last executing test programs: 3m32.867026817s ago: executing program 32 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000800)=@multiplanar_overlay={0x201, 0x3, 0x4, 0x400, 0x5, {}, {0x4, 0x8, 0x10, 0x2, 0x2, 0x9, "57b726de"}, 0x1, 0x3, {0x0}, 0x2}) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40054}, 0x8000) r6 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001080)) openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m14.552908091s ago: executing program 0 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{0xa, 0x2, 0x9, 0xa, 0x99ea, 0x0, {0x5, 0xc4, 0x5, 0x3, 0x8, 0x80000000, 0x2, 0x9, 0x7f, 0xa000, 0x7, 0x0, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x4054) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffff, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x2}, {0x8, 0x4}}}, 0x24}}, 0x2) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000200000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r8) 2m8.549821665s ago: executing program 5 (id=526): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0xff03) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x2) 2m8.175231668s ago: executing program 5 (id=529): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000017cf259342000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000280), &(0x7f0000000000)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@local, @random="a6e286036e89", @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x1, "8b", "d3d9e4"}}}}}}, 0x0) 2m7.135045581s ago: executing program 5 (id=532): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r2 = fsopen(0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsmount(r2, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, r7}, 0x94) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xf0e7, 0x60000) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$EVIOCGREP(r8, 0x80084503, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) lstat(0x0, 0x0) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 2m5.654924997s ago: executing program 5 (id=533): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2ca, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0x4}], 0x1}}], 0x1, 0x20004014) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20420c4, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 2m4.463105399s ago: executing program 5 (id=534): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000440)=r8}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0500010400000000000e000f001000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000140)={0x1, 0x800, 0x2, 0x3, 0x19, "5678c7eeff7d634be056b11eb6b29f276a6bcc"}) listen(r10, 0x9) 2m3.547174064s ago: executing program 0 (id=537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x133042, 0x19) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r2 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000002b0012800e0001006970366772657461700000003400028014000700fe8000000000000000000000000000aa14000600fe800000000000000000000000000015080001"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(&(0x7f00000006c0)='./file1/file0\x00', 0x80) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f00000010c0)=""/4106, 0x100a) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file1\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0x2710}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000dc7000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4, 0x4, 0x0, &(0x7f0000000540)=""/138, 0x8a}, &(0x7f0000000680)=0x40) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x32, 0x0) 2m3.084066675s ago: executing program 0 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=") r4 = io_uring_setup(0x497c, &(0x7f0000000480)={0x0, 0xad69}) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000380)=[{{&(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000580)="73418ccbb891cc869daaa4cdf0411e3c02bc8e6a9cb41eaa740dce2c65f3619c54b30d5b27c5bd261a3e0b87874c0d455a9cfc552f488b3eabd3f10e0753792b5a138f74c3cca8a626a51725939e6238d0e7d7261a58a0f6666894d44047e648f3e2c3f14da73d969701335b316dc79a38cd901666c821d77be92174eb09550671a33c6c07afa8b3f7340b7a62df08eb2ae8addbc371447738c4af3acd0d5e7f3f44a69e8465c920dcecb559c6fb689f04722a1708bccd76d34e51140e45280e35f4ae7348931198255c9765e26a3e5f748dc93ddb5f2f7bf136e431078b880da803465afc77d52713989623f49605a71c511512b1ed5b", 0xf7}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000002400b5e4ba03268bb908000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4000051}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x61, 0x0) pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe2, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101883, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 2m2.643455939s ago: executing program 5 (id=541): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x7fff0000}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m1.817479896s ago: executing program 33 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r4 = io_uring_setup(0x497c, &(0x7f0000000480)={0x0, 0xad69}) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000380)=[{{&(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000580)="73418ccbb891cc869daaa4cdf0411e3c02bc8e6a9cb41eaa740dce2c65f3619c54b30d5b27c5bd261a3e0b87874c0d455a9cfc552f488b3eabd3f10e0753792b5a138f74c3cca8a626a51725939e6238d0e7d7261a58a0f6666894d44047e648f3e2c3f14da73d969701335b316dc79a38cd901666c821d77be92174eb09550671a33c6c07afa8b3f7340b7a62df08eb2ae8addbc371447738c4af3acd0d5e7f3f44a69e8465c920dcecb559c6fb689f04722a1708bccd76d34e51140e45280e35f4ae7348931198255c9765e26a3e5f748dc93ddb5f2f7bf136e431078b880da803465afc77d52713989623f49605a71c511512b1ed5b", 0xf7}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000002400b5e4ba03268bb908000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4000051}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x61, 0x0) pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe2, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101883, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 2m1.806145372s ago: executing program 34 (id=541): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x7fff0000}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m27.803385348s ago: executing program 2 (id=612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) 1m23.420079218s ago: executing program 2 (id=623): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m21.281518722s ago: executing program 2 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) socket(0xa, 0x3, 0xff) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket(0x11, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES16=r5], 0x20) 1m20.690972992s ago: executing program 2 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7, 0x7, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880), 0x4000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x145) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB=',shortname=winnt,shortname=mixed,flush,uni_xlate=1,shortname=lower,sys_immutable,dos1xfloppy,utf8=0,utf8=0,discard,rodir,utf8=0,utf8=0,\x00'], 0x0, 0x2b6, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m20.526140042s ago: executing program 2 (id=636): socket(0x10, 0x80003, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000440)}, 0x20) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06", 0x1}, {&(0x7f0000001480)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 1m20.119184926s ago: executing program 2 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',shortname=winnt,shortname=mixed,flush,uni_xlate=1,shortname=lower,sys_immutable,dos1xfloppy,utf8=0,utf8=0,discard,rodir,utf8=0,utf8=0,\x00'], 0x0, 0x2b6, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0xf0ff) 1m19.746155002s ago: executing program 35 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',shortname=winnt,shortname=mixed,flush,uni_xlate=1,shortname=lower,sys_immutable,dos1xfloppy,utf8=0,utf8=0,discard,rodir,utf8=0,utf8=0,\x00'], 0x0, 0x2b6, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0xf0ff) 50.740844135s ago: executing program 7 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1b1, &(0x7f00000003c0)="$eJzsmb9OIlEUxr87DLCzS5Ztd5stlgQ2mx1mht3NUmxBuxaaaDR2EhkJOoiBKYDOp7D2CayJDe+hhVpZiJ2VJmPuzMW5oIIJYvxzfsWZ714O5545wFcwIAjizXJyfHG0l05pXCeQQlzsn0bCHEXK7yQvvx9UZvd3jPPDTncmP1yPAfC8h5+vAugWInDF2vMG350S1wUofR2VX18Cgy70ChQsCm2DYVnodUnXeL6ur1UcW1+tOSUuDB5MHiwecsP99bYZSlJ/TGriHYCi49j1Rqu9MSUxbn69goJ/Un/y59WfjRHODyYUmELnwDAv9F/E+7MJRiLd/xc1rC99NTDF25bEB3HaU5z12OJzckxOFGPq/EhM3ob6TKbx+gUDF2faCF/QJrGM/y/kVxD6k7fLkJb8SZX8I+tWt7KNVvtnpVos22V707Jyf4xfhvHbyvpGFMQR/qf5/vReqh+9JzfGYmgWXbduBvFmbTXjcOvWXY4b8/1PQeZb0DUTezJ8D5/YR37JRMSaIAiCIAiCIAiCIAiCIAhiUq6GHpjhK5j/L+gA+Vtb1pyffR0AAP//ZDVtWg==") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) 49.462773022s ago: executing program 7 (id=726): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r1 = eventfd(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r1}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x7fff0000}]}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 47.299852025s ago: executing program 7 (id=730): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1808170000000000000000000000000024080000000000f6180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.346849041s ago: executing program 7 (id=734): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2ca, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 44.39168328s ago: executing program 7 (id=737): r0 = syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x612e, &(0x7f00000063c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d90300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) kcmp(r4, r5, 0x6, r2, r0) sendmmsg$unix(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000080)="da92d73b19e313c3941e28a7e0bf46b3efb74ac3eccd07e314460a060789dae06edec62c2a76f82941778e1b553670e566a9ae0c505c887c8effd7a54eff9d20a98b5cb11b5f71d9bb0a19f269a76edc0930bfd484f0b2ce32365615a355713236b1d6c3f121e93b0829ef0d2f377b4b21d698a29bd2", 0xb2}, {&(0x7f0000000100)="c6795fef5b607fa07bce4c56c83e0867eca77db653cdcad20989d6e1f996ee986982019fd7a670327079956586b29d714f9ce41e1e910dfd80e3c8ff4c654eb5fabc21fcf7855da808d224223fdf8b2b737a280045bf53426cda578f47e611ef314e7571740c90b23a7b411c7907cd3f94bfad2bdc3f108d05439f36e5df7688106402b53320ff941085717b0fb653b859628ca11f66397fe14d5c0f2d816a3bfdf1e068", 0xa4}, {&(0x7f00000001c0)="ac1890d17907894adfb6376009ce820fdf", 0x11}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="042e2265034a3416fb4a563c6e867b813eef8659a42c8cd0b021e97aefb51dfbf5e24ced270cc48b11de316167fbda4040329d97f13fbdc1654d525bc3f3fe1c8003ef6b8674c9e1bae307db89dce2cc74b0b5d4500f443072a1b54fce1adb6d442613388e54644a803ca3fa648721914971d566c1470aee", 0x78}, {&(0x7f0000000380)="dadad663b8d8262b057b8a05407fc028a565886ae6fa", 0x16}, {&(0x7f00000003c0)="adba53bbb630794c250703861ff8a44fb641c2c776d81363d4d737171b1b03b57412ab4b5cab7a8d0c30e7148839294cf68323562812f328da1376650cdc726fca809ba09a75bab5073d96bb438ff4973f2297d04f9a0264c8c7ab06fdd80e48dfed9e53c86ac9b5d341d44df3213c559597b65e3c66f1a62efd880d947e35efa49809e241d88967ca73c91ab823cefce1b5918f85e341e99e0a3b8e760499a0a6816f502c31456ae04949364f6eb407d3ef319d2ad7526308dc84cf95878c394a3cac2aea896516ba27edde7343a84f3964229b7e0352d6af88101be3c5aefc1cf94ff7326bc90cfe69ae701b1dcef7fbdccc99fae7d2528e336999a060985ac4553d5f6e7adb26c105d3a3a2a522b208c2d7beff2098ea7886fccc11dbf9f9dc5b7300cd50920f28b505497ca82141a671e701f35a7d2030f0841d8dbf817dfa215f8e0e9b41cabcfd1c6897238203d47807939d9a79eb1febc0bcbb28a16fe0a7a8148333ce5ecd938cfecba9e5334cad93f6018ca4f01310e813e0517f56f7ea21f1acf30e93a3ffa4decc66d766ee6013600ae9e1461abdb80caa01adf6d79109340b8c0300c180e5d4bd33b913c3d249945a8ec11964d5ad238d94141a6fbcba23813f531570d35588feb8ed8f837f52a77541c5d49d35a82bcef99c4d7cc534d2bc670e4c8ccc8305fe2fb3d609e08460d663cd3007d8a9efa3b8b5c036b89e31e64c4396468c4fe99c90cb1ece8e36f74375556402a3d24853577a73c14df24960b570670453f440f32413874d41a5f33c704bf79749474fbb510fe388b06026ff0a3458f793a85c43b9c4fc080062df4f3740a75326e3167bb37630bd2733bdc417e69ff32272e0b5607757b0a36f1fec9696a33604aba71acf5e5a46f8f9efa27b19b020fa25714c0a9e75d91b414a039f1ce8a61a65b0bb3ed6a2e78901add6c59fe984b079fc9b9e99ed186f6159cf0df0cbc76d87e2adcc7c9801612611fe2344945a3823a145c9eaaab2251bf68a72e58212f8e0ea0733a792288d61947fffa990486650604e9cf57d020e55bab6fe50ad56c85bfa0a98cf59577831b0911bcead7a500ff95e57bf88b06756c80938b04b72cb5ce57128c9165b7bb82180a98c108bf082458bfca7b3d7e4e9704db28c1ff0156fd705a2212f809c38d75f067c496045b9626c8a480bbf554a5b0dd15dc28b612c49bddc138952455fd15a2a5d02ad26c985bc9e657ef294e633de5c015f26efef83bbae5953b323a33c6f7fa6be593c4e27503c1004cb2dfaed4a209c4aa0a517b330ce88989739aa50e54569d8e5c382fdd43e42aa1aee1d9e4850b0bed5446d35243c0d7995c184e58c9e6cbd5f536b538c9300c9469458279ea21457a5434c03f2c420e195d316c7ea98068982b6d7ad51de9a96f33bee6b7d6146c34e0073fb62fc93cd0e0c426046b9fe122d3c9c182ec3ab932ba00c8b3f5335338327749c8d72722e456a8bd8085d4e201fc7535a9d5fb84d95ae222e63467d2945341c503f274923790cb7a6d85bfe18ec741a6e07b8782a1005fd0e3b2c3784210a355c1b224b7fc45d8730a85067a44fda4bc9d988fbe217893da247af8f60a57f6e1ddd371227cce5de47e84ec406b31b2fe3a8cf36a6955816e0adba763d07a18b0979601f99b52c53f9f77e7893de49025b6df5cb9098fa18f98726ecbcfec8dafeb04a6effd24eace1b62ff0a4e1472523959b94be1c04e0707c2342a2c20afa8622ebed46c14084fba2b8533551cab4980e903af9fcd71d1a660680ada3e76793ec27818220f4e9c5311c4aca74c8fd0e9afbeaac3d7066126e3785c680b51e49e5ab5cacf551b20baf83e78f6ca6c9b966781d24546160154bede0601900b25b8e45f1e0dbf642a22d0cd7c59096956aed35a54c31cec66da4290855e1476e2406d712d0a341b68f2a0ad9b1d5310493b4daabfbe71a269069589cda6fabc0bcf1a39e565ed0abbe4cd3c01b5027c5f91984eae90bb5552bfa756eb41b23f23586c9ffb743cd2f76e62a03d783c104f894c16bdfef008761cb554103f40b93bf37817f1dd6f8cb7324e42899e3c84e969c16c96194b9818b3eb88e1693d1cae0d2efef47e1c04150ef22e19bdf10314bc233f0b974bc2dce1b3e03f4da697ee5679629d233a627025fd0df667126e43bd12ed29b703e933115e2db1f0fe2fd214ba7757f6ec156f2b1dbf5e419eb08abdce574a2414d7950aec4db8cd3b8aabc7d8659b3f86b294bad51776216f0ad033a29dbe41cc962c00373d025c60392f7678003b459742f0d27a33c36917d609de7b26a3e70afcdf5e25f3d5dd949cd91062609f06572f22eedb778bba2c3055e1baaf1330580fe0f05c9fd064f6c78042063a864f6c35b2e87f98e5a293691faeefef40fbc41dc6ba21dae25e1b81d1f1adf41303d76302fb233f990de3fd46c48326496a7149b1223b345ce1951e52cceae3d954673016ad903be4131c3b573b0089584a0f8a0ef0a665fe93d6a1aababe2cda6e5c7b5254d93d2e13eddc4ebdb3227c2cc4ca0ae294c8dde2f4b2495863f2ea4e91d1f49600586bd66340593bde06692844e32d215f37eb7ee14722a96ca2c36e2c6491b0902f92c578751b84db880568a158590522eff1a4a7e839a2abbabfcd9068e93dd4d3d44eec3122cf3512d4024bf879e45ad6abcebb0c74548445f609023bb7d79caefaa03a202330a244b5d52c6883e1bcd1891bb541e93a30d8bcd2a48222c1cdd8f8e9ce5d76539c5afda33bd310057904e6fa2975a98d101ce975172d006757cce8456e54cd1f9c5da294b63069a884e0d683b9efcc610e689c26652d2e7e6e3cf95f6de4affb1b998494a9c9ffbdf47b8da6524f93b3dafc0d952d06e86190e3de2aa4162ae6c17c1bca66d29817a8e97c7edd19cfc6c5a4ffdbb98bfc49352e670a67ee2c1ab4fa1c35e6ba85e01ef1c198f3114d782ac284852c69e21f4f78f5dc8205f345e8784a0f21095655a0cf6d396d56db84e768ab3fdb118e560319470402eba55c9fd571c3a6c38a475b96d4c26ebe45ed468d19b027ab138793a9183a8f35ba42bbde6a1ae09736a415457c262ae5e80ba64d743c87b12358f93302f82695759bc7ff2a7968c08259fec0355922fdc3fe63d79084f62ca59a494c6e0ed0235424a3c3f3f471f68b365b3d9a7cd247752f802b6409b3e91f452000ab02b41fc1871021a8e426561d8b1e4e91f026ee36a635a1d8e0da6cb26f46da2e110f61ee83a31bf7d1a2e3b11a3c8341f9bc7607c8dae48fe32d79ddbb4731e7507c13ee42fd0f1f71156aae278d82000c28caab070e9e5e7375fd58161bf314edd45a4c5e01831c840f2b5a98854e0ccc7e2cb0b162c2d6a68a835e2f82ded35b05ac149eb763957ff9d604132ee0fc4bb65c44094f7a240395ab599aafb77d3802c7fa23f3afb56ea344dc72bf7f280981a1ef26f57f3c967f7247c6c3a81ae49b466ab393aba61584e0b64648fad7aad06038214687bcbae251fe673dd31f119a55bd091137d9ec7d60110060e50b290b4487e86a99ccf62039de27d545ddd49d058827643600807247cadc26b92c6044ad5a026fccf44d665917eb540728604d9d31c301235514b3ea623b643dc44796b8ff0e909c910f0eb35b18d724d8b05e799594168d7936139722529c2dc5a1403884ecbb892574ae43e91c5476e16de0c8c5c6909332f84d65bb5c9199a9672d780e174a1f18398af79cfb8c5368a0d29903822d8e8d3d79129af7190f4db064d572da33b73f5efbe62f493185fb6429e27709036bb00ace1b8b788c61506059504024e67824d1c895541bfba54baa1f74f7d79f3f7e5dafd5c7f89630e1784b76db522c4edb81371346c95f8ffeea9675bcd7f6b84b638e6c9959fe02958ddfe032f3962af7f19790f7a4b9891f8a6ec59733b6d4a4bd8d66ddf36d516c08ba75112e64d86288419590c40f29a152f5ba3911f18a466d1df8b306ab89605b5e118b959a91b84b416974ab77d23c946aeadd92d29481130589e9a64671a1aaf7d3a915cf8a873d2f32dc4263372079b111cf951e647d5bcacbcef76ae667084c177efb6879840d64ffc4f226cfaaa8d91bfbb13331e0cb2d3c11d98ece4d2516da61de76ad71baa756cde239006fb9d443286fe9532854b9aa0dacdb4192142ec4e975a751df26081631a77b915f34ba95ae41a802fc340d133de959f871b9c6d0266a9a65e608e0fe055ac7798bf724501582b5b1bec5674b3665aa5bcbb536da7f0c421acbd10ee7f739016b4aa845ca0426934b89ab366413a713d182913c5dfc9ca2e37b243fd53d91ab8846075f1538a4da0afdf778f7dbd9bed6c471c33deb8fa9be4528bf1c6fe0d9ba9afaa10b1a9cdd748e35bb5279d580730b47e8f2c3483c9f9ab14ce3b1cefc24463eb08ffb0d5bc00af974ea0f02fb8fa765270b242f6202b1d3b4e2a722fe9346a4957dea701ebd8e37f7c72b293ffb073151c81a9c4dd440ef7e7854f8fe578e9b9ebc7e885bffe38541c9a96a0ffea1bfe2593fe3e91ec7c69892c66223bcaf72dce49b7a18da5a2c8bb362d33115087cacc8bcf850c04c873b9a1eba3cc2994452ca6253e927a35f1b7bf51e5a1529e0dca73a5939f500babb868477fba5bff597bdd38268022589fc9a5073aa61db940885eefa9ec81d52409a700f5c6f8ba21624359bdc21411af9f7ddc3c29d00818e2a7754e3a59c350abfb13b69bdc16af77005d237e511d38558665df37f486adad3fea0c7c57615d6a2f7235ea00d6a1d80267a1cd15d18181ad71f10683cf0b3d1be5fe5ce484c8f15be0e2cace29d2f602d15b9b86fcfdc67e942ac5eee94c621138511d708cfa16c62a30b6c9f722c3f5aed20dee75679582eab6a9002767f37c23e02e32d02c82e1c0ca1207862c1b1fe4e48667a9282679a21488ab4fb9a5bdff3e39ce7bf2c50b59992ebcdd1989889f02a418b69c34d639d8889e7b01eb4a8d8f15ad25aa5e96e2e1ec9cefe33f50723ac6249ca64c9335fb98db9eeca81237ad447382da02e31cc14f9969639b6d796fd9afc1a757e73d9f7de2942724c8ec001b22a2208ff52a53d5e8434e193bd2d06a27af37041256b9735630835768c57fd03c620bb8c9177c93e279e34df0a91ec5170ac79ea5a1b04e14139c80a1cd96d88058cfd55bc82a7567f8c15ec86886ae3b5c1446aff6ce4f12ea5db0aefc6d40ed12edc3c58c30d47498fafd0cde0f9900cb4121b41f31606b47864ef77978cbb80343a2b272acfa0deb3066a452dfe0ddca1fcc721179c48959f7df5d16050fa3a2f85299a88b49f3f5a7974cbfea161c4df765779e594aa2d1fa9b324c7c47b20f9d2183651f50725866c8d3d04c8d4e014245f536e1cc079b15773d8f0326428d26d2b2b571c690096d355fb3c553e73b3d1130172d12d76436ee6af38673a2237b48438b0ac91127c1cd4a067e7a51145ae0e1dbcba674f60dc2becf712175d367a04b92101572b0ab618f8f46a128db2bb0c004bd9a4d2201423c9a96a09a3b146f9f9b68a8093675dfda5e90abe92ff84cb198f1fa7e80da68d316a3df718c0810596591aa66c1625e0ed27bbf5d26677429a4c4255b224639e8195b67fb5e367194ea0931370c2089b698478e9d3a84f114a3782fca19294b4ba3aec465a6bc7aad55db47ee5b4ff9b1b8b18b0ca16976e7c46e79323f58b8cf9edd5ba21764be8fa8552242c495f04a055a6bbc1aa5200b390f1f78d94ce3ecb3fe7f5e7a", 0x1000}, {&(0x7f00000013c0)="bf49e95234", 0x5}], 0x8, 0x0, 0x0, 0x4008004}}], 0x1, 0x890) 41.315477371s ago: executing program 7 (id=745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r2 = syz_clone(0x8800, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0)) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9202, 0x0) r6 = syz_io_uring_setup(0x66df, &(0x7f0000000200)={0x0, 0x5589, 0x10100, 0xfffffffd, 0x2dd, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x25}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f00000007c0), 0x0}) setpriority(0x2, 0x0, 0xffffffffffffffd1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) 40.380643053s ago: executing program 36 (id=745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r2 = syz_clone(0x8800, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0)) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9202, 0x0) r6 = syz_io_uring_setup(0x66df, &(0x7f0000000200)={0x0, 0x5589, 0x10100, 0xfffffffd, 0x2dd, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x25}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f00000007c0), 0x0}) setpriority(0x2, 0x0, 0xffffffffffffffd1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) 37.339142233s ago: executing program 6 (id=755): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x7fff0000}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 35.494888655s ago: executing program 6 (id=760): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000440)=r7}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0500010400000000000e000f001000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x1, 0x800, 0x2, 0x3, 0x19, "5678c7eeff7d634be056b11eb6b29f276a6bcc"}) listen(r9, 0x9) 34.831904529s ago: executing program 6 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc20, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@any, 0x5}, @any, 0x9, 0x80000000, 0x1, 0x10000, 0x0, 0x8, 0x8}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) 34.775337593s ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c0900002400518020000080050009"], 0x54}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x174, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3f2, 0x2, 0x4, 0x891, 0x9, 0xfffa, 0xc45]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x174}}, 0x10) 34.595304523s ago: executing program 3 (id=764): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1e}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000000406b0000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8fffffbb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000004000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0xfffffffffffffffe) 34.387414347s ago: executing program 3 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xe0}}, 0x0) 34.258877046s ago: executing program 3 (id=766): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2ca, &(0x7f00000006c0)="$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") r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 33.519178013s ago: executing program 3 (id=768): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x26, 0x1, 0x400000) sendmmsg$inet(r5, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003300)=[{&(0x7f0000001e40)="15", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r6}, 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r6, 0xd}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) creat(&(0x7f0000000000)='./file0\x00', 0x168) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="010027bd7002fbebdf2501000000040001801c0002800c000180080001000400000007000180"], 0x34}, 0x1, 0x0, 0x0, 0x2004c045}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000f", @ANYRES16=r13, @ANYBLOB="100027bd7000fcdbdf2505000000080009000a000000050007000000000005000600e8000000050007000200000005000200ff0000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) ioprio_set$uid(0x3, r8, 0x6000) 32.950363329s ago: executing program 6 (id=770): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 32.506845966s ago: executing program 3 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x5000, 0x4, 0x1, 0x1, 0x999}) 31.495043266s ago: executing program 37 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x5000, 0x4, 0x1, 0x1, 0x999}) 31.465070355s ago: executing program 6 (id=774): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2085, &(0x7f00000001c0)=[{0x5, 0xd4, 0x9, 0x9}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26e, 0x0, 0x90000000000000}]}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0xfff, "47a5030000000800000026000000060081efffffffffffffff800000a8db0700"}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x103000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x8, "7b8070f2f59483c30ce0e60542e84437b78e2772f9f789e408b565681a71a796"}) r6 = epoll_create(0x6) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000480)={0x40000002}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x104, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r8, &(0x7f00000004c0)=""/68, 0x44, 0x3a4) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000180)) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b19f7207104070369940102030109024000010200000009040f0001b4e914000a2401020001020102052404"], 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800080, &(0x7f00000000c0)=ANY=[@ANYBLOB='nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d3a0a44f62c6e6f626172726965722c706172743d3078303030303030303030303030303030362c6465636f6d706f73652c6465636f6d706f73652c6e6c773d63703835302c6e6f6465636f6d706f73652c666f7263652c747970653d7b9201292c00"], 0x20, 0x6f7, &(0x7f00000004c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$unix(r9, &(0x7f0000000c80)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0xa}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)="3a6e34c05434ccff6f9320328323ad7adc8d8bf631fcdfb82bd0b58f11f9f1f0716ae63d2d921a8eb00b2fbe3af92acae1b2a71607384326e9ba1a42e04f0a7680fd0647475e1f9e7fd0636722de085970c14951e4977b2134afc88659b82059c7a5ab2610858b3fa25a206738dcb72554e266c9c5800f2919d1b984036bd302de260964d05cd325da4881eb190e5172a45f449513", 0x95}, {&(0x7f0000000bc0)="7b9581e7f07d41d9f8860cceaa657231cf0eb9d8bc29d6c4c66bfc64e20ca1c1dcc765e664513758575a52b00c6f3be897e152358b72a27622535f2e7e22df47266ee6d7d830518d39bd275d741de9a8c828a7131de9f0a54bf94e3d84c1b77ba169414d0fd16f3ddde61550746fc93239b919c373a849f3f781c60cc50510ca33c896f8eba8e632edd1855b4a7719ebfafd3920f98c3292b5df", 0x9a}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="280022f0ba8acbc519b3ed2042c2e06eb3e9e15c34718c074f40e3c60b94b5d94bff76f060a16829bf9dfa3376505f7c907958b3634bfcb94cf47486c529dbdaeb9b137ab472aeba8e3b2e14add755688201010000ad08e27061c066", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r4], 0x28, 0x40000}}], 0x1, 0x40000000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4221, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) 28.270928642s ago: executing program 6 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setregid(0xee00, 0xee00) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp(0x2, 0x2, 0x1) (async) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, &(0x7f0000000140)="d6f90197e3e196b7cd0394365cfe710a78d4c2c063d85930d880f4ca17aa044c8d09bda4b48bd5eaca9a24549cd783e7cbc0854215620cf39fc68747940fc813960ea5ab5552479dc3482b86a081256a561c5af8a2bb417ece6d67e97a11dc4cbeae27a8956425c566267ae3d61bf82f460b165f3d9cd656705c2d3d2628ddfeb383e682818d016b6efea199d9dbc8a1e36ed178fc61516db8568e4fb07fed1623a338bb", 0xa4, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000004c0)="247357860120aa60e38dbe24241fc4f8399bdf2291d0a3e1f495ca07f333a8ce06a73c95ca95ff1ddd23db47ea01bbd52ee7c56e78a708277d94fbca2f7b77d556a3e0a378f3b6a1dff5cc66590946e60957e311a0fb653d238572e310e88d0cacfd288573b821ceedd447837e9abf142e8c8a0993b8615f225302eaf484e53ca204da08fe3fb948a80e62fe6897d1f4eff7c355d4e939f9ab5c268b5466503d63d1a212db52bc63e146d8") r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/connector\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 27.703031144s ago: executing program 38 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setregid(0xee00, 0xee00) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp(0x2, 0x2, 0x1) (async) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, &(0x7f0000000140)="d6f90197e3e196b7cd0394365cfe710a78d4c2c063d85930d880f4ca17aa044c8d09bda4b48bd5eaca9a24549cd783e7cbc0854215620cf39fc68747940fc813960ea5ab5552479dc3482b86a081256a561c5af8a2bb417ece6d67e97a11dc4cbeae27a8956425c566267ae3d61bf82f460b165f3d9cd656705c2d3d2628ddfeb383e682818d016b6efea199d9dbc8a1e36ed178fc61516db8568e4fb07fed1623a338bb", 0xa4, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000004c0)="247357860120aa60e38dbe24241fc4f8399bdf2291d0a3e1f495ca07f333a8ce06a73c95ca95ff1ddd23db47ea01bbd52ee7c56e78a708277d94fbca2f7b77d556a3e0a378f3b6a1dff5cc66590946e60957e311a0fb653d238572e310e88d0cacfd288573b821ceedd447837e9abf142e8c8a0993b8615f225302eaf484e53ca204da08fe3fb948a80e62fe6897d1f4eff7c355d4e939f9ab5c268b5466503d63d1a212db52bc63e146d8") r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/connector\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 19.022440663s ago: executing program 8 (id=799): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x4, &(0x7f00000000c0)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x301, @multicast}, 0x46, {0x2, 0x4e24, @multicast2}, 'vcan0\x00'}) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x832381) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x1, 0x0, 0x7, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5}, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa6", 0x97, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)="16354dc03f84a53d156b842ff0eb14409f32b57a230126d69c0f1a5622a29d5d72640826bbeaa93b77", 0x29}], 0x2) 12.899516496s ago: executing program 8 (id=804): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa3cbe587e13c5715ef16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb923647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d70e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644cedc30d01a7ca8fd1ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250248d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422000000000000007f29509a6b27ad0f6e21c9d76367ee2979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7022169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28dd24e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e00", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0xffffffffffff6260, {{0xe, 0x5, 0x1, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) close(0x3) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x28240, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x10000}, &(0x7f0000000100)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x1cc, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd64}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x20, 0x3, "aca66f296632844c5fd5e024ecd3af64913eda82b5732c3eac10f45b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5c0d824f3c788c5b56f5096392edd1a75db73ab63df4cba2e5cfb5df2971ae"}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8840}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={r9, 0xd8, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x8000, @private1, 0xfa3}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x3}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x2}, @in6={0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0xf, @empty, 0x3d2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000100)=0x10) pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd6, 0x8000000c28) 11.707061232s ago: executing program 4 (id=805): timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f00000001c0)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000000140)) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x156, &(0x7f0000000240)="$eJzs2z1OMlEUxvHnAi/w4heKWhgLEwttZPiIJHa6FAIjIQ5qxAZioStwDe7MBWhhZ+U1TgAT+ZhEIjfK/9dwkoebOVOcmdOMAMytY+3IyMhaa7Wdzt7njOuWAMyI7f2+WQDzJ/7qugMAbjyfSI+Snl5uaoonh/aDj/y2n8dSw/mdtJXo5Sat/1/3iwdpr3/eZEaezwzyhZH5/m7/+ota0rJWlNWq1pTr5fXB+c0pNiEAAOaHUT4qn/iHmE6bgV8Ym/8L8+LYPBnmpYi8PDZPhXm+dhHUJ7UJYITYlPMfj5j/RMT8A3Cn3emeVYPAv6KgoKAYFK6fTAB+mnfduvTane5Bs1Vt+A3/vFQoHFUOy8VKyQs3e2/yfg/g9/p86bvuBAAAAAAAAAAAAAAAfNe6Nly3AAAAAGBGZvE5ket7BAAAAAAAAAAAAAAAAADgr3kPAAD//2QXJhI=") 11.387253347s ago: executing program 4 (id=806): r0 = syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000001ac0)={[{@keep_last_dots}, {@utf8}, {@allow_utime}, {}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}]}, 0x1, 0x1528, &(0x7f0000000580)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") stat(&(0x7f0000000100)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = mq_open(&(0x7f0000001b80)='\xbbM)Z\xf9\xfc\b2C:,*[\xb6\xf9\xa3\xddr0\x10\xcfX=H\\:,\x82\xe3\x12\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xb4\xfb7\xab\xe2\x7f\xc2\xfc\xdc\xe1O\xec\xe3 \xda)1\xdfK\xc9\xb2\x14\n\x1f4\x82\xc4\xc7\xfb\x15\x97\x03 m\x81\x97\xaaya\xf52\xebnE>\x9a\xe0\x93\t\xa6\xb3\xde\xbf\xbb\x186yd\x7f\xfd\xa6\x99\x95\x04\xbb\x1f\x11B\xd2\'\x9ch\xd9\xea,=C\x1f\x8e/\xa4\xff\xde[R\xff;\x92\xb3[\x90\x1d\xd0G\xf0Jk5\a9`\xef\xc9G0\x1d~~\xca\x02v\xf3Yy\xdf\xfe\xe7\x84\xb1\xbc\xae\xfcR\x98\xb2[|N\xeb\x1c\xf3\xf6V\xa3\xa7#\x05%\xfa\xbf\xfeuP\xbd.\xbe\xa2\xc8hb\xd5\xa3\xfc\xed]\x89\x92\xd2\x1a\xd3\xbb\x18\xc6S\xcf\xaaU\x99\x15^\xb0\xbb\x95\xb4\b)\fAC\xb0p\'\xfa\xad\x12\xdc\x10\x80\xcfYu\x9b\xcb\xa5X\xf2\x8d?\xd8U\x83\x88\x91\x9f[W!.\xe3\xfd|H\xf1\xa6\x8cL\xee\xda', 0x40, 0xc0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x2, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x20000840) mq_notify(r1, &(0x7f0000000240)={0x0, 0x1, 0x0, @thr={0x0, 0x0}}) pread64(r1, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0xe181, 0x7, 0x1, 0x402d}, &(0x7f0000000180)=0x0, &(0x7f0000000140)) r6 = dup3(r1, r1, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRESHEX=r0, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES8=r6], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 10.98596012s ago: executing program 4 (id=808): r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x977, @local, 0x7}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x42}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000300), 0x84800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendto$l2tp6(r0, &(0x7f0000000240)="44acbeb356108ba6fcaded89567b1b5c26dbd37b24ff0c9f4c691b1982b0d209cef95a98c2f3eb8a36a6ef24dd9c2a779eb1f21f5e6e7c84b0279e689c22b90421e0f1b92878e7dcdead50c181ff5dc0c50285405227ba78b857f564e4851ac91a", 0x61, 0x40000, &(0x7f00000002c0)={0xa, 0x0, 0x1, @private0, 0xffffffff, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000000000029000000020000002e71961e4f3e556c0b71ac7ef24f48a2ff00000000000000a75a8a7a000000009bfa91b838217f0099d63baf09759167b0a91d26be5cbbd545709dd276e292"], 0x28}}], 0x1, 0x4000000) 8.81982174s ago: executing program 9 (id=810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0xc, 0x8c, &(0x7f00000002c0)=""/140, 0x1e00, 0x61}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4060}, 0x60072) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe1a}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8d2d8, 0x8, 0xfffffffe, 0x3d}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="1c005e"], 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r7) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x10, 0xffffffffffffffff, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r8, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0xd33, 0x4, 0x0, {0x0, r9, r10}}) 8.606304592s ago: executing program 4 (id=811): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) memfd_create(0x0, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000d80)='./file1\x00', 0x10401, &(0x7f0000001c00)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlateno}, {@rodir}, {@fat=@dos1xfloppy}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x81d}}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") rmdir(&(0x7f0000000040)='./file1\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) listen(0xffffffffffffffff, 0x8) listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x108000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000180)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd090002007379"], 0x1ec}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000880)={'das16m1\x00', [0x83fb, 0x4, 0x29, 0x104, 0x7, 0xcc7, 0x400008, 0x8d, 0x6, 0x0, 0x2, 0x1, 0x2, 0x1, 0x8026, 0x6, 0x8, 0x1a449, 0x1277, 0x40000002, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00001, 0x3c, 0x40000c, 0x100006, 0xf7fffff7, 0x5, 0x4]}) 8.491069963s ago: executing program 8 (id=812): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000140)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000002"]) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0xe000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) sendto(r0, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae2de8da", 0xe, 0x4000080, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r8, 0x8919, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$sg(0x0, 0x0, 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) 8.490774359s ago: executing program 1 (id=773): mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x5021, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000100)='{\xdd@$@*]]^%-))*\x00', 0xf, 0xb1f0b1cbd2fa1959) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000840000000000000070000006b112f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x5021, 0x0) (async) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000100)='{\xdd@$@*]]^%-))*\x00', 0xf, 0xb1f0b1cbd2fa1959) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000840000000000000070000006b112f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 8.238486666s ago: executing program 1 (id=813): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x0, 0x0, 0x0}) 7.692498937s ago: executing program 1 (id=814): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c4b454c8325e01cb24c2f3c7bd462c5b8f86ca56891f8085db68de13331ff83f0b12d3c55ab09898b831162e94af5aab93746cc9c2846172beff34b815944f62e60470cf4d16331b53bb359d1c446b18974ae35bced61d48cfc8149eb43bec86d871bc7c43763c6e7daebe349c300000001000000012dc90b9a5f8d0ff4117ef90aff1413e2e919558d4a6412b5fdaa2694c41bab32c5c81e01243ccef8dcd85a46cfb92323a8070db43b1ef562691c070e2749"], 0x1, 0x6f6, &(0x7f0000000b00)="$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") r0 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200400, 0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 7.510113198s ago: executing program 0 (id=781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001580)={r3, r4, 0x4, r0}, 0x10) 7.44265544s ago: executing program 8 (id=815): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xd, 0x1, 0x1, 0x3, 0xe, 0x1, 0x6d, 0xf2, 0x8, 0x7, 0x6d, 0xfe, 0x0, 0x6, 0x1, 0x9}}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xce, 0x90, 0xf, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x1b0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x61, 0x9, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0xc, 0x7, 0x8, 0x38}, 0x16, &(0x7f0000000080)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd8, 0x9, 0xc, 0x0, 0x1}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3042}}, {0x12, &(0x7f0000000a40)=@string={0x12, 0x3, "123ebef3ec49068539723fe14dda66dd"}}, {0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "35944f1574679952879cfccd27a941f6b053c9ba54b4351d2e9a4f216b00426325bdcd562f315c65f5669e4f37437283273ac90eb3ac1c6f052c17438d73bd7f5c4c611130dd0f694bec4bf320e6ce49f393db9285fcd4a5263a7ccdb6785a0893952701c9384a4f5ac9e7af7d283ba59c9723fa9f29322edc955094f74cccdce1fcb04116879f4592729ddeafd1a50e733c618cada6d88754605f2d40bdb62bd54d6633c441f2e93f2ded58557a52ccff7592483dcaee667c58003eaebc9b004341a0"}}, {0xc, &(0x7f0000000380)=@string={0xc, 0x3, "f25274b3252da2c62408"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f0000000740)={0x40, 0x0, 0xee, {0xee, 0x6, "846ccce55f1abc4a053a4c91a23fd535de2587d0d88ad6c108fd757f3edb8a06b9244b9d7bd289460e0b92415d990d9b6fd5468e27c25f6032e9a7e5e9056cf5e5acc34eda0e8a3cf49517c6d20926ab98fa61b3647ea132bcc3cb7cdaaf6ca56103cf827773d2516290bf2113f6e26ca6339074fe12d4c31147860e6f933aab1230c9c0344445cc8800438aa70b48f7ca5cf71b354162f33ef422a5a6a7af2b44ccdeb131df31adf69fcc0becac3466dede7da521bd41b5b76079790fd02a0772978f6894219799ffd1399891a699b952b979be1dea4f411af7d052224ed33d0cef53d01a9848df022a8496"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000480)={0x0, 0x22, 0x19, {[@local=@item_012={0x1, 0x2, 0x2, '\\'}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_012={0x2, 0x1, 0x4, "3cdf"}, @main=@item_012={0x1, 0x0, 0xb, 'H'}, @main=@item_012={0x1, 0x0, 0x8, 'A'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "8730e778"}, @local=@item_4={0x3, 0x2, 0x9, "cfe9742a"}, @main=@item_012={0x2, 0x0, 0xa, "30ae"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x10, 0x1, {0x22, 0x217}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000880)={0x20, 0xf, 0x13, "bcbba8f70e509a71bfdf6f2f4f66448e74cd84"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x1, 0x75, "218c28779a36c8928e2b66172acfe9f5527f8acda0e45ec43a2c40c96c0981c7f00f5ab48a082e01aa80604758c4bde3041d8b3c3948d215cc87b1f29a392fe05383b1096c451829c975f88ec8eb6a60078f7c024974dd2f9722d063980cfea8940df065bbcb8cd4f80f151018cfa60eadcce81fab"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x84}}) syz_usb_control_io$printer(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fremovexattr(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x94}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xe, &(0x7f0000000b80)=""/14, 0x41000, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xfffffffe, 0x4, 0x1}, 0x10, 0x12b15, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 6.775536809s ago: executing program 0 (id=816): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0xa5, 0xfffffffffffffffc}, 0xf) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) 6.144559858s ago: executing program 1 (id=817): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x7fff0000}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.882959852s ago: executing program 0 (id=818): pipe2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x4004550d, &(0x7f0000002600)={0x0, 0x0, "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"}) 5.403113587s ago: executing program 4 (id=819): r0 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@filename='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) 3.828428675s ago: executing program 9 (id=820): r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x977, @local, 0x7}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x42}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000300), 0x84800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendto$l2tp6(r0, &(0x7f0000000240)="44acbeb356108ba6fcaded89567b1b5c26dbd37b24ff0c9f4c691b1982b0d209cef95a98c2f3eb8a36a6ef24dd9c2a779eb1f21f5e6e7c84b0279e689c22b90421e0f1b92878e7dcdead50c181ff5dc0c50285405227ba78b857f564e4851ac91a", 0x61, 0x40000, &(0x7f00000002c0)={0xa, 0x0, 0x1, @private0, 0xffffffff, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000000000029000000020000002e71961e4f3e556c0b71ac7ef24f48a2ff00000000000000a75a8a7a000000009bfa91b838217f0099d63baf09759167b0a91d26be5cbbd545709dd276e292"], 0x28}}], 0x1, 0x4000000) 3.519441563s ago: executing program 1 (id=821): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r2 = eventfd(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x8000, 0xc00000, 0x6, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x6c, 0x3, [{0x1, 0x11, "c3b70605a3e81650298c981cce4ad0"}, {0x0, 0xb, "af4ae74a3f1b11d971"}, {0x7, 0xa, "80dc0e98ff0bf4a1"}, {0x5, 0x7, "3bca752a96"}, {0x0, 0x12, "0c7952ba1ba9c4ae6bdbe64d9782f981"}, {0x2, 0xc, "df09f392abe2faae3ff0"}, {0xf, 0xb, "daefe5ff4417993512"}, {0x7, 0x10, "3996725b5973a5a5ee97ac108654"}]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0x8000}]}]}}}}}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="728690f8be689596ef32", 0xa, 0x80, 0x0, 0x2, r2}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x2, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.153377409s ago: executing program 9 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf253d0000000e0001006e657464657673696d0000000f0002006e6574ff657673696d3000001c008200aa6f757263655f6d61635f69f35f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r9, @ANYBLOB="080002007f00000114000600ff030000ffffff"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r9, @ANYBLOB="080002007f00000114000600ff030000ffffff"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.8231112s ago: executing program 8 (id=823): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x48050) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0xdef8, 0x2, 0x0, 0x0, 0x9, 0x264, 0x0, {0x0, @in6={{0xa, 0x4e24, 0xab, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1000}}, 0x7, 0x9, 0x7f, 0x4, 0x1}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(0x0, 0x0, &(0x7f0000000040)={0x10009, 0xfffffffffffeffff}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000003e0007012bbd700000000000017c00000400ff800c00018008000600010000804e0002"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044) 597.311245ms ago: executing program 9 (id=824): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xf00, 0x1, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="8000", 0x2}, {&(0x7f00000000c0)="bb801d2b66e7", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x0) 569.155463ms ago: executing program 8 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x2, 0x0, 0x1}, {0x3, 0x0, 0xae}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]}) (fail_nth: 5) 443.089561ms ago: executing program 4 (id=826): set_mempolicy(0x3, &(0x7f0000000140)=0xd, 0x96e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="2e2e6fc90f2addd26bd27f5ddbb6876fe3cf744307fd2afece73b66ff3bc6d3eb7d8901ae264c33b48b2c70c9d5800ed7ce48f23ec38e936e03385", @ANYRES32=r1, @ANYBLOB="167fdd85cd951d945ff9ec6acb2c20736e82d3ad8e1dc763173633aa96243db0ba5b03ff14cf25ff2b16be91d80f8eb929423b33b572c4cbf65dc202138b6e224b78a616156d694818db5d15cec9a605a0974d3c489a72f58ee6cbdda4b799ee9920f75153f289f4c66afd79ba5265606b9c7b95c0057e6437803c116447dcce1ca94684296c9155284792440f855829dde80ab57e59668d33dcff468bef47c7283f0a86b0f640e9459d2266920e", @ANYRES16=r2], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0xfa0, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000040)=0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x800000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x3a, 0x0, 0x0) setsockopt$MRT_PIM(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3ffffffe, 0x4) syz_usb_disconnect(r3) write$char_usb(r7, &(0x7f0000000380)="b7", 0x1) 355.062155ms ago: executing program 9 (id=827): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0xfff7, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0xa, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x11, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="d7bf01f9771d2d8e61386f2a6fcefd6088d51f6b13f5607878c895041357436af2e8e4e07fa39777b8a342396eaf6c6fa3c19942856016bf957ec20bceae4629be030fc510e93cf725ea62110608a095336cc5db62a2b6b31a5092f186c78d418d19fb8f5c187245cd38632fffef39fd14b4d63991588e26ed8f330107811569c31faa379b338b50fa64d3096a49c22aa77fa1bf19386e3a62732f3702c3aa57acb24c3f3aa8a53408292428e6fc360b7bc88b4e2844236a7ec168671a4f7d3b69bc250c1ae5d2166b72cac8575822f32cfa52b39c99dc406de341fff2e7721b462c4e46", 0xe4, 0x4000, &(0x7f00000002c0)={0xa, 0x4e21, 0x9, @mcast2, 0x5}, 0x1c) accept$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 331.884669ms ago: executing program 1 (id=828): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x100) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x4, 0x5, &(0x7f0000000080)=0x519}) tee(r0, r1, 0x3, 0x0) read$snapshot(r1, &(0x7f0000000740)=""/145, 0x91) 0s ago: executing program 9 (id=829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, r2, 0x25, 0x4, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000300)=ANY=[], 0x0) kernel console output (not intermixed with test programs): ASK> [ 295.565361][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.965911][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 296.720292][ T8196] loop3: detected capacity change from 0 to 1024 [ 297.784516][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 297.791362][ T5915] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 297.874542][ T5915] usb 6-1: config 0 has no interface number 0 [ 297.881563][ T5915] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 297.965854][ T8203] FAULT_INJECTION: forcing a failure. [ 297.965854][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 297.982858][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.4.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.982888][ T8203] Tainted: [L]=SOFTLOCKUP [ 297.982894][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.982903][ T8203] Call Trace: [ 297.982910][ T8203] [ 297.982917][ T8203] dump_stack_lvl+0xe8/0x150 [ 297.982945][ T8203] should_fail_ex+0x412/0x560 [ 297.982975][ T8203] should_failslab+0xa8/0x100 [ 297.982996][ T8203] __kmalloc_noprof+0xe8/0x760 [ 297.983013][ T8203] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.983040][ T8203] ? stack_trace_save+0xa9/0x100 [ 297.983059][ T8203] tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.983090][ T8203] tomoyo_check_open_permission+0x229/0x470 [ 297.983114][ T8203] ? tomoyo_check_open_permission+0x1d3/0x470 [ 297.983137][ T8203] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 297.983198][ T8203] security_file_open+0xa9/0x240 [ 297.983222][ T8203] do_dentry_open+0x384/0x14e0 [ 297.983249][ T8203] ? vfs_open+0x31/0x340 [ 297.983274][ T8203] vfs_open+0x3b/0x340 [ 297.983292][ T8203] ? path_openat+0x2df0/0x3860 [ 297.983313][ T8203] path_openat+0x2e08/0x3860 [ 297.983343][ T8203] ? __pfx_stack_trace_save+0x10/0x10 [ 297.983364][ T8203] ? stack_depot_save_flags+0x33/0x810 [ 297.983390][ T8203] ? __pfx_path_openat+0x10/0x10 [ 297.983406][ T8203] ? __x64_sys_openat+0x138/0x170 [ 297.983426][ T8203] ? do_syscall_64+0x14d/0xf80 [ 297.983447][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.983470][ T8203] ? __lock_acquire+0x6b5/0x2cf0 [ 297.983497][ T8203] do_file_open+0x23e/0x4a0 [ 297.983519][ T8203] ? __pfx_do_file_open+0x10/0x10 [ 297.983558][ T8203] ? _raw_spin_unlock+0x28/0x50 [ 297.983578][ T8203] ? alloc_fd+0x64b/0x6c0 [ 297.983608][ T8203] do_sys_openat2+0x113/0x200 [ 297.983633][ T8203] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.983656][ T8203] ? ksys_write+0x242/0x270 [ 297.983674][ T8203] ? __pfx_ksys_write+0x10/0x10 [ 297.983694][ T8203] __x64_sys_openat+0x138/0x170 [ 297.983719][ T8203] do_syscall_64+0x14d/0xf80 [ 297.983738][ T8203] ? trace_irq_disable+0x3b/0x150 [ 297.983754][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.983771][ T8203] ? clear_bhb_loop+0x40/0x90 [ 297.983791][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.983806][ T8203] RIP: 0033:0x7fc84f19c629 [ 297.983823][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.983836][ T8203] RSP: 002b:00007fc84ff9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.983857][ T8203] RAX: ffffffffffffffda RBX: 00007fc84f415fa0 RCX: 00007fc84f19c629 [ 297.983869][ T8203] RDX: 0000000000082040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 297.983881][ T8203] RBP: 00007fc84ff9e090 R08: 0000000000000000 R09: 0000000000000000 [ 297.983892][ T8203] R10: 0000000000000170 R11: 0000000000000246 R12: 0000000000000001 [ 297.983903][ T8203] R13: 00007fc84f416038 R14: 00007fc84f415fa0 R15: 00007fff32135238 [ 297.983932][ T8203] [ 298.291078][ T5915] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 298.300388][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.434843][ T8203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.507500][ T5915] usb 6-1: Product: syz [ 298.521908][ T5915] usb 6-1: Manufacturer: syz [ 298.553803][ T5915] usb 6-1: SerialNumber: syz [ 298.604755][ T5915] usb 6-1: config 0 descriptor?? [ 298.634452][ T5915] usb 6-1: can't set config #0, error -71 [ 298.674913][ T5915] usb 6-1: USB disconnect, device number 2 [ 298.836814][ T8213] loop5: detected capacity change from 0 to 128 [ 299.124597][ T5928] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.501930][ T8219] loop4: detected capacity change from 0 to 512 [ 299.852899][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 299.868603][ T5928] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 299.883273][ T5928] usb 4-1: config 0 has no interface number 0 [ 299.889769][ T5928] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 299.903314][ T5928] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 299.918849][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.957243][ T5928] usb 4-1: Product: syz [ 299.964774][ T5928] usb 4-1: Manufacturer: syz [ 299.979532][ T5928] usb 4-1: SerialNumber: syz [ 299.997116][ T5928] usb 4-1: config 0 descriptor?? [ 300.004285][ T8214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.048975][ T8224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.585787][ T8214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.424889][ T8240] loop5: detected capacity change from 0 to 512 [ 302.494398][ T5928] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 302.518572][ T5928] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 302.537656][ T5928] asix 4-1:0.188: probe with driver asix failed with error -61 [ 302.638453][ T8240] syz.5.533: attempt to access beyond end of device [ 302.638453][ T8240] loop5: rw=8388611, sector=1438, nr_sectors = 2 limit=512 [ 302.652782][ T8240] syz.5.533: attempt to access beyond end of device [ 302.652782][ T8240] loop5: rw=8390659, sector=1440, nr_sectors = 15358 limit=512 [ 302.679275][ T8240] syz.5.533: attempt to access beyond end of device [ 302.679275][ T8240] loop5: rw=8388611, sector=1438, nr_sectors = 2 limit=512 [ 302.697940][ T8240] syz.5.533: attempt to access beyond end of device [ 302.697940][ T8240] loop5: rw=8390659, sector=1440, nr_sectors = 15358 limit=512 [ 303.710359][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.536'. [ 303.719483][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 303.792329][ T803] usb 4-1: USB disconnect, device number 18 [ 303.864987][ T5824] syz_tun (unregistering): left allmulticast mode [ 303.886983][ T8247] loop4: detected capacity change from 0 to 4096 [ 303.902089][ T8247] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 304.361162][ T8254] loop3: detected capacity change from 0 to 8 [ 304.424591][ T8254] SQUASHFS error: zlib decompression failed, data probably corrupt [ 304.432881][ T8254] SQUASHFS error: Failed to read block 0x9b: -5 [ 304.439267][ T8254] SQUASHFS error: Unable to read metadata cache entry [99] [ 304.446577][ T8254] SQUASHFS error: Unable to read inode 0x127 [ 304.641233][ T8256] FAULT_INJECTION: forcing a failure. [ 304.641233][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 304.699905][ T8256] CPU: 0 UID: 0 PID: 8256 Comm: syz.2.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.699938][ T8256] Tainted: [L]=SOFTLOCKUP [ 304.699944][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.699953][ T8256] Call Trace: [ 304.699959][ T8256] [ 304.699967][ T8256] dump_stack_lvl+0xe8/0x150 [ 304.699994][ T8256] should_fail_ex+0x412/0x560 [ 304.700026][ T8256] should_failslab+0xa8/0x100 [ 304.700049][ T8256] __kmalloc_noprof+0xe8/0x760 [ 304.700069][ T8256] ? security_task_alloc+0x4d/0x330 [ 304.700098][ T8256] security_task_alloc+0x4d/0x330 [ 304.700122][ T8256] copy_process+0x16df/0x3cf0 [ 304.700157][ T8256] ? copy_process+0x921/0x3cf0 [ 304.700193][ T8256] ? __pfx_copy_process+0x10/0x10 [ 304.700224][ T8256] ? mutex_init_lockep+0xf9/0x130 [ 304.700252][ T8256] vhost_task_create+0x1f9/0x380 [ 304.700271][ T8256] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 304.700290][ T8256] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 304.700310][ T8256] ? __pfx_vhost_task_create+0x10/0x10 [ 304.700337][ T8256] ? __pfx_vhost_task_fn+0x10/0x10 [ 304.700373][ T8256] ? __lock_acquire+0x6b5/0x2cf0 [ 304.700403][ T8256] kvm_mmu_post_init_vm+0x14c/0x300 [ 304.700426][ T8256] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 304.700452][ T8256] ? __mutex_trylock_common+0x158/0x260 [ 304.700470][ T8256] ? __pfx___mutex_trylock_common+0x10/0x10 [ 304.700487][ T8256] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 304.700506][ T8256] ? register_lock_class+0x31/0x2e0 [ 304.700530][ T8256] ? __lock_acquire+0x6b5/0x2cf0 [ 304.700558][ T8256] ? kasan_quarantine_put+0xbb/0x1f0 [ 304.700578][ T8256] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 304.700603][ T8256] ? do_raw_write_lock+0x11d/0x260 [ 304.700636][ T8256] kvm_vcpu_ioctl+0xa62/0xfd0 [ 304.700660][ T8256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 304.700704][ T8256] ? security_file_ioctl+0x246/0x2a0 [ 304.700730][ T8256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 304.700752][ T8256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 304.700770][ T8256] __se_sys_ioctl+0xfc/0x170 [ 304.700793][ T8256] do_syscall_64+0x14d/0xf80 [ 304.700816][ T8256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.700838][ T8256] ? clear_bhb_loop+0x40/0x90 [ 304.700859][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.700876][ T8256] RIP: 0033:0x7f73a719c629 [ 304.700893][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.700907][ T8256] RSP: 002b:00007f73a8106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.700926][ T8256] RAX: ffffffffffffffda RBX: 00007f73a7416090 RCX: 00007f73a719c629 [ 304.700939][ T8256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 304.700950][ T8256] RBP: 00007f73a8106090 R08: 0000000000000000 R09: 0000000000000000 [ 304.700961][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.700971][ T8256] R13: 00007f73a7416128 R14: 00007f73a7416090 R15: 00007ffce6401eb8 [ 304.701008][ T8256] [ 305.209965][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.398006][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.580758][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.674544][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.691107][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.700368][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.716423][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.730202][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.805904][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.917555][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.928828][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.938461][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.947660][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.957151][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.003677][ T5928] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 306.195927][ T5928] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.224624][ T5928] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 306.241814][ T12] bridge_slave_1: left allmulticast mode [ 306.257365][ T12] bridge_slave_1: left promiscuous mode [ 306.265701][ T5928] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 306.276989][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.285228][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.294738][ T12] bridge_slave_0: left allmulticast mode [ 306.300397][ T12] bridge_slave_0: left promiscuous mode [ 306.306545][ T5928] usb 4-1: New USB device found, idVendor=0eef, idProduct=726b, bcdDevice= 0.00 [ 306.324530][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.332218][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.373885][ T5928] usb 4-1: config 0 descriptor?? [ 306.392382][ T8275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.406165][ T8275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.604642][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.623981][ T5928] usb 4-1: string descriptor 0 read error: -71 [ 306.647611][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.647932][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 306.686153][ T12] bond0 (unregistering): Released all slaves [ 306.691971][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 306.733906][ T5928] usb 4-1: USB disconnect, device number 19 [ 307.922821][ T50] Bluetooth: hci0: command tx timeout [ 308.015229][ T50] Bluetooth: hci2: command tx timeout [ 308.030242][ T8292] loop4: detected capacity change from 0 to 64 [ 308.048219][ T8292] hfs: Bad value for 'uid' [ 308.393332][ T12] hsr_slave_0: left promiscuous mode [ 308.430786][ T12] hsr_slave_1: left promiscuous mode [ 308.454989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.462552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.514029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.553609][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.579798][ T12] veth1_macvtap: left promiscuous mode [ 308.585470][ T12] veth0_macvtap: left promiscuous mode [ 308.591077][ T12] veth1_vlan: left promiscuous mode [ 308.618443][ T12] veth0_vlan: left promiscuous mode [ 308.769670][ T8292] loop4: detected capacity change from 0 to 32768 [ 309.386430][ T12] team0 (unregistering): Port device team_slave_1 removed [ 309.445011][ T12] team0 (unregistering): Port device team_slave_0 removed [ 309.627900][ T8329] capability: warning: `syz.2.559' uses deprecated v2 capabilities in a way that may be insecure [ 309.718904][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 309.761710][ T8329] loop2: detected capacity change from 0 to 4096 [ 309.974288][ T50] Bluetooth: hci0: command tx timeout [ 310.050083][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 310.055014][ T50] Bluetooth: hci2: command tx timeout [ 310.089426][ T8333] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 310.357128][ T8346] loop3: detected capacity change from 0 to 164 [ 310.443322][ T8346] isofs_fill_super: root inode is not a directory. Corrupted media? [ 310.469527][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.493842][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.553776][ T8271] bridge_slave_0: entered allmulticast mode [ 311.562042][ T8271] bridge_slave_0: entered promiscuous mode [ 311.648259][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.663850][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.671208][ T8271] bridge_slave_1: entered allmulticast mode [ 311.717687][ T8271] bridge_slave_1: entered promiscuous mode [ 312.754971][ T50] Bluetooth: hci0: command tx timeout [ 312.760499][ T50] Bluetooth: hci2: command tx timeout [ 313.004580][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 313.046803][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.126754][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.242061][ T8271] team0: Port device team_slave_0 added [ 313.341791][ T8271] team0: Port device team_slave_1 added [ 313.672047][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.868641][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.875874][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.906782][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.022221][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.085452][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.102184][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.159401][ T8379] loop4: detected capacity change from 0 to 32768 [ 314.165986][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.190336][ T8379] BTRFS warning: excessive commit interval 2147483648, use with care [ 314.207198][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.216854][ T8379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.568 (8379) [ 314.229368][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.257407][ T8280] bridge_slave_0: entered allmulticast mode [ 314.271935][ T8379] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.284531][ T8280] bridge_slave_0: entered promiscuous mode [ 314.289215][ T8379] BTRFS info (device loop4): using crc32c checksum algorithm [ 314.296795][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.315387][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.322873][ T8280] bridge_slave_1: entered allmulticast mode [ 314.331697][ T8280] bridge_slave_1: entered promiscuous mode [ 314.363527][ T6075] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 314.392224][ T8379] BTRFS error (device loop4): failed to load root extent [ 314.403381][ T8379] BTRFS warning (device loop4): try to load backup roots slot 1 [ 314.411848][ T350] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 314.427808][ T8379] BTRFS warning (device loop4): couldn't read tree root [ 314.429238][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.436670][ T8379] BTRFS warning (device loop4): try to load backup roots slot 2 [ 314.456613][ T350] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 314.467397][ T8379] BTRFS warning (device loop4): couldn't read tree root [ 314.474795][ T8379] BTRFS warning (device loop4): try to load backup roots slot 3 [ 314.513907][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.528292][ T8379] BTRFS info (device loop4): checking UUID tree [ 314.554508][ T8379] BTRFS info (device loop4): enabling ssd optimizations [ 314.568319][ T8379] BTRFS info (device loop4): using spread ssd allocation scheme [ 314.602489][ T8379] BTRFS info (device loop4): turning on sync discard [ 314.609745][ T8379] BTRFS info (device loop4): enabling free space tree [ 314.623045][ T8271] hsr_slave_0: entered promiscuous mode [ 314.623591][ T8379] BTRFS info (device loop4): enabling auto defrag [ 314.635579][ T8379] BTRFS info (device loop4): trying to use backup root at mount time [ 314.650874][ T8271] hsr_slave_1: entered promiscuous mode [ 314.667497][ T10] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 314.679872][ T8271] debugfs: 'hsr0' already exists in 'hsr' [ 314.686359][ T8271] Cannot create hsr debugfs directory [ 314.731500][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.746130][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.763747][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.773667][ T50] Bluetooth: hci0: command tx timeout [ 314.779455][ T10] usb 3-1: Product: syz [ 314.797631][ T10] usb 3-1: Manufacturer: syz [ 314.802779][ T10] usb 3-1: SerialNumber: syz [ 314.812892][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.827496][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.858814][ T50] Bluetooth: hci2: command tx timeout [ 314.905733][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.019064][ T5914] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.056364][ T5823] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.086207][ T8280] team0: Port device team_slave_0 added [ 315.120785][ T8280] team0: Port device team_slave_1 added [ 315.338790][ T8391] loop2: detected capacity change from 0 to 512 [ 315.370150][ T8391] vfat: Unknown parameter '' [ 315.377854][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 315.600746][ T8426] bond0: option downdelay: invalid value (18446744071951403948) [ 315.626041][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.641855][ T8426] bond0: option downdelay: allowed values 0 - 2147483647 [ 315.674167][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.784648][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.802127][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.857742][ T8434] loop4: detected capacity change from 0 to 8 [ 315.873688][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.924450][ T8434] SQUASHFS error: zlib decompression failed, data probably corrupt [ 315.960721][ T8418] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 315.964830][ T8434] SQUASHFS error: Failed to read block 0x9b: -5 [ 316.013076][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.031551][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.041084][ T8434] SQUASHFS error: Unable to read metadata cache entry [99] [ 316.089824][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.093625][ T8434] SQUASHFS error: Unable to read inode 0x127 [ 316.153824][ T5914] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 316.166795][ T5914] ath9k_htc: Failed to initialize the device [ 316.232819][ T5914] usb 3-1: ath9k_htc: USB layer deinitialized [ 316.299991][ T12] bridge_slave_1: left allmulticast mode [ 316.307406][ T12] bridge_slave_1: left promiscuous mode [ 316.313290][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.336504][ T12] bridge_slave_0: left allmulticast mode [ 316.350625][ T12] bridge_slave_0: left promiscuous mode [ 316.363920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.542748][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554012][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.886505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.904553][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.916515][ T12] bond0 (unregistering): Released all slaves [ 318.081611][ T8280] hsr_slave_0: entered promiscuous mode [ 318.107090][ T8280] hsr_slave_1: entered promiscuous mode [ 318.126749][ T8280] debugfs: 'hsr0' already exists in 'hsr' [ 318.135485][ T8280] Cannot create hsr debugfs directory [ 318.151100][ T12] IPVS: stopping backup sync thread 6140 ... [ 318.551292][ T8461] loop3: detected capacity change from 0 to 128 [ 318.585579][ T8461] msdos: Bad value for 'gid' [ 318.603700][ T8461] msdos: Bad value for 'gid' [ 319.770734][ T12] hsr_slave_0: left promiscuous mode [ 319.793518][ T803] usb 3-1: USB disconnect, device number 8 [ 319.801679][ T12] hsr_slave_1: left promiscuous mode [ 319.824573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.846264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.856291][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.864679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.891498][ T12] veth1_macvtap: left promiscuous mode [ 319.903770][ T12] veth0_macvtap: left promiscuous mode [ 319.916768][ T12] veth1_vlan: left promiscuous mode [ 319.932322][ T12] veth0_vlan: left promiscuous mode [ 320.353192][ T12] team0 (unregistering): Port device team_slave_1 removed [ 320.386111][ T12] team0 (unregistering): Port device team_slave_0 removed [ 320.624291][ T8271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.295706][ T8474] loop4: detected capacity change from 0 to 262144 [ 321.311609][ T8474] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.575 (8474) [ 321.329380][ T8474] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 321.339575][ T8474] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 321.366208][ T8271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.401913][ T8474] BTRFS info (device loop4): deleted orphan free space tree entries [ 321.411652][ T8474] BTRFS info (device loop4): checking UUID tree [ 321.421669][ T8474] BTRFS info (device loop4): enabling ssd optimizations [ 321.428684][ T8474] BTRFS info (device loop4): using spread ssd allocation scheme [ 321.436681][ T8474] BTRFS info (device loop4): turning on async discard [ 321.443440][ T8474] BTRFS info (device loop4): enabling free space tree [ 322.132879][ T8271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.164208][ T8271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.428520][ T29] audit: type=1800 audit(1771459853.939:20): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.575" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 323.530087][ T8523] loop2: detected capacity change from 0 to 8 [ 323.549785][ T8280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.572680][ T8523] SQUASHFS error: zlib decompression failed, data probably corrupt [ 323.613941][ T8523] SQUASHFS error: Failed to read block 0x9b: -5 [ 323.659028][ T12] IPVS: stop unused estimator thread 0... [ 323.688988][ T8523] SQUASHFS error: Unable to read metadata cache entry [99] [ 323.720565][ T8280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.734043][ T8523] SQUASHFS error: Unable to read inode 0x127 [ 323.815008][ T8280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.918024][ T5823] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 325.023993][ T8280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.413196][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.491680][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.517330][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.524537][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.645903][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.653132][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.835471][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.963075][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.032380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.039628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.109313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.116565][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.567920][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.630347][ T8577] loop3: detected capacity change from 0 to 64 [ 326.684448][ T8577] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 327.390170][ T8588] loop2: detected capacity change from 0 to 128 [ 327.424412][ T8588] vfat: Unknown parameter '0x00000000000001ad­' [ 328.307701][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.766432][ T8271] veth0_vlan: entered promiscuous mode [ 329.812592][ T8271] veth1_vlan: entered promiscuous mode [ 330.355372][ T8632] loop4: detected capacity change from 0 to 8 [ 330.411410][ T8632] SQUASHFS error: zlib decompression failed, data probably corrupt [ 330.441031][ T8632] SQUASHFS error: Failed to read block 0x9b: -5 [ 330.460000][ T8632] SQUASHFS error: Unable to read metadata cache entry [99] [ 330.467725][ T8632] SQUASHFS error: Unable to read inode 0x127 [ 330.659507][ T8637] loop2: detected capacity change from 0 to 64 [ 330.739552][ T8271] veth0_macvtap: entered promiscuous mode [ 330.753405][ T8271] veth1_macvtap: entered promiscuous mode [ 330.789002][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.810794][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.924547][ T29] audit: type=1804 audit(1771459862.599:21): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.592" name="/newroot/127/control/file1" dev="loop2" ino=5 res=1 errno=0 [ 331.071298][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.094617][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.159899][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189193][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.364132][ T8280] veth0_vlan: entered promiscuous mode [ 331.396780][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.515789][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.646920][ T8280] veth1_vlan: entered promiscuous mode [ 332.821095][ T350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.854498][ T350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.897672][ T8280] veth0_macvtap: entered promiscuous mode [ 332.911191][ T8280] veth1_macvtap: entered promiscuous mode [ 332.985937][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.105628][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.160095][ T350] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.189073][ T350] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.284677][ T350] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.293489][ T350] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.735324][ T8679] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 334.778128][ T8679] loop3: detected capacity change from 0 to 512 [ 334.838920][ T8679] FAT-fs (loop3): Directory bread(block 199916) failed [ 334.847672][ T8679] FAT-fs (loop3): Directory bread(block 199917) failed [ 334.855016][ T8679] FAT-fs (loop3): Directory bread(block 199918) failed [ 334.861969][ T8679] FAT-fs (loop3): Directory bread(block 199919) failed [ 334.869973][ T8679] FAT-fs (loop3): Directory bread(block 199920) failed [ 334.877453][ T8679] FAT-fs (loop3): Directory bread(block 199921) failed [ 334.885464][ T8679] FAT-fs (loop3): Directory bread(block 199922) failed [ 334.892418][ T8679] FAT-fs (loop3): Directory bread(block 199923) failed [ 335.171195][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.206136][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.222731][ T8682] loop7: detected capacity change from 0 to 16384 [ 335.316755][ T8682] loop4: detected capacity change from 0 to 1024 [ 335.485591][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.512093][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.588693][ T8685] loop7: detected capacity change from 16384 to 0 [ 335.604129][ C0] I/O error, dev loop7, sector 832 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 335.659059][ T8664] loop2: detected capacity change from 0 to 40427 [ 335.705271][ T8664] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 335.713077][ T8664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 335.788757][ T8664] F2FS-fs (loop2): invalid crc value [ 337.109093][ T8703] loop4: detected capacity change from 0 to 512 [ 337.153393][ T8703] FAT-fs (loop4): Directory bread(block 199916) failed [ 337.201351][ T8703] FAT-fs (loop4): Directory bread(block 199917) failed [ 337.223037][ T8703] FAT-fs (loop4): Directory bread(block 199918) failed [ 337.263611][ T8703] FAT-fs (loop4): Directory bread(block 199919) failed [ 337.277105][ T8703] FAT-fs (loop4): Directory bread(block 199920) failed [ 337.303641][ T8703] FAT-fs (loop4): Directory bread(block 199921) failed [ 337.312639][ T8664] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 337.332059][ T8703] FAT-fs (loop4): Directory bread(block 199922) failed [ 337.339858][ T8703] FAT-fs (loop4): Directory bread(block 199923) failed [ 337.533995][ T8708] FAT-fs (loop4): FAT read failed (blocknr 128) [ 339.857776][ T8725] xt_hashlimit: size too large, truncated to 1048576 [ 341.602845][ T8751] netlink: 'syz.6.620': attribute type 1 has an invalid length. [ 341.610864][ T8751] netlink: 'syz.6.620': attribute type 3 has an invalid length. [ 341.618681][ T8751] netlink: 224 bytes leftover after parsing attributes in process `syz.6.620'. [ 341.783260][ T5947] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 342.042906][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 342.124024][ T5947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 342.345831][ T5947] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 342.456657][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.565679][ T5947] usb 5-1: Product: syz [ 342.569860][ T5947] usb 5-1: Manufacturer: syz [ 342.601447][ T5947] usb 5-1: SerialNumber: syz [ 342.658091][ T5947] usb 5-1: config 0 descriptor?? [ 342.690974][ T5947] aircable 5-1:0.0: aircable converter detected [ 342.739569][ T5947] usb 5-1: aircable converter now attached to ttyUSB0 [ 344.721924][ T54] usb 5-1: USB disconnect, device number 13 [ 344.826735][ T54] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 344.835640][ T54] aircable 5-1:0.0: device disconnected [ 345.090494][ T8781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 345.634970][ T1216] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 345.681997][ T8792] batadv_slave_1: entered promiscuous mode [ 345.708249][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.627'. [ 345.793762][ T1216] usb 5-1: device descriptor read/64, error -71 [ 345.800181][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.880516][ T8798] fuse: Bad value for 'user_id' [ 345.904707][ T8792] batadv_slave_1 (unregistering): left promiscuous mode [ 345.913705][ T8798] fuse: Bad value for 'user_id' [ 345.923829][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.972522][ T8798] loop3: detected capacity change from 0 to 128 [ 346.063946][ T1216] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 346.233766][ T1216] usb 5-1: device descriptor read/64, error -71 [ 346.347731][ T1216] usb usb5-port1: attempt power cycle [ 346.584077][ T803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 346.611510][ T8822] loop2: detected capacity change from 0 to 128 [ 346.723668][ T1216] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 346.764893][ T1216] usb 5-1: device descriptor read/8, error -71 [ 346.783354][ T803] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 346.824172][ T803] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.861191][ T803] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.886814][ T803] usb 8-1: config 1 has no interface number 1 [ 346.909099][ T803] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 346.925983][ T803] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.941775][ T803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.951083][ T803] usb 8-1: Product: syz [ 346.957258][ T803] usb 8-1: Manufacturer: syz [ 346.961943][ T803] usb 8-1: SerialNumber: syz [ 347.044148][ T1216] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 347.055954][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 347.097175][ T1216] usb 5-1: device descriptor read/8, error -71 [ 347.180608][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.215170][ T1216] usb usb5-port1: unable to enumerate USB device [ 347.227613][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.259909][ T1159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.265420][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 347.293891][ T803] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 347.296747][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 347.313684][ T803] usb 8-1: MIDIStreaming interface descriptor not found [ 347.326830][ T10] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 347.353614][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.361670][ T10] usb 4-1: Product: syz [ 347.381723][ T10] usb 4-1: Manufacturer: syz [ 347.393763][ T10] usb 4-1: SerialNumber: syz [ 347.407401][ T10] usb 4-1: config 0 descriptor?? [ 347.436324][ T10] aircable 4-1:0.0: aircable converter detected [ 347.463085][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.478169][ T10] usb 4-1: aircable converter now attached to ttyUSB0 [ 347.482900][ T803] usb 8-1: USB disconnect, device number 2 [ 347.621208][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.663238][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.851336][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.862033][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.409525][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.421653][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.435207][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.447964][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.560442][ T8853] loop7: detected capacity change from 0 to 131072 [ 349.636611][ T8853] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 349.654264][ T8853] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 349.735800][ T8860] 9p: Bad value for 'wfdno' [ 349.891267][ T5914] usb 4-1: USB disconnect, device number 20 [ 349.920687][ T5914] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 349.932297][ T5914] aircable 4-1:0.0: device disconnected [ 350.066616][ T8860] loop4: detected capacity change from 0 to 764 [ 350.154719][ T8860] rock: directory entry would overflow storage [ 350.160949][ T8860] rock: sig=0x5245, size=8, remaining=5 [ 350.468383][ T1216] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 351.224478][ T5830] Bluetooth: hci3: command tx timeout [ 351.253897][ T1159] bridge_slave_1: left allmulticast mode [ 351.259551][ T1159] bridge_slave_1: left promiscuous mode [ 351.284588][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.349219][ T1159] bridge_slave_0: left allmulticast mode [ 351.357480][ T1159] bridge_slave_0: left promiscuous mode [ 351.363301][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.434926][ T1216] usb 5-1: config 3 has an invalid interface number: 61 but max is 0 [ 351.443050][ T1216] usb 5-1: config 3 has no interface number 0 [ 351.473683][ T1216] usb 5-1: config 3 interface 61 has no altsetting 0 [ 351.490563][ T1216] usb 5-1: string descriptor 0 read error: -22 [ 351.511002][ T1216] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 351.543976][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.601105][ T1216] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.767425][ T1216] snd-usb-audio 5-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 351.803005][ T8860] netlink: 100 bytes leftover after parsing attributes in process `syz.4.642'. [ 351.803041][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.828148][ T8860] loop4: detected capacity change from 0 to 64 [ 351.842862][ T8860] minix: Unknown parameter 'obj_type' [ 351.885899][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.915046][ T1159] bond0 (unregistering): Released all slaves [ 352.168749][ T1159] IPVS: stopping backup sync thread 6530 ... [ 352.312752][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 352.464483][ T5907] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 352.550736][ T1159] hsr_slave_0: left promiscuous mode [ 352.559301][ T1159] hsr_slave_1: left promiscuous mode [ 352.575049][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.591657][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.610113][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.624546][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 352.636813][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.661517][ T5907] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 352.677212][ T5907] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.677780][ T1159] veth1_macvtap: left promiscuous mode [ 352.692784][ T5907] usb 4-1: config 1 interface 0 has no altsetting 0 [ 352.707440][ T5907] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 352.719668][ T1159] veth0_macvtap: left promiscuous mode [ 352.724851][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.731133][ T1159] veth1_vlan: left promiscuous mode [ 352.735429][ T5907] usb 4-1: Product: syz [ 352.745235][ T5907] usb 4-1: Manufacturer: syz [ 352.759838][ T1159] veth0_vlan: left promiscuous mode [ 352.765240][ T5907] usb 4-1: SerialNumber: syz [ 352.987285][ T6923] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ab34000 (8)(syz0) start [ 353.049633][ T6923] smbdirect: ib_dev[syz0] removed [ 353.254982][ T5830] Bluetooth: hci3: command tx timeout [ 353.530028][ T6923] infiniband: Removed from hash: ib_dev=ffff88807ab34000 (0)(syz0) ndev=ffff8880596ee000 (6)(vlan1) [ 353.579946][ T5947] usb 5-1: USB disconnect, device number 18 [ 353.654969][ T5907] usb 4-1: USB disconnect, device number 21 [ 353.698687][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 353.713219][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 353.793725][ T803] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 353.907191][ T5928] infiniband syz0: ib_query_port failed (-19) [ 353.917543][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.653'. [ 353.918267][ T6923] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ab34000 (0)(syz0) end [ 353.945179][ T803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 353.969260][ T803] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 353.991159][ T803] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 354.000606][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.011618][ T803] usb 7-1: Product: syz [ 354.043996][ T803] usb 7-1: Manufacturer: syz [ 354.048640][ T803] usb 7-1: SerialNumber: syz [ 354.085569][ T803] usb 7-1: config 0 descriptor?? [ 354.132036][ T803] aircable 7-1:0.0: aircable converter detected [ 354.159553][ T803] usb 7-1: aircable converter now attached to ttyUSB0 [ 354.223127][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.494722][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.604005][ T8842] bridge_slave_0: entered allmulticast mode [ 354.779308][ T8842] bridge_slave_0: entered promiscuous mode [ 355.322555][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.335080][ T5830] Bluetooth: hci3: command tx timeout [ 355.351166][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.371437][ T8842] bridge_slave_1: entered allmulticast mode [ 355.384902][ T8842] bridge_slave_1: entered promiscuous mode [ 355.568468][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.631009][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.955401][ T8842] team0: Port device team_slave_0 added [ 357.013772][ T5907] usb 7-1: USB disconnect, device number 2 [ 357.038844][ T8842] team0: Port device team_slave_1 added [ 357.050178][ T5907] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 357.064187][ T5907] aircable 7-1:0.0: device disconnected [ 357.315937][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.322917][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.412423][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.414148][ T8968] capability: warning: `syz.6.660' uses 32-bit capabilities (legacy support in use) [ 357.424223][ T5830] Bluetooth: hci3: command tx timeout [ 357.451421][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.473613][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.500202][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.511590][ T8968] program syz.6.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.799862][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.664'. [ 357.851117][ T8842] hsr_slave_0: entered promiscuous mode [ 357.880747][ T8842] hsr_slave_1: entered promiscuous mode [ 357.909199][ T8842] debugfs: 'hsr0' already exists in 'hsr' [ 357.928961][ T8842] Cannot create hsr debugfs directory [ 359.422438][ T9010] loop6: detected capacity change from 0 to 512 [ 359.688045][ T8842] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 359.779553][ T8842] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 359.851905][ T8842] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 360.036472][ T8842] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 360.294637][ T9036] FAULT_INJECTION: forcing a failure. [ 360.294637][ T9036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.335000][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.6.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.335029][ T9036] Tainted: [L]=SOFTLOCKUP [ 360.335036][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.335046][ T9036] Call Trace: [ 360.335053][ T9036] [ 360.335061][ T9036] dump_stack_lvl+0xe8/0x150 [ 360.335084][ T9036] should_fail_ex+0x412/0x560 [ 360.335107][ T9036] _copy_from_user+0x2d/0xb0 [ 360.335125][ T9036] __copy_msghdr+0x3c5/0x5b0 [ 360.335144][ T9036] ___sys_sendmsg+0x213/0x360 [ 360.335165][ T9036] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.335205][ T9036] ? __fget_files+0x2a/0x420 [ 360.335230][ T9036] ? __fget_files+0x3a0/0x420 [ 360.335254][ T9036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.335273][ T9036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.335296][ T9036] ? __pfx_ksys_write+0x10/0x10 [ 360.335318][ T9036] do_syscall_64+0x14d/0xf80 [ 360.335335][ T9036] ? trace_irq_disable+0x3b/0x150 [ 360.335347][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.335361][ T9036] ? clear_bhb_loop+0x40/0x90 [ 360.335377][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.335391][ T9036] RIP: 0033:0x7f0c6e39c629 [ 360.335404][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.335416][ T9036] RSP: 002b:00007f0c6f2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.335432][ T9036] RAX: ffffffffffffffda RBX: 00007f0c6e615fa0 RCX: 00007f0c6e39c629 [ 360.335442][ T9036] RDX: 00000000000040c0 RSI: 0000200000000340 RDI: 0000000000000003 [ 360.335451][ T9036] RBP: 00007f0c6f2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 360.335459][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.335467][ T9036] R13: 00007f0c6e616038 R14: 00007f0c6e615fa0 R15: 00007ffdbee440f8 [ 360.335488][ T9036] [ 360.713238][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.784023][ T9039] batadv_slave_1: entered promiscuous mode [ 360.840836][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.674'. [ 360.927723][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.748488][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.812543][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.974805][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.982063][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.047800][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.055046][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.571402][ T9065] loop4: detected capacity change from 0 to 40427 [ 362.603880][ T9065] F2FS-fs (loop4): invalid crc value [ 362.878903][ T9065] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 362.889335][ T9065] F2FS-fs (loop4): Start checkpoint disabled! [ 362.901449][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 362.918973][ T9065] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 362.981590][ T9065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 363.063673][ T29] audit: type=1800 audit(1771459894.709:22): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.681" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 363.316840][ T9080] syz.4.681: attempt to access beyond end of device [ 363.316840][ T9080] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 363.341965][ T9080] syz.4.681: attempt to access beyond end of device [ 363.341965][ T9080] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 363.359835][ T9080] syz.4.681: attempt to access beyond end of device [ 363.359835][ T9080] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 363.376133][ T9080] syz.4.681: attempt to access beyond end of device [ 363.376133][ T9080] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 363.392405][ T9080] syz.4.681: attempt to access beyond end of device [ 363.392405][ T9080] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 363.411227][ T9080] syz.4.681: attempt to access beyond end of device [ 363.411227][ T9080] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 363.427777][ T9080] syz.4.681: attempt to access beyond end of device [ 363.427777][ T9080] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 363.472622][ T9080] syz.4.681: attempt to access beyond end of device [ 363.472622][ T9080] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 363.489026][ T9080] syz.4.681: attempt to access beyond end of device [ 363.489026][ T9080] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 363.505196][ T9080] syz.4.681: attempt to access beyond end of device [ 363.505196][ T9080] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 363.813704][ T9083] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 363.829296][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.829318][ T12] Tainted: [L]=SOFTLOCKUP [ 363.829321][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.829328][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 363.829352][ T12] Call Trace: [ 363.829357][ T12] [ 363.829362][ T12] dump_stack_lvl+0xe8/0x150 [ 363.829379][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 363.829398][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 363.829419][ T12] __submit_merged_bio+0x256/0x700 [ 363.829438][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 363.829457][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 363.829484][ T12] f2fs_write_data_pages+0x2975/0x35e0 [ 363.829493][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 363.829509][ T12] ? lock_release+0x4b/0x3d0 [ 363.829542][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 363.829559][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 363.829589][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 363.829617][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 363.829637][ T12] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 363.829651][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 363.829661][ T12] do_writepages+0x32e/0x550 [ 363.829680][ T12] ? reacquire_held_locks+0x104/0x190 [ 363.829694][ T12] ? writeback_sb_inodes+0x477/0x1a20 [ 363.829712][ T12] __writeback_single_inode+0x133/0x11a0 [ 363.829726][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 363.829745][ T12] writeback_sb_inodes+0x992/0x1a20 [ 363.829769][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 363.829786][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 363.829798][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.829831][ T12] ? rcu_is_watching+0x15/0xb0 [ 363.829851][ T12] wb_writeback+0x456/0xb70 [ 363.829866][ T12] ? queue_io+0x1f1/0x4a0 [ 363.829884][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 363.829896][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.829916][ T12] wb_workfn+0x414/0xf50 [ 363.829928][ T12] ? look_up_lock_class+0x57/0x110 [ 363.829950][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 363.829965][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 363.829977][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 363.830001][ T12] ? process_one_work+0x87c/0x1650 [ 363.830015][ T12] process_one_work+0x949/0x1650 [ 363.830040][ T12] ? __pfx_process_one_work+0x10/0x10 [ 363.830052][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.830072][ T12] worker_thread+0xb46/0x1140 [ 363.830101][ T12] kthread+0x388/0x470 [ 363.830112][ T12] ? __pfx_worker_thread+0x10/0x10 [ 363.830125][ T12] ? __pfx_kthread+0x10/0x10 [ 363.830136][ T12] ret_from_fork+0x51e/0xb90 [ 363.830159][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 363.830172][ T12] ? __switch_to+0xc7d/0x1450 [ 363.830186][ T12] ? __pfx_kthread+0x10/0x10 [ 363.830198][ T12] ret_from_fork_asm+0x1a/0x30 [ 363.830217][ T12] [ 363.830222][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 363.973868][ T29] audit: type=1326 audit(1771459895.549:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.7.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837899c629 code=0x0 [ 364.515558][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.620901][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.689'. [ 366.254291][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 366.646217][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 366.686797][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.736336][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 366.784698][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.813987][ T5915] usb 5-1: config 0 descriptor?? [ 366.852327][ T8842] veth0_vlan: entered promiscuous mode [ 366.873997][ T5915] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 366.931927][ T8842] veth1_vlan: entered promiscuous mode [ 366.949343][ T9138] loop7: detected capacity change from 0 to 2048 [ 367.037283][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.7.693'. [ 367.166289][ T8842] veth0_macvtap: entered promiscuous mode [ 367.215742][ T8842] veth1_macvtap: entered promiscuous mode [ 367.260180][ T9143] loop6: detected capacity change from 0 to 8 [ 367.317656][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.326440][ T9143] SQUASHFS error: lzo decompression failed, data probably corrupt [ 367.344732][ T9143] SQUASHFS error: Failed to read block 0x91: -5 [ 367.361913][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.377692][ T9143] SQUASHFS error: Unable to read metadata cache entry [8f] [ 367.389748][ T9143] SQUASHFS error: Unable to read inode 0x11f [ 367.473235][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.500454][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.522157][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.535438][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.547195][ T9143] 9p: Could not find request transport: f [ 367.613776][ T5928] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 367.682275][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.706116][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.758136][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.778502][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.783686][ T5928] usb 8-1: Using ep0 maxpacket: 8 [ 367.792978][ T5928] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.814025][ T5928] usb 8-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.838183][ T5928] usb 8-1: config 1 interface 0 has no altsetting 0 [ 367.858974][ T5928] usb 8-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 367.878419][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.898342][ T5928] usb 8-1: Product: syz [ 367.907262][ T5928] usb 8-1: Manufacturer: syz [ 367.911902][ T5928] usb 8-1: SerialNumber: syz [ 368.007502][ T9155] loop6: detected capacity change from 0 to 32768 [ 368.027963][ T9162] loop8: detected capacity change from 0 to 128 [ 368.038391][ T9155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.694 (9155) [ 368.104878][ T9155] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.117474][ T9162] FAULT_INJECTION: forcing a failure. [ 368.117474][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 368.133736][ T9155] BTRFS info (device loop6): using sha256 checksum algorithm [ 368.154510][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.8.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.154539][ T9162] Tainted: [L]=SOFTLOCKUP [ 368.154545][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.154554][ T9162] Call Trace: [ 368.154562][ T9162] [ 368.154568][ T9162] dump_stack_lvl+0xe8/0x150 [ 368.154597][ T9162] should_fail_ex+0x412/0x560 [ 368.154630][ T9162] should_failslab+0xa8/0x100 [ 368.154661][ T9162] __kmalloc_noprof+0xe8/0x760 [ 368.154680][ T9162] ? tomoyo_encode+0x28b/0x550 [ 368.154703][ T9162] tomoyo_encode+0x28b/0x550 [ 368.154727][ T9162] tomoyo_mount_permission+0x3a2/0x9d0 [ 368.154746][ T9162] ? stack_depot_save_flags+0x33/0x810 [ 368.154762][ T9162] ? terminate_walk+0x3d7/0x510 [ 368.154786][ T9162] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 368.154803][ T9162] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 368.154869][ T9162] security_sb_mount+0xe4/0x320 [ 368.154891][ T9162] path_mount+0xbc/0x10e0 [ 368.154911][ T9162] ? user_path_at+0xd4/0x160 [ 368.154932][ T9162] ? user_path_at+0xd4/0x160 [ 368.154950][ T9162] __se_sys_mount+0x31d/0x420 [ 368.154978][ T9162] ? __pfx___se_sys_mount+0x10/0x10 [ 368.155007][ T9162] ? __x64_sys_mount+0x20/0xc0 [ 368.155033][ T9162] do_syscall_64+0x14d/0xf80 [ 368.155055][ T9162] ? trace_irq_disable+0x3b/0x150 [ 368.155075][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.155093][ T9162] ? clear_bhb_loop+0x40/0x90 [ 368.155112][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.155137][ T9162] RIP: 0033:0x7f5a5699c629 [ 368.155153][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.155165][ T9162] RSP: 002b:00007f5a577ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.155187][ T9162] RAX: ffffffffffffffda RBX: 00007f5a56c15fa0 RCX: 00007f5a5699c629 [ 368.155199][ T9162] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 368.155210][ T9162] RBP: 00007f5a577ba090 R08: 0000000000000000 R09: 0000000000000000 [ 368.155220][ T9162] R10: 0000000001005848 R11: 0000000000000246 R12: 0000000000000001 [ 368.155231][ T9162] R13: 00007f5a56c16038 R14: 00007f5a56c15fa0 R15: 00007ffc0a6573b8 [ 368.155261][ T9162] [ 368.428051][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.484806][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.587493][ T9176] FAULT_INJECTION: forcing a failure. [ 368.587493][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.600140][ T5915] gspca_vc032x: reg_w err -71 [ 368.605358][ T5915] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 368.618799][ T5915] usb 5-1: USB disconnect, device number 19 [ 368.675404][ T9176] CPU: 0 UID: 0 PID: 9176 Comm: syz.3.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.675430][ T9176] Tainted: [L]=SOFTLOCKUP [ 368.675435][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.675444][ T9176] Call Trace: [ 368.675450][ T9176] [ 368.675455][ T9176] dump_stack_lvl+0xe8/0x150 [ 368.675479][ T9176] should_fail_ex+0x412/0x560 [ 368.675502][ T9176] _copy_to_user+0x31/0xb0 [ 368.675520][ T9176] simple_read_from_buffer+0xe1/0x170 [ 368.675542][ T9176] proc_fail_nth_read+0x1bb/0x230 [ 368.675562][ T9176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.675581][ T9176] ? rw_verify_area+0x2a6/0x4d0 [ 368.675594][ T9176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.675612][ T9176] vfs_read+0x20c/0xa70 [ 368.675624][ T9176] ? fdget_pos+0x246/0x320 [ 368.675646][ T9176] ? __pfx___mutex_lock+0x10/0x10 [ 368.675672][ T9176] ? __pfx_vfs_read+0x10/0x10 [ 368.675687][ T9176] ? __fget_files+0x2a/0x420 [ 368.675706][ T9176] ? __fget_files+0x3a0/0x420 [ 368.675723][ T9176] ? __fget_files+0x2a/0x420 [ 368.675746][ T9176] ksys_read+0x150/0x270 [ 368.675761][ T9176] ? __pfx_ksys_read+0x10/0x10 [ 368.675783][ T9176] do_syscall_64+0x14d/0xf80 [ 368.675799][ T9176] ? trace_irq_disable+0x3b/0x150 [ 368.675810][ T9176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.675824][ T9176] ? clear_bhb_loop+0x40/0x90 [ 368.675840][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.675853][ T9176] RIP: 0033:0x7f6cc1d5cece [ 368.675867][ T9176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.675878][ T9176] RSP: 002b:00007f6cc2b7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.675893][ T9176] RAX: ffffffffffffffda RBX: 00007f6cc2b806c0 RCX: 00007f6cc1d5cece [ 368.675903][ T9176] RDX: 000000000000000f RSI: 00007f6cc2b800a0 RDI: 0000000000000004 [ 368.675911][ T9176] RBP: 00007f6cc2b80090 R08: 0000000000000000 R09: 0000000000000000 [ 368.675919][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.675927][ T9176] R13: 00007f6cc2016038 R14: 00007f6cc2015fa0 R15: 00007ffcdbce37c8 [ 368.675948][ T9176] [ 369.006419][ T9155] BTRFS info (device loop6): enabling ssd optimizations [ 369.013443][ T9155] BTRFS info (device loop6): turning on async discard [ 369.021503][ T9155] BTRFS info (device loop6): enabling free space tree [ 370.858432][ T8280] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.906957][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.701'. [ 370.950049][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.977843][ T5928] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input24 [ 371.022069][ T5183] bcm5974 8-1:1.0: could not read from device [ 371.133035][ T5183] bcm5974 8-1:1.0: could not read from device [ 371.151753][ T9201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.163775][ T5928] usb 8-1: USB disconnect, device number 3 [ 371.882363][ T9226] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 371.934502][ T9226] netlink: 'syz.6.708': attribute type 5 has an invalid length. [ 371.954879][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.708'. [ 371.964209][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.708'. [ 372.193594][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 372.394541][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 372.401852][ T5928] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.421071][ T5928] usb 5-1: config 0 has no interface number 0 [ 372.433578][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.473590][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.502770][ T5928] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 372.521824][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.540971][ T5928] usb 5-1: config 0 descriptor?? [ 372.584324][ T1216] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 372.824228][ T1216] usb 7-1: Using ep0 maxpacket: 8 [ 372.829904][ T9230] Bluetooth: MGMT ver 1.23 [ 372.908665][ T1216] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 373.052830][ T1216] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.162107][ T1216] usb 7-1: Product: syz [ 373.188373][ T1216] usb 7-1: Manufacturer: syz [ 373.213414][ T1216] usb 7-1: SerialNumber: syz [ 373.235635][ T1216] usb 7-1: config 0 descriptor?? [ 373.263724][ T1216] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 373.403769][ T5928] uclogic 0003:28BD:0071.0008: pen parameters not found [ 373.410781][ T5928] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 373.529708][ T9260] netlink: 'syz.8.715': attribute type 1 has an invalid length. [ 373.537556][ T9260] netlink: 'syz.8.715': attribute type 3 has an invalid length. [ 373.545404][ T9260] netlink: 224 bytes leftover after parsing attributes in process `syz.8.715'. [ 373.727915][ T5907] usb 5-1: USB disconnect, device number 20 [ 373.793997][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.713'. [ 373.974950][ T1216] gspca_sonixj: reg_r err -110 [ 374.048606][ T1216] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 374.379998][ T9261] bond0: entered promiscuous mode [ 374.461663][ T9265] loop4: detected capacity change from 0 to 512 [ 374.470104][ T9261] bond_slave_0: entered promiscuous mode [ 374.532170][ T9253] delete_channel: no stack [ 374.885264][ T9261] bond_slave_1: entered promiscuous mode [ 374.945251][ T29] audit: type=1326 audit(1771459906.639:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.6.710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c6e39c629 code=0x0 [ 374.969488][ T9261] bond0: left promiscuous mode [ 374.981007][ T9261] bond_slave_0: left promiscuous mode [ 374.993042][ T9265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.051282][ T9261] bond_slave_1: left promiscuous mode [ 375.070365][ T9265] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.222721][ T9277] loop3: detected capacity change from 0 to 512 [ 375.305505][ T9277] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.386848][ T9277] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 375.940599][ T9277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.719: bg 0: block 248: padding at end of block bitmap is not set [ 376.009405][ T9288] netlink: 'syz.7.720': attribute type 5 has an invalid length. [ 376.050703][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.073401][ T9277] loop3: lost filesystem error report for type 5 error -117 [ 376.086592][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.720'. [ 376.093974][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 376.093997][ C1] EXT4-fs (loop3): last error at time 1771459907: ext4_validate_block_bitmap:441 [ 376.120738][ T9289] loop7: detected capacity change from 0 to 16384 [ 376.139095][ T9289] loop8: detected capacity change from 0 to 1024 [ 376.146688][ T9277] Quota error (device loop3): write_blk: dquota write failed [ 376.163746][ T9277] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 376.203657][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.720'. [ 376.212467][ T9277] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.719: Failed to acquire dquot type 1 [ 376.266742][ T9277] loop3: lost filesystem error report for type 5 error -117 [ 376.302734][ T9298] loop4: detected capacity change from 0 to 16 [ 376.311085][ T9277] EXT4-fs (loop3): 1 truncate cleaned up [ 376.371102][ T9277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 376.382993][ T9298] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 376.454664][ T9298] erofs (device loop4): mounted with root inode @ nid 36. [ 376.462121][ T9297] loop7: detected capacity change from 16384 to 0 [ 376.474967][ T9277] bridge0: entered promiscuous mode [ 376.492049][ T9277] bridge0: port 3(macvtap2) entered blocking state [ 376.501223][ C1] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 376.533086][ T9277] bridge0: port 3(macvtap2) entered disabled state [ 376.554148][ T9277] macvtap2: entered allmulticast mode [ 376.570061][ T9277] bridge0: entered allmulticast mode [ 376.656802][ T9277] macvtap2: left allmulticast mode [ 376.883646][ T54] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 377.594159][ T9277] bridge0: left allmulticast mode [ 377.601614][ T9298] bio_check_eod: 176 callbacks suppressed [ 377.601628][ T9298] syz.4.722: attempt to access beyond end of device [ 377.601628][ T9298] loop4: rw=0, sector=301994239, nr_sectors = 1 limit=16 [ 377.622802][ T9298] erofs (device loop4): read error -5 @ 0 of nid 36 [ 377.694132][ T9309] syz.4.722: attempt to access beyond end of device [ 377.694132][ T9309] loop4: rw=0, sector=301994239, nr_sectors = 1 limit=16 [ 377.712715][ T9277] bridge0: left promiscuous mode [ 377.718388][ T5947] usb 7-1: USB disconnect, device number 3 [ 377.737270][ T9309] erofs (device loop4): read error -5 @ 0 of nid 36 [ 377.746674][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 377.749228][ T54] usb 4-1: config 1 has an invalid interface number: 130 but max is 2 [ 377.749254][ T54] usb 4-1: config 1 has an invalid interface number: 153 but max is 2 [ 377.749274][ T54] usb 4-1: config 1 has an invalid interface number: 249 but max is 2 [ 377.749294][ T54] usb 4-1: config 1 has no interface number 0 [ 377.749309][ T54] usb 4-1: config 1 has no interface number 1 [ 377.749324][ T54] usb 4-1: config 1 has no interface number 2 [ 377.749393][ T54] usb 4-1: config 1 interface 249 altsetting 72 bulk endpoint 0x2 has invalid maxpacket 64 [ 377.749417][ T54] usb 4-1: config 1 interface 249 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 377.749438][ T54] usb 4-1: config 1 interface 249 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 377.749459][ T54] usb 4-1: config 1 interface 249 altsetting 72 bulk endpoint 0xA has invalid maxpacket 1015 [ 377.749484][ T54] usb 4-1: config 1 interface 249 altsetting 72 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 377.749509][ T54] usb 4-1: config 1 interface 249 altsetting 72 endpoint 0xD has invalid wMaxPacketSize 0 [ 377.749532][ T54] usb 4-1: config 1 interface 249 altsetting 72 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 377.749558][ T54] usb 4-1: config 1 interface 130 has no altsetting 0 [ 377.749575][ T54] usb 4-1: config 1 interface 153 has no altsetting 0 [ 377.749592][ T54] usb 4-1: config 1 interface 249 has no altsetting 0 [ 377.751478][ T54] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01ed, bcdDevice=a8.77 [ 377.751504][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.751524][ T54] usb 4-1: Product: syz [ 377.751537][ T54] usb 4-1: Manufacturer: 㑞횯î½á¤›ê•¦â¦¦é ­ï‚§î¨˜á³ºã¨€á­¶ã¹¼æ„¡ê—«ç€žæ·è„à­©ëƒíŠ·ê¹³ë¶©í€¿ç™·ï»á™“料뉟Ჽ䵭꿕éºä­°ï‹ˆïˆ â¢“ﲒⴡꈯႽ㡣솾낾㠟瞺垆푦눴᣸କળḊæ·á¿¯ãƒ‹à°é»šçŒªæ¨é¸²â­¤áá¢è“©ìï“䭗钡㊓噗à«ïž‹åº€î‰¶ë¹‹î¡ ä—¨è¯¢ç§‘î³ ä³½å¤ì€…彅藈蘆 [ 377.751564][ T54] usb 4-1: SerialNumber: syz [ 377.900824][ T9318] loop6: detected capacity change from 0 to 64 [ 377.917249][ T9318] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 377.917686][ T9319] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 377.935479][ T9298] syz.4.722: attempt to access beyond end of device [ 377.935479][ T9298] loop4: rw=0, sector=301994239, nr_sectors = 1 limit=16 [ 377.935851][ T9298] erofs (device loop4): read error -5 @ 0 of nid 36 [ 378.530942][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.531277][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.840916][ T54] ftdi_sio 4-1:1.130: FTDI USB Serial Device converter detected [ 379.897601][ T54] ftdi_sio ttyUSB0: unknown device type: 0xa877 [ 379.988299][ T54] ftdi_sio 4-1:1.153: FTDI USB Serial Device converter detected [ 380.041969][ T54] ftdi_sio ttyUSB1: unknown device type: 0xa877 [ 380.844618][ T54] ftdi_sio 4-1:1.249: FTDI USB Serial Device converter detected [ 380.853149][ T54] ftdi_sio ttyUSB2: unknown device type: 0xa877 [ 380.895430][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 380.906491][ T48] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 381.073736][ T48] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 1 [ 381.075108][ T54] usb 4-1: USB disconnect, device number 22 [ 381.263067][ T48] loop3: lost filesystem error report for type 5 error -117 [ 381.578558][ T54] ftdi_sio 4-1:1.130: device disconnected [ 381.594532][ T54] ftdi_sio 4-1:1.153: device disconnected [ 381.607971][ T54] ftdi_sio 4-1:1.249: device disconnected [ 381.739762][ T9350] netlink: 'syz.8.728': attribute type 1 has an invalid length. [ 381.747781][ T9350] netlink: 'syz.8.728': attribute type 3 has an invalid length. [ 381.755594][ T9350] netlink: 224 bytes leftover after parsing attributes in process `syz.8.728'. [ 382.566334][ T9348] loop7: detected capacity change from 0 to 512 [ 382.707328][ T9354] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 382.724079][ T9354] netlink: 'syz.3.733': attribute type 5 has an invalid length. [ 382.776673][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 382.786259][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 383.745262][ T9376] process 'syz.3.741' launched '/dev/fd/5' with NULL argv: empty string added [ 383.770584][ T9375] loop6: detected capacity change from 0 to 512 [ 383.806601][ T9376] FAULT_INJECTION: forcing a failure. [ 383.806601][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 383.834310][ T9375] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 383.855330][ T9376] CPU: 1 UID: 0 PID: 9376 Comm: syz.3.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.855357][ T9376] Tainted: [L]=SOFTLOCKUP [ 383.855364][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.855374][ T9376] Call Trace: [ 383.855381][ T9376] [ 383.855388][ T9376] dump_stack_lvl+0xe8/0x150 [ 383.855419][ T9376] should_fail_ex+0x412/0x560 [ 383.855448][ T9376] ? __d_alloc+0x37/0x6f0 [ 383.855466][ T9376] should_failslab+0xa8/0x100 [ 383.855488][ T9376] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 383.855504][ T9376] ? __lock_acquire+0x6b5/0x2cf0 [ 383.855534][ T9376] __d_alloc+0x37/0x6f0 [ 383.855555][ T9376] ? __lock_acquire+0x6b5/0x2cf0 [ 383.855580][ T9376] d_alloc_parallel+0xe6/0x1610 [ 383.855604][ T9376] ? __d_lookup+0x66/0x780 [ 383.855628][ T9376] ? __d_lookup+0x66/0x780 [ 383.855649][ T9376] ? __pfx_d_alloc_parallel+0x10/0x10 [ 383.855665][ T9376] ? d_lookup+0x1f/0xa0 [ 383.855691][ T9376] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 383.855725][ T9376] path_openat+0xca8/0x3860 [ 383.855766][ T9376] ? __pfx_stack_trace_save+0x10/0x10 [ 383.855802][ T9376] ? __pfx_path_openat+0x10/0x10 [ 383.855818][ T9376] ? __x64_sys_openat+0x138/0x170 [ 383.855849][ T9376] ? __lock_acquire+0x6b5/0x2cf0 [ 383.855877][ T9376] do_file_open+0x23e/0x4a0 [ 383.855902][ T9376] ? __pfx_do_file_open+0x10/0x10 [ 383.855942][ T9376] ? _raw_spin_unlock+0x28/0x50 [ 383.855962][ T9376] ? alloc_fd+0x64b/0x6c0 [ 383.855996][ T9376] do_sys_openat2+0x113/0x200 [ 383.856023][ T9376] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.856047][ T9376] ? ksys_write+0x242/0x270 [ 383.856067][ T9376] ? __pfx_ksys_write+0x10/0x10 [ 383.856094][ T9376] __x64_sys_openat+0x138/0x170 [ 383.856126][ T9376] do_syscall_64+0x14d/0xf80 [ 383.856152][ T9376] ? trace_irq_disable+0x3b/0x150 [ 383.856168][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.856186][ T9376] ? clear_bhb_loop+0x40/0x90 [ 383.856207][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.856224][ T9376] RIP: 0033:0x7f6cc1d9c629 [ 383.856241][ T9376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.856256][ T9376] RSP: 002b:00007f6cc2b80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.856274][ T9376] RAX: ffffffffffffffda RBX: 00007f6cc2015fa0 RCX: 00007f6cc1d9c629 [ 383.856287][ T9376] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 383.856299][ T9376] RBP: 00007f6cc2b80090 R08: 0000000000000000 R09: 0000000000000000 [ 383.856309][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.856320][ T9376] R13: 00007f6cc2016038 R14: 00007f6cc2015fa0 R15: 00007ffcdbce37c8 [ 383.856350][ T9376] [ 384.644558][ T9379] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 386.200204][ T9386] loop8: detected capacity change from 0 to 40427 [ 386.229619][ T9386] F2FS-fs (loop8): invalid crc value [ 386.294633][ T9386] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 386.331746][ T9386] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 386.661857][ T9404] loop4: detected capacity change from 0 to 1024 [ 386.866052][ T9404] loop7: detected capacity change from 512 to 0 [ 387.319933][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.330833][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.340048][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.363948][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.384080][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.682923][ T9418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.701891][ T9423] syz.4.750 (9423): attempted to duplicate a private mapping with mremap. This is not supported. [ 387.818336][ T9418] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 387.835303][ T9428] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.743'. [ 387.837623][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 388.050728][ T9418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.057966][ T9418] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 388.113591][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 388.486811][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.497055][ T9418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.502981][ T9418] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 388.512268][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.520294][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 388.545955][ T9414] bridge_slave_0: entered allmulticast mode [ 388.565047][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 388.584102][ T9414] bridge_slave_0: entered promiscuous mode [ 388.605979][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.621415][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.640955][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.650795][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.664088][ T9414] bridge_slave_1: entered allmulticast mode [ 388.681153][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 388.691992][ T9414] bridge_slave_1: entered promiscuous mode [ 388.700111][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 388.730528][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 388.756736][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.784427][ T5928] usb 4-1: config 0 descriptor?? [ 388.802155][ T5928] hub 4-1:0.0: bad descriptor, ignoring hub [ 388.810265][ T5928] hub 4-1:0.0: probe with driver hub failed with error -5 [ 388.818211][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.908495][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.931274][ T50] Bluetooth: hci5: urb ffff88801db1ad00 submission failed (90) [ 388.982719][ T9447] loop6: detected capacity change from 0 to 16 [ 389.145882][ T9414] team0: Port device team_slave_0 added [ 389.175508][ T9414] team0: Port device team_slave_1 added [ 389.189185][ T9447] erofs (device loop6): mounted with root inode @ nid 36. [ 389.274284][ T9447] erofs (device loop6): bogus i_mode (4355) @ nid 46 [ 389.282528][ T9447] 9p: Bad value for 'rfdno' [ 389.323848][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.332063][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.369269][ T5928] usb 4-1: USB disconnect, device number 23 [ 389.421498][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.424325][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.485541][ T9450] netlink: 'syz.6.752': attribute type 6 has an invalid length. [ 389.523118][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.613576][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.700945][ T9453] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 389.724621][ T9453] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.912333][ T9414] hsr_slave_0: entered promiscuous mode [ 389.930210][ T9414] hsr_slave_1: entered promiscuous mode [ 389.964809][ T9414] debugfs: 'hsr0' already exists in 'hsr' [ 389.970572][ T9414] Cannot create hsr debugfs directory [ 390.284105][ T9463] FAULT_INJECTION: forcing a failure. [ 390.284105][ T9463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.297386][ T9463] CPU: 1 UID: 0 PID: 9463 Comm: syz.3.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.297415][ T9463] Tainted: [L]=SOFTLOCKUP [ 390.297421][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.297433][ T9463] Call Trace: [ 390.297440][ T9463] [ 390.297447][ T9463] dump_stack_lvl+0xe8/0x150 [ 390.297477][ T9463] should_fail_ex+0x412/0x560 [ 390.297508][ T9463] _copy_from_user+0x2d/0xb0 [ 390.297530][ T9463] btf_new_fd+0x352/0xd10 [ 390.297557][ T9463] ? __pfx_btf_new_fd+0x10/0x10 [ 390.297577][ T9463] ? bpf_token_put+0x143/0x160 [ 390.297598][ T9463] ? bpf_btf_load+0x126/0x190 [ 390.297618][ T9463] __sys_bpf+0x4e5/0x950 [ 390.297637][ T9463] ? __pfx___sys_bpf+0x10/0x10 [ 390.297682][ T9463] __x64_sys_bpf+0x7c/0x90 [ 390.297706][ T9463] do_syscall_64+0x14d/0xf80 [ 390.297729][ T9463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.297747][ T9463] ? clear_bhb_loop+0x40/0x90 [ 390.297769][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.297786][ T9463] RIP: 0033:0x7f6cc1d9c629 [ 390.297803][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.297817][ T9463] RSP: 002b:00007f6cbffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.297836][ T9463] RAX: ffffffffffffffda RBX: 00007f6cc2016180 RCX: 00007f6cc1d9c629 [ 390.297849][ T9463] RDX: 0000000000000028 RSI: 0000200000000900 RDI: 0000000000000012 [ 390.297861][ T9463] RBP: 00007f6cbffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 390.297872][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.297883][ T9463] R13: 00007f6cc2016218 R14: 00007f6cc2016180 R15: 00007ffcdbce37c8 [ 390.297912][ T9463] [ 390.572527][ T9455] loop8: detected capacity change from 0 to 64 [ 390.685142][ T9455] hfs: Unknown parameter '1' [ 391.244666][ T9470] netlink: 'syz.3.758': attribute type 3 has an invalid length. [ 391.394100][ T9455] ipvlan2: entered promiscuous mode [ 392.452419][ T9480] loop8: detected capacity change from 0 to 2048 [ 392.497068][ T9482] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.574636][ T9480] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 392.584870][ T9414] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 392.607479][ T9414] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 392.678769][ T9414] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 392.707521][ T9414] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 392.720354][ T9480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.774059][ T5928] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 392.816996][ T9467] loop4: detected capacity change from 0 to 40427 [ 392.927509][ T9467] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 392.956698][ T5928] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 392.983954][ T9467] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 393.008204][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 393.037920][ T9467] F2FS-fs (loop4): invalid crc value [ 393.041308][ T5928] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.073137][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 393.093143][ T5928] usb 7-1: Product: syz [ 393.103125][ T5928] usb 7-1: Manufacturer: syz [ 393.146007][ T9502] loop3: detected capacity change from 0 to 512 [ 393.154286][ T5928] usb 7-1: SerialNumber: syz [ 393.187295][ T5928] usb 7-1: config 0 descriptor?? [ 393.198183][ T5928] usb 7-1: selecting invalid altsetting 0 [ 393.228723][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.309919][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.330618][ T9467] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 393.359083][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.366339][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.387380][ T9467] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.397296][ T9467] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.419646][ T5907] usb 7-1: USB disconnect, device number 4 [ 393.435241][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.442367][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.682651][ T9508] loop8: detected capacity change from 0 to 32768 [ 393.695165][ T9508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.767 (9508) [ 393.727550][ T9508] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 393.739130][ T9508] BTRFS info (device loop8): using sha256 checksum algorithm [ 394.126070][ T9508] BTRFS info (device loop8): enabling ssd optimizations [ 394.133125][ T9508] BTRFS info (device loop8): turning on async discard [ 394.143302][ T9508] BTRFS info (device loop8): enabling free space tree [ 394.526446][ T9531] loop6: detected capacity change from 0 to 1024 [ 394.584961][ T9531] EXT4-fs: Ignoring removed orlov option [ 394.666327][ T9531] EXT4-fs: inline encryption not supported [ 394.699151][ T8842] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 394.809457][ T9531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.769687][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.829903][ T1159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.823112][ T9555] random: crng reseeded on system resumption [ 398.065483][ T1159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.648319][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.680754][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.690250][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.700054][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.707880][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.722280][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.741331][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.750500][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.753963][ T9565] loop8: detected capacity change from 0 to 32768 [ 398.757723][ T9437] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 398.771923][ T9565] Mount JFS Failure: -22 [ 398.776614][ T9565] jfs_mount failed w/return code = -22 [ 398.814517][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.823351][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.902189][ T1159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.940481][ T9437] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 398.954915][ T9437] usb 5-1: config 0 has no interface number 0 [ 398.971369][ T9437] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 398.993861][ T9437] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 399.017490][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.024437][ T9437] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 399.024471][ T9437] usb 5-1: config 0 interface 2 has no altsetting 0 [ 399.026698][ T9437] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 399.154219][ T9437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.162367][ T9437] usb 5-1: Product: syz [ 399.167071][ T9437] usb 5-1: Manufacturer: syz [ 399.171726][ T9437] usb 5-1: SerialNumber: syz [ 399.179571][ T9437] usb 5-1: config 0 descriptor?? [ 399.185412][ T9561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.192743][ T9561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.230011][ T1159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.542398][ T9437] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.822781][ T1159] bridge_slave_1: left allmulticast mode [ 399.831284][ T1159] bridge_slave_1: left promiscuous mode [ 399.843849][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.860172][ T1159] bridge_slave_0: left allmulticast mode [ 399.870453][ T1159] bridge_slave_0: left promiscuous mode [ 399.876397][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.906671][ T9437] usb 5-1: USB disconnect, device number 21 [ 400.023086][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.037336][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.049518][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.062396][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.070835][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.084898][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.799098][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.831754][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.853441][ T1159] bond0 (unregistering): Released all slaves [ 400.864560][ T50] Bluetooth: hci2: command tx timeout [ 400.878690][ T1159] bond1 (unregistering): Released all slaves [ 400.904863][ T9604] loop8: detected capacity change from 0 to 256 [ 400.909364][ T9563] chnl_net:caif_netlink_parms(): no params data found [ 400.912121][ T9604] exfat: Deprecated parameter 'utf8' [ 400.929230][ T9604] exfat: Deprecated parameter 'namecase' [ 401.026800][ T9604] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 401.425184][ T9414] veth0_vlan: entered promiscuous mode [ 401.703115][ T9624] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 401.730439][ T1159] hsr_slave_0: left promiscuous mode [ 401.766293][ T1159] hsr_slave_1: left promiscuous mode [ 401.782598][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.794027][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.816778][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.829262][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.843336][ T1159] batadv_slave_0: left promiscuous mode [ 401.849205][ T1159] veth1_macvtap: left promiscuous mode [ 401.854758][ T1159] veth0_macvtap: left promiscuous mode [ 401.860338][ T1159] veth1_vlan: left promiscuous mode [ 401.866365][ T1159] veth0_vlan: left promiscuous mode [ 401.994581][ T54] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 402.097141][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 402.112561][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 402.173282][ T54] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 402.183026][ T54] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 402.194571][ T54] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.207602][ T54] usb 9-1: string descriptor 0 read error: -22 [ 402.214276][ T54] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.215294][ T50] Bluetooth: hci4: command tx timeout [ 402.223371][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.247847][ T54] usb 9-1: 0:2 : does not exist [ 402.295247][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.310370][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.327939][ T9563] bridge_slave_0: entered allmulticast mode [ 402.350637][ T9563] bridge_slave_0: entered promiscuous mode [ 402.390319][ T9624] bond1: entered promiscuous mode [ 402.395940][ T9624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.413172][ T9628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.422794][ T9628] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 402.433606][ T9628] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 402.448237][ T9628] bond1: (slave vti0): making interface the new active one [ 402.451646][ T5915] usb 9-1: USB disconnect, device number 2 [ 402.457221][ T9628] vti0: entered promiscuous mode [ 402.473034][ T9628] bond1: (slave vti0): Enslaving as an active interface with an up link [ 402.536724][ T9414] veth1_vlan: entered promiscuous mode [ 402.549973][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.569151][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.577355][ T9563] bridge_slave_1: entered allmulticast mode [ 402.585844][ T9563] bridge_slave_1: entered promiscuous mode [ 402.739008][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.782060][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.823709][ T9437] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 402.894500][ T9563] team0: Port device team_slave_0 added [ 402.926257][ T9563] team0: Port device team_slave_1 added [ 402.934063][ T50] Bluetooth: hci2: command tx timeout [ 402.940730][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 402.996690][ T9437] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 403.020571][ T9437] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 403.029391][ T9437] usb 5-1: config 0 has no interface number 0 [ 403.035716][ T9437] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 403.037011][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.048187][ T9437] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.062885][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.062916][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.065691][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.113129][ T9437] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 403.123067][ T9437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.133622][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.159978][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.174564][ T9437] usb 5-1: config 0 descriptor?? [ 403.280121][ T1159] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.368593][ T9414] veth0_macvtap: entered promiscuous mode [ 403.404291][ T9437] usb 5-1: USB disconnect, device number 22 [ 403.527523][ T1159] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.006342][ T9414] veth1_macvtap: entered promiscuous mode [ 404.138246][ T1159] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.203911][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.212793][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.220636][ T9594] bridge_slave_0: entered allmulticast mode [ 404.229241][ T9594] bridge_slave_0: entered promiscuous mode [ 404.242482][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 404.295397][ T50] Bluetooth: hci4: command tx timeout [ 404.455808][ T9563] hsr_slave_0: entered promiscuous mode [ 404.470271][ T9563] hsr_slave_1: entered promiscuous mode [ 404.485869][ T9563] debugfs: 'hsr0' already exists in 'hsr' [ 404.491638][ T9563] Cannot create hsr debugfs directory [ 404.554370][ T1159] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.582856][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.600465][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.622250][ T9594] bridge_slave_1: entered allmulticast mode [ 404.630624][ T9594] bridge_slave_1: entered promiscuous mode [ 404.663790][ T1216] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 404.728409][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.782775][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.821684][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.830920][ T1216] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 404.845127][ T1216] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.865238][ T1216] usb 9-1: config 0 descriptor?? [ 404.883097][ T1216] cp210x 9-1:0.0: cp210x converter detected [ 404.960411][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.043681][ T50] Bluetooth: hci2: command tx timeout [ 405.082108][ T9594] team0: Port device team_slave_0 added [ 405.130292][ T9594] team0: Port device team_slave_1 added [ 405.181797][ T65] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.266614][ T65] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.293680][ T65] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.320061][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.328591][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.355986][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.369978][ T1216] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 405.382041][ T1159] bridge_slave_1: left allmulticast mode [ 405.399873][ T1159] bridge_slave_1: left promiscuous mode [ 405.407663][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.412057][ T1216] usb 9-1: cp210x converter now attached to ttyUSB0 [ 405.451620][ T1159] bridge_slave_0: left allmulticast mode [ 405.464533][ T1159] bridge_slave_0: left promiscuous mode [ 405.470418][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.980557][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.013174][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.036097][ T1159] bond0 (unregistering): Released all slaves [ 406.048271][ T9677] loop8: detected capacity change from 0 to 32768 [ 406.060775][ T9677] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.794 (9677) [ 406.093716][ T1003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.119944][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.137041][ T9677] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 406.153557][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.164014][ T9677] BTRFS info (device loop8): using crc32c checksum algorithm [ 406.191588][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.207483][ T9677] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 406.270475][ T1159] IPVS: stopping backup sync thread 9083 ... [ 406.374546][ T50] Bluetooth: hci4: command tx timeout [ 406.392310][ T9677] BTRFS info (device loop8): rebuilding free space tree [ 406.447114][ T9677] BTRFS info (device loop8): disabling free space tree [ 406.454675][ T9677] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 406.466315][ T9677] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 406.498043][ T9677] BTRFS info (device loop8): enabling ssd optimizations [ 406.507770][ T9677] BTRFS info (device loop8): turning on async discard [ 406.518548][ T9677] BTRFS info (device loop8): enabling disk space caching [ 406.529280][ T9677] BTRFS info (device loop8): force clearing of disk cache [ 406.536910][ T9677] BTRFS info (device loop8): use zstd compression, level 3 [ 406.605858][ T9594] hsr_slave_0: entered promiscuous mode [ 406.612981][ T1216] usb 9-1: USB disconnect, device number 3 [ 406.632995][ T1216] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 406.633265][ T9594] hsr_slave_1: entered promiscuous mode [ 406.649445][ T9437] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 406.657936][ T1216] cp210x 9-1:0.0: device disconnected [ 406.679106][ T9594] debugfs: 'hsr0' already exists in 'hsr' [ 406.685275][ T9594] Cannot create hsr debugfs directory [ 406.824879][ T9437] usb 5-1: Using ep0 maxpacket: 16 [ 406.835666][ T9437] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 406.853315][ T9437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.890880][ T9437] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.903882][ T9437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.912626][ T9437] usb 5-1: Product: syz [ 406.917866][ T9437] usb 5-1: Manufacturer: syz [ 406.922469][ T9437] usb 5-1: SerialNumber: syz [ 406.925129][ T9437] usb 5-1: config 0 descriptor?? [ 406.930194][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.939372][ T9437] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.951582][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.955484][ T9437] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 407.078167][ T1159] hsr_slave_0: left promiscuous mode [ 407.084176][ T1159] hsr_slave_1: left promiscuous mode [ 407.090075][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.098143][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.098960][ T50] Bluetooth: hci2: command tx timeout [ 407.118683][ T1159] veth1_macvtap: left promiscuous mode [ 407.125525][ T1159] veth0_macvtap: left promiscuous mode [ 407.136978][ T1159] veth1_vlan: left promiscuous mode [ 407.142563][ T1159] veth0_vlan: left promiscuous mode [ 407.169781][ T8842] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 407.531418][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 407.557520][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 407.575165][ T9437] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 407.588078][ T9437] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 407.598033][ T9437] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 407.606194][ T9437] em28xx 5-1:0.0: No AC97 audio processor [ 407.757186][ T350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.775812][ T350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.318152][ T9741] netlink: 'syz.9.746': attribute type 1 has an invalid length. [ 408.325976][ T9741] netlink: 'syz.9.746': attribute type 3 has an invalid length. [ 408.333687][ T9741] netlink: 224 bytes leftover after parsing attributes in process `syz.9.746'. [ 408.519370][ T50] Bluetooth: hci4: command tx timeout [ 410.340857][ T54] usb 5-1: USB disconnect, device number 23 [ 410.364396][ T54] em28xx 5-1:0.0: Disconnecting em28xx [ 410.395510][ T9437] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 410.444970][ T54] em28xx 5-1:0.0: Freeing device [ 410.499878][ T9563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.520147][ T9563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.542384][ T9563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.624698][ T9437] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 410.654427][ T9437] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.680685][ T9437] usb 9-1: Product: syz [ 410.688139][ T9563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.694136][ T9437] usb 9-1: Manufacturer: syz [ 410.706407][ T9437] usb 9-1: SerialNumber: syz [ 410.727208][ T9437] usb 9-1: config 0 descriptor?? [ 410.763644][ T9437] hub 9-1:0.0: bad descriptor, ignoring hub [ 410.790761][ T9437] hub 9-1:0.0: probe with driver hub failed with error -5 [ 410.961516][ T9437] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 411.023041][ T9437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.069998][ T9437] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 411.113746][ T9437] usb 9-1: media controller created [ 411.162767][ T9743] dib0700: tx buffer length is larger than 4. Not supported. [ 411.205234][ T9437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.867453][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.914479][ T9594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.001012][ T9563] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.029155][ T9594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.087228][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.094374][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.113354][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.120473][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.146023][ T9437] DVB: Unable to find symbol dib7000p_attach() [ 414.147327][ T9594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.152250][ T9437] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 414.231687][ T9594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.424696][ T9437] rc_core: IR keymap rc-dib0700-rc5 not found [ 414.441249][ T9437] Registered IR keymap rc-empty [ 414.445772][ T5915] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 414.450492][ T9437] dvb-usb: could not initialize remote control. [ 414.460593][ T9437] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 414.496519][ T9437] usb 9-1: USB disconnect, device number 4 [ 414.615679][ T5915] usb 10-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 414.643630][ T5915] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.663651][ T5915] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.705282][ T5915] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 414.724529][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.740617][ T9437] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 414.749619][ T5915] usb 10-1: config 0 interface 0 has no altsetting 0 [ 414.788223][ T5915] usb 10-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 414.813253][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.825855][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.855689][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.862871][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.876954][ T5915] usb 10-1: config 0 descriptor?? [ 414.940548][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.947781][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.337477][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.533124][ T9563] veth0_vlan: entered promiscuous mode [ 415.538796][ T5915] usb 10-1: string descriptor 0 read error: -71 [ 415.562537][ T5915] uclogic 0003:5543:0081.0009: failed retrieving string descriptor #200: -71 [ 415.591980][ T5915] uclogic 0003:5543:0081.0009: failed retrieving pen parameters: -71 [ 415.606628][ T9563] veth1_vlan: entered promiscuous mode [ 415.623217][ T5915] uclogic 0003:5543:0081.0009: failed probing pen v2 parameters: -71 [ 415.625278][ T9818] loop4: detected capacity change from 0 to 64 [ 415.645971][ T5915] uclogic 0003:5543:0081.0009: failed probing parameters: -71 [ 415.680498][ T5915] uclogic 0003:5543:0081.0009: probe with driver uclogic failed with error -71 [ 415.694385][ T9818] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 415.720024][ T5915] usb 10-1: USB disconnect, device number 2 [ 415.730376][ T9818] MINIX-fs: bad superblock [ 415.760359][ T9563] veth0_macvtap: entered promiscuous mode [ 415.803242][ T9563] veth1_macvtap: entered promiscuous mode [ 415.860213][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.892668][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.920891][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.935374][ T9823] loop4: detected capacity change from 0 to 256 [ 415.960990][ T9823] exfat: Deprecated parameter 'utf8' [ 415.981549][ T9823] exfat: Deprecated parameter 'namecase' [ 415.992829][ T6923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.012374][ T9823] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 416.034315][ T6923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.064938][ T6923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.085835][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.231972][ T9594] veth0_vlan: entered promiscuous mode [ 416.285553][ T9594] veth1_vlan: entered promiscuous mode [ 416.338473][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.367562][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.379623][ T9594] veth0_macvtap: entered promiscuous mode [ 416.389498][ T1159] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9 [ 416.394227][ T9594] veth1_macvtap: entered promiscuous mode [ 417.079936][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.222007][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.281561][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.323079][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.377352][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.402285][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.476683][ T9842] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 418.511201][ T9842] netlink: 'syz.4.808': attribute type 3 has an invalid length. [ 418.523760][ T9842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.808'. [ 418.543184][ T6923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.561163][ T6923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.680335][ T9853] loop4: detected capacity change from 0 to 256 [ 419.026104][ T9853] FAT-fs (loop4): Directory bread(block 64) failed [ 419.035442][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.059219][ T9853] FAT-fs (loop4): Directory bread(block 65) failed [ 419.067056][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.109344][ T9853] FAT-fs (loop4): Directory bread(block 66) failed [ 419.120833][ T9864] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.227216][ T9853] FAT-fs (loop4): Directory bread(block 67) failed [ 419.419470][ T9853] FAT-fs (loop4): Directory bread(block 68) failed [ 419.514104][ T9853] FAT-fs (loop4): Directory bread(block 69) failed [ 419.553023][ T9853] FAT-fs (loop4): Directory bread(block 70) failed [ 419.583846][ T6923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.596331][ T6923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.612793][ T9853] FAT-fs (loop4): Directory bread(block 71) failed [ 419.644409][ T9866] loop1: detected capacity change from 0 to 1024 [ 419.685387][ T9853] FAT-fs (loop4): Directory bread(block 72) failed [ 419.691938][ T9853] FAT-fs (loop4): Directory bread(block 73) failed [ 420.243145][ T9876] hfsplus: found bad thread record in catalog [ 420.640457][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 420.661342][ T1216] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 420.712929][ T9880] comedi comedi3: comedi_config --init_data is deprecated [ 421.121660][ T1159] hfsplus: b-tree write err: -5, ino 25 [ 421.142977][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 421.158839][ T1159] hfsplus: b-tree write err: -5, ino 2 [ 421.265077][ T1216] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 421.316595][ T1216] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 421.391882][ T1216] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 421.431727][ T1216] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.468295][ T1216] usb 9-1: Product: syz [ 421.472499][ T1216] usb 9-1: Manufacturer: syz [ 421.903540][ T1216] usb 9-1: SerialNumber: syz [ 421.934152][ T1216] usb 9-1: config 0 descriptor?? [ 422.067115][ T9872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 422.097448][ T9872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 422.444573][ T9872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 422.451787][ T9872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 422.472318][ T9895] binder: 9893:9895 ioctl 4018620d 0 returned -22 [ 422.756676][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 423.206945][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 423.294134][ T9902] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 423.358498][ T9902] UDF-fs: Scanning with blocksize 512 failed [ 423.439977][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 423.493894][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 423.579382][ T9902] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 423.613726][ T9919] netlink: 'syz.9.820': attribute type 1 has an invalid length. [ 423.621499][ T9919] netlink: 'syz.9.820': attribute type 3 has an invalid length. [ 423.629394][ T9919] netlink: 224 bytes leftover after parsing attributes in process `syz.9.820'. [ 423.711349][ T9902] UDF-fs: Scanning with blocksize 1024 failed [ 423.754902][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 423.792724][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 423.825162][ T9902] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 424.011345][ T9902] UDF-fs: Scanning with blocksize 2048 failed [ 424.020119][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 424.145328][ T9902] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 424.424145][ T9902] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 424.431894][ T9902] UDF-fs: Scanning with blocksize 4096 failed [ 424.458768][ T9902] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 425.324888][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.9.822'. [ 425.376693][ T1216] Error reading MAC address [ 425.387949][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.822'. [ 425.412897][ T1216] usb 9-1: USB disconnect, device number 5 [ 426.886785][ T9945] FAULT_INJECTION: forcing a failure. [ 426.886785][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.965231][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.8.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.965258][ T9945] Tainted: [L]=SOFTLOCKUP [ 426.965264][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.965274][ T9945] Call Trace: [ 426.965282][ T9945] [ 426.965289][ T9945] dump_stack_lvl+0xe8/0x150 [ 426.965317][ T9945] should_fail_ex+0x412/0x560 [ 426.965344][ T9945] _copy_to_user+0x31/0xb0 [ 426.965366][ T9945] simple_read_from_buffer+0xe1/0x170 [ 426.965394][ T9945] proc_fail_nth_read+0x1bb/0x230 [ 426.965421][ T9945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.965447][ T9945] ? rw_verify_area+0x2a6/0x4d0 [ 426.965465][ T9945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.965491][ T9945] vfs_read+0x20c/0xa70 [ 426.965508][ T9945] ? fdget_pos+0x246/0x320 [ 426.965535][ T9945] ? __pfx___mutex_lock+0x10/0x10 [ 426.965558][ T9945] ? __pfx_vfs_read+0x10/0x10 [ 426.965577][ T9945] ? __fget_files+0x2a/0x420 [ 426.965604][ T9945] ? __fget_files+0x3a0/0x420 [ 426.965626][ T9945] ? __fget_files+0x2a/0x420 [ 426.965657][ T9945] ksys_read+0x150/0x270 [ 426.965677][ T9945] ? __pfx_ksys_read+0x10/0x10 [ 426.965693][ T9945] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 426.965721][ T9945] do_syscall_64+0x14d/0xf80 [ 426.965743][ T9945] ? trace_irq_disable+0x3b/0x150 [ 426.965759][ T9945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.965780][ T9945] ? clear_bhb_loop+0x40/0x90 [ 426.965802][ T9945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.965820][ T9945] RIP: 0033:0x7f5a5695cece [ 426.965836][ T9945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.965849][ T9945] RSP: 002b:00007f5a577b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.965869][ T9945] RAX: ffffffffffffffda RBX: 00007f5a577ba6c0 RCX: 00007f5a5695cece [ 426.965882][ T9945] RDX: 000000000000000f RSI: 00007f5a577ba0a0 RDI: 0000000000000006 [ 426.965893][ T9945] RBP: 00007f5a577ba090 R08: 0000000000000000 R09: 0000000000000000 [ 426.965903][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.965913][ T9945] R13: 00007f5a56c16038 R14: 00007f5a56c15fa0 R15: 00007ffc0a6573b8 [ 426.965942][ T9945] [ 427.267006][ T9956] loop1: detected capacity change from 0 to 1024 [ 427.300786][ T9957] BUG: Bad page state in process syz.9.829 pfn:44ae6 [ 427.307634][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44ae6 [ 427.316466][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 427.323627][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 427.332255][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 427.340892][ T9957] page dumped because: page_pool leak [ 427.346318][ T9957] page_owner tracks the page as allocated [ 427.352429][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300644094, free_ts 426716530037 [ 427.370917][ T9957] post_alloc_hook+0x231/0x280 [ 427.373612][ T9956] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 427.375714][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 427.391273][ T9956] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 427.392116][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 427.407516][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 427.413022][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 427.418752][ T9956] JBD2: no valid journal superblock found [ 427.419141][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 427.429671][ T9957] do_xdp_generic+0x76b/0x12e0 [ 427.434465][ T9957] tun_get_user+0x247d/0x3dd0 [ 427.439152][ T9957] tun_chr_write_iter+0x113/0x210 [ 427.444225][ T9957] vfs_write+0x61d/0xb90 [ 427.448475][ T9957] ksys_write+0x150/0x270 [ 427.452847][ T9957] do_syscall_64+0x14d/0xf80 [ 427.457476][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.463389][ T9957] page last free pid 23 tgid 23 stack trace: [ 427.469417][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 427.474569][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 427.479730][ T9957] rcu_core+0x7cd/0x1070 [ 427.484055][ T9957] handle_softirqs+0x22a/0x870 [ 427.488843][ T9957] run_ksoftirqd+0x36/0x60 [ 427.493310][ T9957] smpboot_thread_fn+0x541/0xa50 [ 427.498323][ T9957] kthread+0x388/0x470 [ 427.502406][ T9957] ret_from_fork+0x51e/0xb90 [ 427.507063][ T9957] ret_from_fork_asm+0x1a/0x30 [ 427.511873][ T9957] Modules linked in: [ 427.515829][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.515855][ T9957] Tainted: [L]=SOFTLOCKUP [ 427.515862][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.515873][ T9957] Call Trace: [ 427.515880][ T9957] [ 427.515887][ T9957] dump_stack_lvl+0xe8/0x150 [ 427.515920][ T9957] bad_page+0x17f/0x1c0 [ 427.515949][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 427.515979][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 427.516026][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 427.516054][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 427.516073][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 427.516126][ T9957] do_xdp_generic+0xac5/0x12e0 [ 427.516165][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 427.516219][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 427.516241][ T9957] tun_get_user+0x247d/0x3dd0 [ 427.516285][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 427.516307][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.516332][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.516358][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.516383][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 427.516423][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 427.516443][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 427.516461][ T9957] ? vfs_write+0x61d/0xb90 [ 427.516480][ T9957] ? ksys_write+0x150/0x270 [ 427.516500][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 427.516526][ T9957] ? tun_get+0x1c/0x2f0 [ 427.516552][ T9957] ? tun_get+0x1c/0x2f0 [ 427.516572][ T9957] ? tun_get+0x1c/0x2f0 [ 427.516598][ T9957] tun_chr_write_iter+0x113/0x210 [ 427.516623][ T9957] vfs_write+0x61d/0xb90 [ 427.516651][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 427.516682][ T9957] ? __fget_files+0x2a/0x420 [ 427.516719][ T9957] ksys_write+0x150/0x270 [ 427.516743][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 427.516799][ T9957] do_syscall_64+0x14d/0xf80 [ 427.516825][ T9957] ? trace_irq_disable+0x3b/0x150 [ 427.516843][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.516863][ T9957] ? clear_bhb_loop+0x40/0x90 [ 427.516887][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.516907][ T9957] RIP: 0033:0x7f5a9eb5cece [ 427.516924][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.516941][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.516961][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 427.516976][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 427.516989][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 427.517001][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.517013][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 427.517043][ T9957] [ 427.517051][ T9957] Disabling lock debugging due to kernel taint [ 427.804018][ T9957] BUG: Bad page state in process syz.9.829 pfn:44ae7 [ 427.810810][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44ae7 [ 427.819615][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 427.826776][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 427.835408][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 427.844069][ T9957] page dumped because: page_pool leak [ 427.849443][ T9957] page_owner tracks the page as allocated [ 427.855207][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300627726, free_ts 426716541357 [ 427.873657][ T9957] post_alloc_hook+0x231/0x280 [ 427.878453][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 427.884052][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 427.889873][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 427.895395][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 427.901468][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 427.906380][ T9957] do_xdp_generic+0x76b/0x12e0 [ 427.911171][ T9957] tun_get_user+0x247d/0x3dd0 [ 427.915899][ T9957] tun_chr_write_iter+0x113/0x210 [ 427.920925][ T9957] vfs_write+0x61d/0xb90 [ 427.925220][ T9957] ksys_write+0x150/0x270 [ 427.929572][ T9957] do_syscall_64+0x14d/0xf80 [ 427.934215][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.940113][ T9957] page last free pid 23 tgid 23 stack trace: [ 427.946142][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 427.951264][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 427.956432][ T9957] rcu_core+0x7cd/0x1070 [ 427.960703][ T9957] handle_softirqs+0x22a/0x870 [ 427.965511][ T9957] run_ksoftirqd+0x36/0x60 [ 427.969938][ T9957] smpboot_thread_fn+0x541/0xa50 [ 427.974936][ T9957] kthread+0x388/0x470 [ 427.979034][ T9957] ret_from_fork+0x51e/0xb90 [ 427.983667][ T9957] ret_from_fork_asm+0x1a/0x30 [ 427.988437][ T9957] Modules linked in: [ 427.992343][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 427.992375][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 427.992383][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.992395][ T9957] Call Trace: [ 427.992403][ T9957] [ 427.992410][ T9957] dump_stack_lvl+0xe8/0x150 [ 427.992439][ T9957] bad_page+0x17f/0x1c0 [ 427.992466][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 427.992490][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 427.992524][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 427.992548][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 427.992564][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 427.992603][ T9957] do_xdp_generic+0xac5/0x12e0 [ 427.992634][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 427.992672][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 427.992693][ T9957] tun_get_user+0x247d/0x3dd0 [ 427.992722][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 427.992741][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.992766][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.992790][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.992812][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 427.992845][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 427.992864][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 427.992881][ T9957] ? vfs_write+0x61d/0xb90 [ 427.992898][ T9957] ? ksys_write+0x150/0x270 [ 427.992917][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 427.992937][ T9957] ? tun_get+0x1c/0x2f0 [ 427.992958][ T9957] ? tun_get+0x1c/0x2f0 [ 427.992976][ T9957] ? tun_get+0x1c/0x2f0 [ 427.993002][ T9957] tun_chr_write_iter+0x113/0x210 [ 427.993026][ T9957] vfs_write+0x61d/0xb90 [ 427.993048][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 427.993069][ T9957] ? __fget_files+0x2a/0x420 [ 427.993100][ T9957] ksys_write+0x150/0x270 [ 427.993120][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 427.993142][ T9957] do_syscall_64+0x14d/0xf80 [ 427.993164][ T9957] ? trace_irq_disable+0x3b/0x150 [ 427.993179][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.993198][ T9957] ? clear_bhb_loop+0x40/0x90 [ 427.993219][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.993238][ T9957] RIP: 0033:0x7f5a9eb5cece [ 427.993254][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.993269][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.993289][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 427.993302][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 427.993314][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 427.993326][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.993338][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 427.993358][ T9957] [ 427.993390][ T9957] BUG: Bad page state in process syz.9.829 pfn:44ae8 [ 428.281604][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44ae8 [ 428.290395][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 428.297538][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 428.306141][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 428.314748][ T9957] page dumped because: page_pool leak [ 428.320104][ T9957] page_owner tracks the page as allocated [ 428.325843][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300610946, free_ts 426716552535 [ 428.344282][ T9957] post_alloc_hook+0x231/0x280 [ 428.349040][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 428.354598][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 428.360433][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 428.365902][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 428.371974][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 428.376857][ T9957] do_xdp_generic+0x76b/0x12e0 [ 428.381631][ T9957] tun_get_user+0x247d/0x3dd0 [ 428.386335][ T9957] tun_chr_write_iter+0x113/0x210 [ 428.391358][ T9957] vfs_write+0x61d/0xb90 [ 428.395669][ T9957] ksys_write+0x150/0x270 [ 428.400000][ T9957] do_syscall_64+0x14d/0xf80 [ 428.404624][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.410532][ T9957] page last free pid 23 tgid 23 stack trace: [ 428.416539][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 428.421657][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 428.426796][ T9957] rcu_core+0x7cd/0x1070 [ 428.431047][ T9957] handle_softirqs+0x22a/0x870 [ 428.435864][ T9957] run_ksoftirqd+0x36/0x60 [ 428.440292][ T9957] smpboot_thread_fn+0x541/0xa50 [ 428.445262][ T9957] kthread+0x388/0x470 [ 428.449331][ T9957] ret_from_fork+0x51e/0xb90 [ 428.453969][ T9957] ret_from_fork_asm+0x1a/0x30 [ 428.458738][ T9957] Modules linked in: [ 428.462636][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 428.462654][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 428.462659][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.462665][ T9957] Call Trace: [ 428.462672][ T9957] [ 428.462677][ T9957] dump_stack_lvl+0xe8/0x150 [ 428.462695][ T9957] bad_page+0x17f/0x1c0 [ 428.462711][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 428.462731][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 428.462798][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 428.462824][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 428.462835][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 428.462856][ T9957] do_xdp_generic+0xac5/0x12e0 [ 428.462877][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 428.462899][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 428.462911][ T9957] tun_get_user+0x247d/0x3dd0 [ 428.462926][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 428.462937][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.462950][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 428.462964][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 428.462976][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 428.462994][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 428.463005][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 428.463018][ T9957] ? vfs_write+0x61d/0xb90 [ 428.463027][ T9957] ? ksys_write+0x150/0x270 [ 428.463037][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 428.463048][ T9957] ? tun_get+0x1c/0x2f0 [ 428.463059][ T9957] ? tun_get+0x1c/0x2f0 [ 428.463069][ T9957] ? tun_get+0x1c/0x2f0 [ 428.463079][ T9957] tun_chr_write_iter+0x113/0x210 [ 428.463090][ T9957] vfs_write+0x61d/0xb90 [ 428.463102][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 428.463114][ T9957] ? __fget_files+0x2a/0x420 [ 428.463131][ T9957] ksys_write+0x150/0x270 [ 428.463141][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 428.463153][ T9957] do_syscall_64+0x14d/0xf80 [ 428.463167][ T9957] ? trace_irq_disable+0x3b/0x150 [ 428.463176][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.463186][ T9957] ? clear_bhb_loop+0x40/0x90 [ 428.463197][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.463208][ T9957] RIP: 0033:0x7f5a9eb5cece [ 428.463218][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.463227][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.463239][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 428.463247][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 428.463253][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 428.463260][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.463266][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 428.463277][ T9957] [ 428.463284][ T9957] BUG: Bad page state in process syz.9.829 pfn:44aed [ 428.751410][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44aed [ 428.760198][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 428.767326][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 428.775941][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 428.784551][ T9957] page dumped because: page_pool leak [ 428.789919][ T9957] page_owner tracks the page as allocated [ 428.795669][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300594818, free_ts 426716563666 [ 428.814122][ T9957] post_alloc_hook+0x231/0x280 [ 428.818899][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 428.824482][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 428.830309][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 428.835810][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 428.841878][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 428.846748][ T9957] do_xdp_generic+0x76b/0x12e0 [ 428.851523][ T9957] tun_get_user+0x247d/0x3dd0 [ 428.856209][ T9957] tun_chr_write_iter+0x113/0x210 [ 428.861242][ T9957] vfs_write+0x61d/0xb90 [ 428.865497][ T9957] ksys_write+0x150/0x270 [ 428.869824][ T9957] do_syscall_64+0x14d/0xf80 [ 428.874430][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.880333][ T9957] page last free pid 23 tgid 23 stack trace: [ 428.886329][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 428.891447][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 428.896581][ T9957] rcu_core+0x7cd/0x1070 [ 428.900825][ T9957] handle_softirqs+0x22a/0x870 [ 428.905601][ T9957] run_ksoftirqd+0x36/0x60 [ 428.910034][ T9957] smpboot_thread_fn+0x541/0xa50 [ 428.914992][ T9957] kthread+0x388/0x470 [ 428.919056][ T9957] ret_from_fork+0x51e/0xb90 [ 428.923664][ T9957] ret_from_fork_asm+0x1a/0x30 [ 428.928439][ T9957] Modules linked in: [ 428.932325][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 428.932355][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 428.932361][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.932367][ T9957] Call Trace: [ 428.932372][ T9957] [ 428.932377][ T9957] dump_stack_lvl+0xe8/0x150 [ 428.932395][ T9957] bad_page+0x17f/0x1c0 [ 428.932411][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 428.932424][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 428.932444][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 428.932457][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 428.932467][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 428.932488][ T9957] do_xdp_generic+0xac5/0x12e0 [ 428.932505][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 428.932525][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 428.932536][ T9957] tun_get_user+0x247d/0x3dd0 [ 428.932552][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 428.932562][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.932576][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 428.932590][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 428.932602][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 428.932619][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 428.932630][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 428.932640][ T9957] ? vfs_write+0x61d/0xb90 [ 428.932649][ T9957] ? ksys_write+0x150/0x270 [ 428.932659][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 428.932670][ T9957] ? tun_get+0x1c/0x2f0 [ 428.932681][ T9957] ? tun_get+0x1c/0x2f0 [ 428.932691][ T9957] ? tun_get+0x1c/0x2f0 [ 428.932701][ T9957] tun_chr_write_iter+0x113/0x210 [ 428.932712][ T9957] vfs_write+0x61d/0xb90 [ 428.932723][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 428.932735][ T9957] ? __fget_files+0x2a/0x420 [ 428.932752][ T9957] ksys_write+0x150/0x270 [ 428.932763][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 428.932775][ T9957] do_syscall_64+0x14d/0xf80 [ 428.932794][ T9957] ? trace_irq_disable+0x3b/0x150 [ 428.932803][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.932813][ T9957] ? clear_bhb_loop+0x40/0x90 [ 428.932824][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.932834][ T9957] RIP: 0033:0x7f5a9eb5cece [ 428.932844][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.932853][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.932864][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 428.932872][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 428.932878][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 428.932885][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.932891][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 428.932902][ T9957] [ 428.932909][ T9957] BUG: Bad page state in process syz.9.829 pfn:44aee [ 429.220655][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44aee [ 429.229476][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 429.236610][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 429.245217][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 429.253817][ T9957] page dumped because: page_pool leak [ 429.259169][ T9957] page_owner tracks the page as allocated [ 429.264895][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300578325, free_ts 426716574554 [ 429.283344][ T9957] post_alloc_hook+0x231/0x280 [ 429.288176][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 429.293761][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 429.299552][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 429.305026][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 429.311117][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 429.315984][ T9957] do_xdp_generic+0x76b/0x12e0 [ 429.320752][ T9957] tun_get_user+0x247d/0x3dd0 [ 429.325460][ T9957] tun_chr_write_iter+0x113/0x210 [ 429.330508][ T9957] vfs_write+0x61d/0xb90 [ 429.334796][ T9957] ksys_write+0x150/0x270 [ 429.339128][ T9957] do_syscall_64+0x14d/0xf80 [ 429.343748][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.349651][ T9957] page last free pid 23 tgid 23 stack trace: [ 429.355645][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 429.360781][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 429.365925][ T9957] rcu_core+0x7cd/0x1070 [ 429.370170][ T9957] handle_softirqs+0x22a/0x870 [ 429.374942][ T9957] run_ksoftirqd+0x36/0x60 [ 429.379377][ T9957] smpboot_thread_fn+0x541/0xa50 [ 429.384324][ T9957] kthread+0x388/0x470 [ 429.388387][ T9957] ret_from_fork+0x51e/0xb90 [ 429.392977][ T9957] ret_from_fork_asm+0x1a/0x30 [ 429.397753][ T9957] Modules linked in: [ 429.401650][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 429.401667][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 429.401671][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.401683][ T9957] Call Trace: [ 429.401687][ T9957] [ 429.401692][ T9957] dump_stack_lvl+0xe8/0x150 [ 429.401709][ T9957] bad_page+0x17f/0x1c0 [ 429.401724][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 429.401737][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 429.401762][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 429.401778][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 429.401787][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 429.401808][ T9957] do_xdp_generic+0xac5/0x12e0 [ 429.401825][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 429.401845][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 429.401856][ T9957] tun_get_user+0x247d/0x3dd0 [ 429.401871][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 429.401882][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.401895][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.401908][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.401920][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 429.401940][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 429.401950][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 429.401960][ T9957] ? vfs_write+0x61d/0xb90 [ 429.401970][ T9957] ? ksys_write+0x150/0x270 [ 429.401980][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 429.401991][ T9957] ? tun_get+0x1c/0x2f0 [ 429.402002][ T9957] ? tun_get+0x1c/0x2f0 [ 429.402012][ T9957] ? tun_get+0x1c/0x2f0 [ 429.402022][ T9957] tun_chr_write_iter+0x113/0x210 [ 429.402033][ T9957] vfs_write+0x61d/0xb90 [ 429.402045][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 429.402059][ T9957] ? __fget_files+0x2a/0x420 [ 429.402076][ T9957] ksys_write+0x150/0x270 [ 429.402087][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 429.402099][ T9957] do_syscall_64+0x14d/0xf80 [ 429.402112][ T9957] ? trace_irq_disable+0x3b/0x150 [ 429.402121][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.402131][ T9957] ? clear_bhb_loop+0x40/0x90 [ 429.402142][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.402152][ T9957] RIP: 0033:0x7f5a9eb5cece [ 429.402162][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.402171][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.402183][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 429.402191][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 429.402198][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 429.402204][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.402210][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 429.402221][ T9957] [ 429.402228][ T9957] BUG: Bad page state in process syz.9.829 pfn:5206c [ 429.689990][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805206c5c8 pfn:0x5206c [ 429.700072][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 429.707204][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 429.715804][ T9957] raw: ffff88805206c5c8 0000000000000001 00000000ffffffff 0000000000000000 [ 429.724393][ T9957] page dumped because: page_pool leak [ 429.729755][ T9957] page_owner tracks the page as allocated [ 429.735494][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300562815, free_ts 426716580701 [ 429.753932][ T9957] post_alloc_hook+0x231/0x280 [ 429.758687][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 429.764264][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 429.770077][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 429.775566][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 429.781661][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 429.786545][ T9957] do_xdp_generic+0x76b/0x12e0 [ 429.791315][ T9957] tun_get_user+0x247d/0x3dd0 [ 429.796039][ T9957] tun_chr_write_iter+0x113/0x210 [ 429.801064][ T9957] vfs_write+0x61d/0xb90 [ 429.805336][ T9957] ksys_write+0x150/0x270 [ 429.809678][ T9957] do_syscall_64+0x14d/0xf80 [ 429.814284][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.820176][ T9957] page last free pid 23 tgid 23 stack trace: [ 429.826161][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 429.831286][ T9957] tlb_remove_table_rcu+0x85/0x100 [ 429.836417][ T9957] rcu_core+0x7cd/0x1070 [ 429.840672][ T9957] handle_softirqs+0x22a/0x870 [ 429.845497][ T9957] run_ksoftirqd+0x36/0x60 [ 429.849929][ T9957] smpboot_thread_fn+0x541/0xa50 [ 429.854921][ T9957] kthread+0x388/0x470 [ 429.859015][ T9957] ret_from_fork+0x51e/0xb90 [ 429.863677][ T9957] ret_from_fork_asm+0x1a/0x30 [ 429.868468][ T9957] Modules linked in: [ 429.872364][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 429.872382][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 429.872386][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.872393][ T9957] Call Trace: [ 429.872397][ T9957] [ 429.872402][ T9957] dump_stack_lvl+0xe8/0x150 [ 429.872419][ T9957] bad_page+0x17f/0x1c0 [ 429.872435][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 429.872451][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 429.872471][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 429.872484][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 429.872494][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 429.872514][ T9957] do_xdp_generic+0xac5/0x12e0 [ 429.872531][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 429.872551][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 429.872563][ T9957] tun_get_user+0x247d/0x3dd0 [ 429.872578][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 429.872588][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.872602][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.872615][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.872627][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 429.872645][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 429.872655][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 429.872665][ T9957] ? vfs_write+0x61d/0xb90 [ 429.872675][ T9957] ? ksys_write+0x150/0x270 [ 429.872684][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 429.872695][ T9957] ? tun_get+0x1c/0x2f0 [ 429.872711][ T9957] ? tun_get+0x1c/0x2f0 [ 429.872720][ T9957] ? tun_get+0x1c/0x2f0 [ 429.872731][ T9957] tun_chr_write_iter+0x113/0x210 [ 429.872742][ T9957] vfs_write+0x61d/0xb90 [ 429.872753][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 429.872765][ T9957] ? __fget_files+0x2a/0x420 [ 429.872782][ T9957] ksys_write+0x150/0x270 [ 429.872793][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 429.872805][ T9957] do_syscall_64+0x14d/0xf80 [ 429.872819][ T9957] ? trace_irq_disable+0x3b/0x150 [ 429.872828][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.872838][ T9957] ? clear_bhb_loop+0x40/0x90 [ 429.872848][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.872858][ T9957] RIP: 0033:0x7f5a9eb5cece [ 429.872868][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.872877][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.872888][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 429.872896][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 429.872903][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 429.872910][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.872916][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 429.872926][ T9957] [ 429.872933][ T9957] BUG: Bad page state in process syz.9.829 pfn:44ad9 [ 430.161148][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44ad9 [ 430.169922][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 430.177059][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 430.185654][ T9957] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 430.194256][ T9957] page dumped because: page_pool leak [ 430.199622][ T9957] page_owner tracks the page as allocated [ 430.205355][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300546905, free_ts 426716587105 [ 430.223815][ T9957] post_alloc_hook+0x231/0x280 [ 430.228614][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 430.234200][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 430.240016][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 430.245526][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 430.251605][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 430.256489][ T9957] do_xdp_generic+0x76b/0x12e0 [ 430.261278][ T9957] tun_get_user+0x247d/0x3dd0 [ 430.265971][ T9957] tun_chr_write_iter+0x113/0x210 [ 430.271008][ T9957] vfs_write+0x61d/0xb90 [ 430.275279][ T9957] ksys_write+0x150/0x270 [ 430.279628][ T9957] do_syscall_64+0x14d/0xf80 [ 430.284249][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.290139][ T9957] page last free pid 23 tgid 23 stack trace: [ 430.296141][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 430.301266][ T9957] rcu_core+0x7cd/0x1070 [ 430.305537][ T9957] handle_softirqs+0x22a/0x870 [ 430.310406][ T9957] run_ksoftirqd+0x36/0x60 [ 430.314843][ T9957] smpboot_thread_fn+0x541/0xa50 [ 430.319788][ T9957] kthread+0x388/0x470 [ 430.323882][ T9957] ret_from_fork+0x51e/0xb90 [ 430.328500][ T9957] ret_from_fork_asm+0x1a/0x30 [ 430.333260][ T9957] Modules linked in: [ 430.337176][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 430.337205][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 430.337210][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.337220][ T9957] Call Trace: [ 430.337225][ T9957] [ 430.337231][ T9957] dump_stack_lvl+0xe8/0x150 [ 430.337259][ T9957] bad_page+0x17f/0x1c0 [ 430.337283][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 430.337305][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 430.337337][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 430.337361][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 430.337378][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 430.337416][ T9957] do_xdp_generic+0xac5/0x12e0 [ 430.337446][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 430.337483][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 430.337504][ T9957] tun_get_user+0x247d/0x3dd0 [ 430.337535][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 430.337555][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.337581][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.337605][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.337639][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 430.337670][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 430.337689][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 430.337707][ T9957] ? vfs_write+0x61d/0xb90 [ 430.337724][ T9957] ? ksys_write+0x150/0x270 [ 430.337741][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 430.337762][ T9957] ? tun_get+0x1c/0x2f0 [ 430.337783][ T9957] ? tun_get+0x1c/0x2f0 [ 430.337800][ T9957] ? tun_get+0x1c/0x2f0 [ 430.337821][ T9957] tun_chr_write_iter+0x113/0x210 [ 430.337841][ T9957] vfs_write+0x61d/0xb90 [ 430.337862][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 430.337885][ T9957] ? __fget_files+0x2a/0x420 [ 430.337916][ T9957] ksys_write+0x150/0x270 [ 430.337936][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 430.337958][ T9957] do_syscall_64+0x14d/0xf80 [ 430.337984][ T9957] ? trace_irq_disable+0x3b/0x150 [ 430.338000][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.338018][ T9957] ? clear_bhb_loop+0x40/0x90 [ 430.338038][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.338056][ T9957] RIP: 0033:0x7f5a9eb5cece [ 430.338073][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.338088][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.338108][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 430.338122][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 430.338135][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 430.338146][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.338158][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 430.338178][ T9957] [ 430.338189][ T9957] BUG: Bad page state in process syz.9.829 pfn:25908 [ 430.626040][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802590e000 pfn:0x25908 [ 430.636166][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 430.643388][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 430.652002][ T9957] raw: ffff88802590e000 0000000000000001 00000000ffffffff 0000000000000000 [ 430.660607][ T9957] page dumped because: page_pool leak [ 430.665987][ T9957] page_owner tracks the page as allocated [ 430.671696][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300530362, free_ts 426717479427 [ 430.690134][ T9957] post_alloc_hook+0x231/0x280 [ 430.694922][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 430.700454][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 430.706267][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 430.711740][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 430.717818][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 430.722673][ T9957] do_xdp_generic+0x76b/0x12e0 [ 430.727457][ T9957] tun_get_user+0x247d/0x3dd0 [ 430.732128][ T9957] tun_chr_write_iter+0x113/0x210 [ 430.737159][ T9957] vfs_write+0x61d/0xb90 [ 430.741398][ T9957] ksys_write+0x150/0x270 [ 430.745763][ T9957] do_syscall_64+0x14d/0xf80 [ 430.750365][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.756292][ T9957] page last free pid 54 tgid 54 stack trace: [ 430.762285][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 430.767420][ T9957] vfree+0x25a/0x400 [ 430.771312][ T9957] delayed_vfree_work+0x55/0x80 [ 430.776208][ T9957] process_one_work+0x949/0x1650 [ 430.781149][ T9957] worker_thread+0xb46/0x1140 [ 430.785838][ T9957] kthread+0x388/0x470 [ 430.789904][ T9957] ret_from_fork+0x51e/0xb90 [ 430.794511][ T9957] ret_from_fork_asm+0x1a/0x30 [ 430.799272][ T9957] Modules linked in: [ 430.803150][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 430.803166][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 430.803170][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.803177][ T9957] Call Trace: [ 430.803181][ T9957] [ 430.803186][ T9957] dump_stack_lvl+0xe8/0x150 [ 430.803203][ T9957] bad_page+0x17f/0x1c0 [ 430.803218][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 430.803231][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 430.803251][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 430.803264][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 430.803274][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 430.803295][ T9957] do_xdp_generic+0xac5/0x12e0 [ 430.803311][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 430.803332][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 430.803343][ T9957] tun_get_user+0x247d/0x3dd0 [ 430.803359][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 430.803369][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.803382][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.803396][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.803408][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 430.803426][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 430.803437][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 430.803447][ T9957] ? vfs_write+0x61d/0xb90 [ 430.803457][ T9957] ? ksys_write+0x150/0x270 [ 430.803467][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 430.803482][ T9957] ? tun_get+0x1c/0x2f0 [ 430.803501][ T9957] ? tun_get+0x1c/0x2f0 [ 430.803517][ T9957] ? tun_get+0x1c/0x2f0 [ 430.803536][ T9957] tun_chr_write_iter+0x113/0x210 [ 430.803553][ T9957] vfs_write+0x61d/0xb90 [ 430.803572][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 430.803602][ T9957] ? __fget_files+0x2a/0x420 [ 430.803631][ T9957] ksys_write+0x150/0x270 [ 430.803651][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 430.803672][ T9957] do_syscall_64+0x14d/0xf80 [ 430.803696][ T9957] ? trace_irq_disable+0x3b/0x150 [ 430.803712][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.803730][ T9957] ? clear_bhb_loop+0x40/0x90 [ 430.803751][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.803770][ T9957] RIP: 0033:0x7f5a9eb5cece [ 430.803786][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.803803][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.803822][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 430.803837][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 430.803850][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 430.803862][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.803874][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 430.803895][ T9957] [ 431.084034][ T9957] BUG: Bad page state in process syz.9.829 pfn:25909 [ 431.090791][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x25909 [ 431.100901][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 431.108059][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 431.116672][ T9957] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 431.125272][ T9957] page dumped because: page_pool leak [ 431.130648][ T9957] page_owner tracks the page as allocated [ 431.136420][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300513461, free_ts 426717487333 [ 431.154845][ T9957] post_alloc_hook+0x231/0x280 [ 431.159604][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 431.165158][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 431.170963][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 431.176436][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 431.182505][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 431.187365][ T9957] do_xdp_generic+0x76b/0x12e0 [ 431.192131][ T9957] tun_get_user+0x247d/0x3dd0 [ 431.196839][ T9957] tun_chr_write_iter+0x113/0x210 [ 431.201864][ T9957] vfs_write+0x61d/0xb90 [ 431.206111][ T9957] ksys_write+0x150/0x270 [ 431.210449][ T9957] do_syscall_64+0x14d/0xf80 [ 431.215045][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.220935][ T9957] page last free pid 54 tgid 54 stack trace: [ 431.226939][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 431.232052][ T9957] vfree+0x25a/0x400 [ 431.235978][ T9957] delayed_vfree_work+0x55/0x80 [ 431.240859][ T9957] process_one_work+0x949/0x1650 [ 431.245824][ T9957] worker_thread+0xb46/0x1140 [ 431.250503][ T9957] kthread+0x388/0x470 [ 431.254580][ T9957] ret_from_fork+0x51e/0xb90 [ 431.259175][ T9957] ret_from_fork_asm+0x1a/0x30 [ 431.263956][ T9957] Modules linked in: [ 431.267856][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 431.267874][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 431.267878][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.267885][ T9957] Call Trace: [ 431.267890][ T9957] [ 431.267894][ T9957] dump_stack_lvl+0xe8/0x150 [ 431.267911][ T9957] bad_page+0x17f/0x1c0 [ 431.267927][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 431.267939][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 431.267959][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 431.267973][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 431.267983][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 431.268003][ T9957] do_xdp_generic+0xac5/0x12e0 [ 431.268020][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 431.268039][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 431.268051][ T9957] tun_get_user+0x247d/0x3dd0 [ 431.268066][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 431.268077][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.268090][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.268103][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 431.268115][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 431.268133][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 431.268143][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 431.268153][ T9957] ? vfs_write+0x61d/0xb90 [ 431.268163][ T9957] ? ksys_write+0x150/0x270 [ 431.268172][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 431.268184][ T9957] ? tun_get+0x1c/0x2f0 [ 431.268194][ T9957] ? tun_get+0x1c/0x2f0 [ 431.268204][ T9957] ? tun_get+0x1c/0x2f0 [ 431.268215][ T9957] tun_chr_write_iter+0x113/0x210 [ 431.268226][ T9957] vfs_write+0x61d/0xb90 [ 431.268237][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 431.268249][ T9957] ? __fget_files+0x2a/0x420 [ 431.268266][ T9957] ksys_write+0x150/0x270 [ 431.268277][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 431.268289][ T9957] do_syscall_64+0x14d/0xf80 [ 431.268303][ T9957] ? trace_irq_disable+0x3b/0x150 [ 431.268312][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.268322][ T9957] ? clear_bhb_loop+0x40/0x90 [ 431.268333][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.268343][ T9957] RIP: 0033:0x7f5a9eb5cece [ 431.268353][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.268363][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.268374][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 431.268382][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 431.268389][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 431.268395][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.268401][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 431.268412][ T9957] [ 431.268419][ T9957] BUG: Bad page state in process syz.9.829 pfn:2590a [ 431.556431][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802590adc0 pfn:0x2590a [ 431.566529][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 431.573673][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 431.582293][ T9957] raw: ffff88802590adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 431.590891][ T9957] page dumped because: page_pool leak [ 431.596281][ T9957] page_owner tracks the page as allocated [ 431.601974][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300496857, free_ts 426717494537 [ 431.620396][ T9957] post_alloc_hook+0x231/0x280 [ 431.625181][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 431.630730][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 431.636583][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 431.642050][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 431.648157][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 431.653015][ T9957] do_xdp_generic+0x76b/0x12e0 [ 431.657821][ T9957] tun_get_user+0x247d/0x3dd0 [ 431.662521][ T9957] tun_chr_write_iter+0x113/0x210 [ 431.667577][ T9957] vfs_write+0x61d/0xb90 [ 431.671857][ T9957] ksys_write+0x150/0x270 [ 431.676203][ T9957] do_syscall_64+0x14d/0xf80 [ 431.680796][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.686703][ T9957] page last free pid 54 tgid 54 stack trace: [ 431.692672][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 431.697805][ T9957] vfree+0x25a/0x400 [ 431.701702][ T9957] delayed_vfree_work+0x55/0x80 [ 431.706568][ T9957] process_one_work+0x949/0x1650 [ 431.711517][ T9957] worker_thread+0xb46/0x1140 [ 431.716228][ T9957] kthread+0x388/0x470 [ 431.720293][ T9957] ret_from_fork+0x51e/0xb90 [ 431.724891][ T9957] ret_from_fork_asm+0x1a/0x30 [ 431.729665][ T9957] Modules linked in: [ 431.733584][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 431.733611][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 431.733617][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.733628][ T9957] Call Trace: [ 431.733635][ T9957] [ 431.733642][ T9957] dump_stack_lvl+0xe8/0x150 [ 431.733670][ T9957] bad_page+0x17f/0x1c0 [ 431.733696][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 431.733718][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 431.733754][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 431.733778][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 431.733795][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 431.733831][ T9957] do_xdp_generic+0xac5/0x12e0 [ 431.733861][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 431.733893][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 431.733910][ T9957] tun_get_user+0x247d/0x3dd0 [ 431.733935][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 431.733954][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.733979][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.734004][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 431.734028][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 431.734062][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 431.734080][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 431.734098][ T9957] ? vfs_write+0x61d/0xb90 [ 431.734115][ T9957] ? ksys_write+0x150/0x270 [ 431.734132][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 431.734151][ T9957] ? tun_get+0x1c/0x2f0 [ 431.734172][ T9957] ? tun_get+0x1c/0x2f0 [ 431.734187][ T9957] ? tun_get+0x1c/0x2f0 [ 431.734206][ T9957] tun_chr_write_iter+0x113/0x210 [ 431.734227][ T9957] vfs_write+0x61d/0xb90 [ 431.734248][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 431.734271][ T9957] ? __fget_files+0x2a/0x420 [ 431.734301][ T9957] ksys_write+0x150/0x270 [ 431.734321][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 431.734344][ T9957] do_syscall_64+0x14d/0xf80 [ 431.734369][ T9957] ? trace_irq_disable+0x3b/0x150 [ 431.734385][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.734404][ T9957] ? clear_bhb_loop+0x40/0x90 [ 431.734425][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.734443][ T9957] RIP: 0033:0x7f5a9eb5cece [ 431.734460][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.734476][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.734496][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 431.734510][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 431.734522][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 431.734543][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.734554][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 431.734575][ T9957] [ 431.734586][ T9957] BUG: Bad page state in process syz.9.829 pfn:2590b [ 432.022371][ T9957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802590b000 pfn:0x2590b [ 432.032484][ T9957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 432.039712][ T9957] raw: 00fff00000000000 dead000000000040 ffff88801b18a000 0000000000000000 [ 432.048341][ T9957] raw: ffff88802590b000 0000000000000001 00000000ffffffff 0000000000000000 [ 432.056934][ T9957] page dumped because: page_pool leak [ 432.062315][ T9957] page_owner tracks the page as allocated [ 432.068056][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 9957, tgid 9954 (syz.9.829), ts 427300480503, free_ts 426717500383 [ 432.086487][ T9957] post_alloc_hook+0x231/0x280 [ 432.091266][ T9957] get_page_from_freelist+0x24dc/0x2580 [ 432.096830][ T9957] __alloc_frozen_pages_noprof+0x18d/0x380 [ 432.102643][ T9957] alloc_pages_bulk_noprof+0x558/0x700 [ 432.108123][ T9957] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 432.114217][ T9957] skb_pp_cow_data+0xc21/0x1680 [ 432.119057][ T9957] do_xdp_generic+0x76b/0x12e0 [ 432.123832][ T9957] tun_get_user+0x247d/0x3dd0 [ 432.128534][ T9957] tun_chr_write_iter+0x113/0x210 [ 432.133580][ T9957] vfs_write+0x61d/0xb90 [ 432.137820][ T9957] ksys_write+0x150/0x270 [ 432.142131][ T9957] do_syscall_64+0x14d/0xf80 [ 432.146742][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.152637][ T9957] page last free pid 54 tgid 54 stack trace: [ 432.158637][ T9957] __free_frozen_pages+0xc2b/0xdb0 [ 432.163775][ T9957] vfree+0x25a/0x400 [ 432.167655][ T9957] delayed_vfree_work+0x55/0x80 [ 432.172484][ T9957] process_one_work+0x949/0x1650 [ 432.177463][ T9957] worker_thread+0xb46/0x1140 [ 432.182160][ T9957] kthread+0x388/0x470 [ 432.186279][ T9957] ret_from_fork+0x51e/0xb90 [ 432.190883][ T9957] ret_from_fork_asm+0x1a/0x30 [ 432.195692][ T9957] Modules linked in: [ 432.199588][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.9.829 Tainted: G B L syzkaller #0 PREEMPT(full) [ 432.199606][ T9957] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 432.199610][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.199617][ T9957] Call Trace: [ 432.199622][ T9957] [ 432.199626][ T9957] dump_stack_lvl+0xe8/0x150 [ 432.199644][ T9957] bad_page+0x17f/0x1c0 [ 432.199659][ T9957] __free_frozen_pages+0xd62/0xdb0 [ 432.199672][ T9957] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 432.199692][ T9957] bpf_xdp_adjust_tail+0x1d6/0x220 [ 432.199706][ T9957] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 432.199715][ T9957] bpf_prog_run_generic_xdp+0x603/0x1490 [ 432.199736][ T9957] do_xdp_generic+0xac5/0x12e0 [ 432.199752][ T9957] ? __pfx_do_xdp_generic+0x10/0x10 [ 432.199775][ T9957] ? tun_get_user+0x2354/0x3dd0 [ 432.199786][ T9957] tun_get_user+0x247d/0x3dd0 [ 432.199801][ T9957] ? __pfx_tun_get_user+0x10/0x10 [ 432.199812][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 432.199825][ T9957] ? lockdep_hardirqs_on+0x7a/0x110 [ 432.199841][ T9957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 432.199853][ T9957] ? save_netdev_trace_buffer+0x4e2/0x610 [ 432.199871][ T9957] ? ref_tracker_alloc+0x363/0x4d0 [ 432.199882][ T9957] ? tun_chr_write_iter+0x60/0x210 [ 432.199891][ T9957] ? vfs_write+0x61d/0xb90 [ 432.199901][ T9957] ? ksys_write+0x150/0x270 [ 432.199910][ T9957] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 432.199922][ T9957] ? tun_get+0x1c/0x2f0 [ 432.199933][ T9957] ? tun_get+0x1c/0x2f0 [ 432.199943][ T9957] ? tun_get+0x1c/0x2f0 [ 432.199953][ T9957] tun_chr_write_iter+0x113/0x210 [ 432.199965][ T9957] vfs_write+0x61d/0xb90 [ 432.199976][ T9957] ? __pfx_vfs_write+0x10/0x10 [ 432.199988][ T9957] ? __fget_files+0x2a/0x420 [ 432.200005][ T9957] ksys_write+0x150/0x270 [ 432.200015][ T9957] ? __pfx_ksys_write+0x10/0x10 [ 432.200027][ T9957] do_syscall_64+0x14d/0xf80 [ 432.200041][ T9957] ? trace_irq_disable+0x3b/0x150 [ 432.200054][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.200072][ T9957] ? clear_bhb_loop+0x40/0x90 [ 432.200093][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.200110][ T9957] RIP: 0033:0x7f5a9eb5cece [ 432.200120][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.200129][ T9957] RSP: 002b:00007f5a9fb0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.200141][ T9957] RAX: ffffffffffffffda RBX: 00007f5a9fb106c0 RCX: 00007f5a9eb5cece [ 432.200149][ T9957] RDX: 0000000000011dc0 RSI: 0000200000000300 RDI: 00000000000000c8 [ 432.200155][ T9957] RBP: 00007f5a9ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 432.200162][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.200168][ T9957] R13: 00007f5a9ee16038 R14: 00007f5a9ee15fa0 R15: 00007fff7b93bcf8 [ 432.200178][ T9957] [ 432.495404][ T9956] EXT4-fs (loop1): Could not load journal inode