.472534][ T28] audit: type=1400 audit(2000000114.809:1513): avc: denied { write } for pid=9292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.519543][ T5293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.564445][ T9135] hsr_slave_0: entered promiscuous mode [ 170.574364][ T28] audit: type=1400 audit(2000000114.919:1514): avc: denied { write } for pid=9308 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.599598][ T9135] hsr_slave_1: entered promiscuous mode [ 170.618989][ T5293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.694208][ T9313] loop2: detected capacity change from 0 to 512 [ 170.740466][ T9313] EXT4-fs: Ignoring removed oldalloc option [ 170.751137][ T5293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.769003][ T9313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.800864][ T9313] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1341: invalid indirect mapped block 83886080 (level 1) [ 170.841971][ T9313] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 170.842119][ T9313] EXT4-fs (loop2): Remounting filesystem read-only [ 170.857777][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 170.857795][ C1] EXT4-fs (loop2): initial error at time 2000000115: ext4_free_branches:1023: inode 16 [ 170.857818][ C1] EXT4-fs (loop2): last error at time 2000000115: ext4_free_branches:1023: inode 16 [ 170.940620][ T28] audit: type=1400 audit(2000000115.269:1515): avc: denied { write } for pid=9311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.989250][ T9313] EXT4-fs (loop2): 1 orphan inode deleted [ 171.008823][ T9313] EXT4-fs (loop2): 1 truncate cleaned up [ 171.020773][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.035085][ T28] audit: type=1400 audit(2000000115.359:1516): avc: denied { write } for pid=9327 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.103784][ T5293] bridge_slave_1: left allmulticast mode [ 171.109990][ T5293] bridge_slave_1: left promiscuous mode [ 171.125652][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.154055][ T5293] bridge_slave_0: left allmulticast mode [ 171.159828][ T5293] bridge_slave_0: left promiscuous mode [ 171.167310][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.176171][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.193308][ T9339] loop4: detected capacity change from 0 to 2048 [ 171.199957][ T9339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.227300][ T9339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.295171][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.305050][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.314954][ T5293] bond0 (unregistering): Released all slaves [ 171.343240][ T7971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.348981][ T9313] syzkaller0: entered promiscuous mode [ 171.357945][ T9313] syzkaller0: entered allmulticast mode [ 171.397757][ T9361] loop4: detected capacity change from 0 to 2048 [ 171.418543][ T5293] hsr_slave_0: left promiscuous mode [ 171.425855][ T5293] hsr_slave_1: left promiscuous mode [ 171.431592][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.439120][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.440341][ T9361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.458548][ T9361] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.458769][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.470280][ T28] audit: type=1400 audit(2000000115.819:1517): avc: denied { write } for pid=9360 comm="syz.4.1344" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.498284][ T9361] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1344'. [ 171.499108][ T28] audit: type=1400 audit(2000000115.819:1518): avc: denied { read write } for pid=9360 comm="syz.4.1344" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.507250][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.529966][ T28] audit: type=1400 audit(2000000115.819:1519): avc: denied { open } for pid=9360 comm="syz.4.1344" path="/21/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.559939][ T28] audit: type=1400 audit(2000000115.829:1520): avc: denied { ioctl } for pid=9360 comm="syz.4.1344" path="/21/file0/file1" dev="loop4" ino=15 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.595019][ T7971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.604255][ T5293] veth1_macvtap: left promiscuous mode [ 171.609911][ T5293] veth0_macvtap: left promiscuous mode [ 171.615464][ T5293] veth1_vlan: left promiscuous mode [ 171.620749][ T5293] veth0_vlan: left promiscuous mode [ 171.642840][ T9367] loop4: detected capacity change from 0 to 2048 [ 171.687646][ T9367] loop4: p2 p3 p7 [ 171.693194][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 171.704074][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 171.720213][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 171.732503][ T3640] udevd[3640]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 171.743724][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 171.813683][ T9376] loop4: detected capacity change from 0 to 1024 [ 171.820671][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.831155][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.838869][ T9267] bridge_slave_0: entered allmulticast mode [ 171.846110][ T9267] bridge_slave_0: entered promiscuous mode [ 171.865075][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.872260][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.879411][ T9267] bridge_slave_1: entered allmulticast mode [ 171.887848][ T9267] bridge_slave_1: entered promiscuous mode [ 171.907180][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.917524][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.937594][ T9267] team0: Port device team_slave_0 added [ 171.950511][ T9267] team0: Port device team_slave_1 added [ 171.957421][ T9376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.967974][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.976764][ T9376] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.977497][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.987966][ T9334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.013259][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.034231][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.041185][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.067248][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.109051][ T9267] hsr_slave_0: entered promiscuous mode [ 172.115494][ T9267] hsr_slave_1: entered promiscuous mode [ 172.122048][ T9267] debugfs: 'hsr0' already exists in 'hsr' [ 172.127790][ T9267] Cannot create hsr debugfs directory [ 172.159950][ T28] audit: type=1400 audit(2000000116.489:1521): avc: denied { map } for pid=9375 comm="syz.4.1349" path="/24/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.228069][ T7805] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:18: lblock 0 mapped to illegal pblock 0 (length 1) [ 172.248834][ T7805] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 172.381079][ T7805] EXT4-fs (loop4): This should not happen!! Data will be lost [ 172.381079][ T7805] [ 172.454030][ T7971] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 172.497328][ T9135] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 172.513478][ T7971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.529866][ T9135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.566298][ T9135] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 172.584213][ T9135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.614348][ T9135] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 172.658425][ T9135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.715076][ T9135] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 172.732397][ T9135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.742091][ T28] audit: type=1400 audit(2000000117.079:1522): avc: denied { write } for pid=9387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.802978][ T9267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.886838][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.914280][ T9267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.944366][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.961022][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.968111][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.985695][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.992820][ T7805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.072876][ T9267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.125007][ T9418] Cannot find add_set index 0 as target [ 173.149783][ T9418] siw: device registration error -23 [ 173.169901][ T9418] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1351'. [ 173.286619][ T9267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.450133][ T9267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.497370][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.531564][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.552272][ T9267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.568741][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.589122][ T9267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.602202][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.620656][ T9267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.632313][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.707324][ T9482] xt_hashlimit: size too large, truncated to 1048576 [ 173.757933][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.780341][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.789286][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.796366][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.862422][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.869528][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.921715][ T9135] veth0_vlan: entered promiscuous mode [ 173.950798][ T9135] veth1_vlan: entered promiscuous mode [ 173.979286][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 173.990274][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.019350][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.034432][ T9431] bridge_slave_0: entered allmulticast mode [ 174.046447][ T9431] bridge_slave_0: entered promiscuous mode [ 174.056074][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.063280][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.070843][ T9431] bridge_slave_1: entered allmulticast mode [ 174.077694][ T9431] bridge_slave_1: entered promiscuous mode [ 174.079145][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1356'. [ 174.095521][ T9527] bridge_slave_1: left allmulticast mode [ 174.101174][ T9527] bridge_slave_1: left promiscuous mode [ 174.107475][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.115550][ T9527] bridge_slave_0: left allmulticast mode [ 174.122986][ T9527] bridge_slave_0: left promiscuous mode [ 174.128701][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.208204][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.227228][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.255284][ T9431] team0: Port device team_slave_0 added [ 174.268387][ T9135] veth0_macvtap: entered promiscuous mode [ 174.290546][ T9431] team0: Port device team_slave_1 added [ 174.291119][ T9552] loop5: detected capacity change from 0 to 1024 [ 174.324093][ T9552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.339006][ T9552] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.363261][ T9135] veth1_macvtap: entered promiscuous mode [ 174.382939][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.400438][ T5293] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 174.414454][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.451072][ T5293] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 174.458332][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.473811][ T5293] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.473811][ T5293] [ 174.495061][ T7944] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 174.514508][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.575801][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.582877][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.625564][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.190639][ T9614] loop5: detected capacity change from 0 to 1024 [ 175.613363][ T9614] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 175.631856][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.115781][ T9614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.171085][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 176.171133][ T28] audit: type=1400 audit(2000000120.509:1541): avc: denied { write } for pid=9604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.674201][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.040539][ T7894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.053652][ T7894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.077652][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.088901][ T9431] hsr_slave_0: entered promiscuous mode [ 177.095753][ T9431] hsr_slave_1: entered promiscuous mode [ 177.101674][ T9431] debugfs: 'hsr0' already exists in 'hsr' [ 177.107754][ T9431] Cannot create hsr debugfs directory [ 177.146526][ T7894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.151206][ T28] audit: type=1400 audit(2000000121.399:1542): avc: denied { write } for pid=9625 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.155903][ T7894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.244436][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.453929][ T9637] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1364'. [ 177.474587][ T9637] gretap0: entered promiscuous mode [ 177.488422][ T9636] netlink: 'syz.5.1363': attribute type 2 has an invalid length. [ 177.496378][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1363'. [ 177.504209][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 177.525306][ T9637] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1364'. [ 177.535623][ T9637] 0ªî{X¹¦: renamed from gretap0 [ 177.563720][ T9636] loop5: detected capacity change from 0 to 1024 [ 177.587336][ T9637] 0ªî{X¹¦: left promiscuous mode [ 177.592496][ T9637] 0ªî{X¹¦: entered allmulticast mode [ 177.603448][ T9637] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 177.621743][ T9636] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 177.660091][ T9636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.674645][ T9637] loop4: detected capacity change from 0 to 1024 [ 177.722048][ T9637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 177.730539][ T9637] System zones: 0-1, 3-36 [ 177.744492][ T9637] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1364: bad orphan inode 134217728 [ 177.756795][ T9637] loop4: lost filesystem error report for type 5 error -117 [ 177.771411][ T9644] ================================================================== [ 177.784302][ T9267] veth0_vlan: entered promiscuous mode [ 177.786792][ T9644] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 177.795248][ T9267] veth1_vlan: entered promiscuous mode [ 177.801333][ T9644] [ 177.801343][ T9644] write to 0xffffc90000ea3870 of 1 bytes by task 9637 on cpu 0: [ 177.816716][ T9644] rwsem_down_write_slowpath+0x3dd/0xac0 [ 177.820706][ T9267] veth0_macvtap: entered promiscuous mode [ 177.822365][ T9644] down_write+0xab/0xc0 [ 177.822392][ T9644] kernfs_add_one+0x5a/0x280 [ 177.830538][ T9267] veth1_macvtap: entered promiscuous mode [ 177.832241][ T9644] __kernfs_create_file+0x145/0x180 [ 177.847723][ T9644] sysfs_add_file_mode_ns+0x132/0x1b0 [ 177.853086][ T9644] internal_create_group+0x441/0x9f0 [ 177.858382][ T9644] sysfs_create_groups+0x3f/0xf0 [ 177.863393][ T9644] kobject_add_internal+0x4a7/0x780 [ 177.868581][ T9644] kobject_init_and_add+0x14a/0x1f0 [ 177.873765][ T9644] ext4_register_sysfs+0xa5/0x270 [ 177.878781][ T9644] ext4_fill_super+0x36f0/0x37c0 [ 177.883744][ T9644] get_tree_bdev_flags+0x291/0x300 [ 177.888856][ T9644] get_tree_bdev+0x1f/0x30 [ 177.893272][ T9644] ext4_get_tree+0x1c/0x30 [ 177.897730][ T9644] vfs_get_tree+0x57/0x1d0 [ 177.902137][ T9644] do_new_mount+0x288/0x8d0 [ 177.906641][ T9644] path_mount+0x4d0/0xbc0 [ 177.910963][ T9644] __se_sys_mount+0x28c/0x2e0 [ 177.915635][ T9644] __x64_sys_mount+0x67/0x80 [ 177.920221][ T9644] x64_sys_call+0x2d61/0x3020 [ 177.924887][ T9644] do_syscall_64+0x12c/0x3b0 [ 177.929482][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.935362][ T9644] [ 177.937676][ T9644] read to 0xffffc90000ea3870 of 1 bytes by task 9644 on cpu 1: [ 177.945199][ T9644] rwsem_down_write_slowpath+0x44f/0xac0 [ 177.950829][ T9644] down_write+0xab/0xc0 [ 177.954976][ T9644] kernfs_activate+0x50/0x220 [ 177.959665][ T9644] kernfs_add_one+0x212/0x280 [ 177.964339][ T9644] __kernfs_create_file+0x145/0x180 [ 177.969536][ T9644] sysfs_add_file_mode_ns+0x132/0x1b0 [ 177.974898][ T9644] internal_create_group+0x441/0x9f0 [ 177.980174][ T9644] sysfs_create_group+0x1f/0x30 [ 177.985188][ T9644] loop_configure+0x7ee/0x9c0 [ 177.989872][ T9644] lo_ioctl+0x1e1/0x13a0 [ 177.994104][ T9644] blkdev_ioctl+0x387/0x460 [ 177.998606][ T9644] __se_sys_ioctl+0xce/0x140 [ 178.003187][ T9644] __x64_sys_ioctl+0x43/0x50 [ 178.007775][ T9644] x64_sys_call+0x1563/0x3020 [ 178.012526][ T9644] do_syscall_64+0x12c/0x3b0 [ 178.017108][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.022988][ T9644] [ 178.025293][ T9644] value changed: 0x00 -> 0x01 [ 178.029948][ T9644] [ 178.032263][ T9644] Reported by Kernel Concurrency Sanitizer on: [ 178.038411][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.8.1320 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.047688][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.057729][ T9644] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.069611][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.079825][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.101296][ T7896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.115287][ T7896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.138291][ T9637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.187393][ T28] audit: type=1400 audit(2000000122.529:1543): avc: denied { write } for pid=9638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.246878][ T9644] loop8: detected capacity change from 0 to 512 [ 178.248908][ T7896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.264967][ T28] audit: type=1400 audit(2000000122.569:1544): avc: denied { write } for pid=9657 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.268983][ T9644] EXT4-fs: Ignoring removed bh option [ 178.287254][ T7944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.307831][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.323195][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 178.354901][ T9644] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 178.365011][ T9644] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 178.365142][ T9644] EXT4-fs: failed to create workqueue [ 178.386217][ T9644] EXT4-fs (loop8): mount failed [ 178.411470][ T28] audit: type=1400 audit(2000000122.749:1545): avc: denied { write } for pid=9660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.435004][ T28] audit: type=1400 audit(2000000122.749:1546): avc: denied { write } for pid=9672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.491043][ T28] audit: type=1400 audit(2000000122.829:1547): avc: denied { write } for pid=9674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.522292][ T28] audit: type=1400 audit(2000000122.859:1548): avc: denied { write } for pid=9685 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.588601][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.617561][ T28] audit: type=1400 audit(2000000122.959:1549): avc: denied { write } for pid=9687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.621460][ T9637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.656494][ T28] audit: type=1400 audit(2000000122.999:1550): avc: denied { write } for pid=9698 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.708058][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.804407][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.816068][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 178.875329][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.912771][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 178.975690][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.015069][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.104784][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.175821][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.307958][ T30] bridge_slave_1: left allmulticast mode [ 179.313790][ T30] bridge_slave_1: left promiscuous mode [ 179.319482][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.327372][ T30] bridge_slave_0: left allmulticast mode [ 179.333164][ T30] bridge_slave_0: left promiscuous mode [ 179.338808][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.403270][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.413524][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.423252][ T30] bond0 (unregistering): Released all slaves [ 179.464712][ T30] bond0 (unregistering): Released all slaves [ 179.518839][ T30] hsr_slave_0: left promiscuous mode [ 179.524591][ T30] hsr_slave_1: left promiscuous mode [ 179.530142][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.545958][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.554533][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.565015][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.574665][ T30] hsr_slave_0: left promiscuous mode [ 179.580381][ T30] hsr_slave_1: left promiscuous mode [ 179.586171][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.593879][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.601762][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.609481][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.622827][ T30] veth1_macvtap: left promiscuous mode [ 179.628337][ T30] veth0_macvtap: left promiscuous mode [ 179.634216][ T30] veth1_vlan: left promiscuous mode [ 179.639538][ T30] veth0_vlan: left promiscuous mode [ 179.645491][ T30] veth1_macvtap: left promiscuous mode [ 179.650994][ T30] veth0_macvtap: left promiscuous mode [ 179.657110][ T30] veth1_vlan: left promiscuous mode [ 179.662410][ T30] veth0_vlan: left promiscuous mode [ 179.765907][ T30] team0 (unregistering): Port device team_slave_1 removed [ 179.775178][ T30] team0 (unregistering): Port device team_slave_0 removed [ 179.826327][ T30] team0 (unregistering): Port device team_slave_1 removed [ 179.835862][ T30] team0 (unregistering): Port device team_slave_0 removed [ 179.949765][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 180.035326][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 180.122647][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 180.211371][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 180.300862][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 180.315592][ T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.367307][ T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.405082][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 180.425092][ T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.477010][ T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.503074][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 180.532869][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.584849][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.618179][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 180.644777][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.705446][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.767018][ T30] bridge_slave_1: left allmulticast mode [ 180.774212][ T30] bridge_slave_1: left promiscuous mode [ 180.779865][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.788442][ T30] bridge_slave_0: left allmulticast mode [ 180.794279][ T30] bridge_slave_0: left promiscuous mode [ 180.800012][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.808852][ T30] bridge_slave_1: left allmulticast mode [ 180.816614][ T30] bridge_slave_1: left promiscuous mode [ 180.822636][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.830558][ T30] bridge_slave_0: left allmulticast mode [ 180.836468][ T30] bridge_slave_0: left promiscuous mode [ 180.842451][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.851158][ T30] bridge_slave_1: left allmulticast mode [ 180.857543][ T30] bridge_slave_1: left promiscuous mode [ 180.863535][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.871427][ T30] bridge_slave_0: left allmulticast mode [ 180.877443][ T30] bridge_slave_0: left promiscuous mode [ 180.883392][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.995246][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.005137][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.014701][ T30] bond0 (unregistering): Released all slaves [ 181.084319][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.094002][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.103602][ T30] bond0 (unregistering): Released all slaves [ 181.124271][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.133864][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.143312][ T30] bond0 (unregistering): Released all slaves [ 181.190638][ T30] hsr_slave_0: left promiscuous mode [ 181.196454][ T30] hsr_slave_1: left promiscuous mode [ 181.202170][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.209561][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.217251][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.224801][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.233800][ T30] hsr_slave_0: left promiscuous mode [ 181.239451][ T30] hsr_slave_1: left promiscuous mode [ 181.245162][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.252718][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.260254][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.267654][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.276819][ T30] hsr_slave_0: left promiscuous mode [ 181.282415][ T30] hsr_slave_1: left promiscuous mode [ 181.287864][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.295502][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.307871][ T30] veth1_macvtap: left promiscuous mode [ 181.313494][ T30] veth0_macvtap: left promiscuous mode [ 181.319011][ T30] veth1_vlan: left promiscuous mode [ 181.324320][ T30] veth0_vlan: left promiscuous mode [ 181.329995][ T30] veth1_macvtap: left promiscuous mode [ 181.335508][ T30] veth0_macvtap: left promiscuous mode [ 181.341377][ T30] veth1_vlan: left promiscuous mode [ 181.346653][ T30] veth0_vlan: left promiscuous mode [ 181.433237][ T30] team0 (unregistering): Port device team_slave_1 removed [ 181.443252][ T30] team0 (unregistering): Port device team_slave_0 removed [ 181.496836][ T30] team0 (unregistering): Port device team_slave_1 removed [ 181.505999][ T30] team0 (unregistering): Port device team_slave_0 removed [ 181.555714][ T30] team0 (unregistering): Port device team_slave_1 removed [ 181.566140][ T30] team0 (unregistering): Port device team_slave_0 removed [ 181.720113][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 181.720128][ T28] audit: type=1400 audit(2000000126.059:1591): avc: denied { write } for pid=9988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.750267][ T28] audit: type=1400 audit(2000000126.079:1592): avc: denied { write } for pid=9999 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.799696][ T28] audit: type=1400 audit(2000000126.139:1593): avc: denied { write } for pid=10001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.824692][ T28] audit: type=1400 audit(2000000126.159:1594): avc: denied { write } for pid=10012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.878772][ T28] audit: type=1400 audit(2000000126.219:1595): avc: denied { write } for pid=10014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.901866][ T28] audit: type=1400 audit(2000000126.219:1596): avc: denied { write } for pid=10025 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.956516][ T28] audit: type=1400 audit(2000000126.299:1597): avc: denied { write } for pid=10027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.979654][ T28] audit: type=1400 audit(2000000126.319:1598): avc: denied { write } for pid=10038 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.032415][ T28] audit: type=1400 audit(2000000126.379:1599): avc: denied { write } for pid=10040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.056064][ T28] audit: type=1400 audit(2000000126.379:1600): avc: denied { write } for pid=10051 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.336403][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 182.418829][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 182.497422][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 182.576699][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 183.551846][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 183.637815][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 183.723572][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 183.810506][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 183.916628][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 184.003289][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 184.088737][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 184.175253][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 184.261733][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 184.350718][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 184.437355][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28 [ 184.524430][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27