last executing test programs: 3m53.174612645s ago: executing program 32 (id=104): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000600)={[{@utf8}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@uni_xlate}]}, 0x1, 0x292, &(0x7f0000000340)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000600)={[{@utf8}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@uni_xlate}]}, 0x1, 0x292, &(0x7f0000000340)="$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") (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) (async) 3m14.400325371s ago: executing program 33 (id=233): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000c3000000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r1, 0x405, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 2m27.128925467s ago: executing program 4 (id=541): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x7, 0xfdfd, {{0xe, 0x4, 0x0, 0x38, 0x38, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @local, {[@end, @ssrr={0x89, 0x7, 0x6a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x6e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @lsrr={0x83, 0xb, 0xdb, [@multicast1, @remote]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@private2, r4}, 0x14) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) setfsuid(0xee00) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={[{@xino_auto}], [], 0x2f}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") 2m26.028522754s ago: executing program 4 (id=551): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x3, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0xff, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xfe, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x7, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0xffffffff, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0xfffffffd, 0xca, 0x0, 0x80000, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x0, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x7, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0xff, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x400003, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x8, 0x1, 0x401, 0x1ff, 0x2, 0x9bce, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x7, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffff8, 0x3, 0x1, 0x9, 0x3, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0xb, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0xfff, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0xaf, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x34004800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2m25.881100937s ago: executing program 4 (id=554): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10042, 0x0) pwrite64(r2, &(0x7f0000000000)="4b98ade80cda73c00268e6d329", 0xd, 0x2) sendfile(r2, r2, 0x0, 0x1000000000007) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x4, 0x2, 0x1}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r4, &(0x7f0000002f80)=[{{&(0x7f0000002240)=@phonet={0x23, 0xdb, 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffd9}}], 0x18}}], 0x1, 0x404c045) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xb3) 2m24.481201995s ago: executing program 4 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x5}, {0xfff1}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) 2m23.203886069s ago: executing program 4 (id=571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @loopback}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@remote, 0x29, r1}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x210011, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x10, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x3, 0x2, 0x7, 0x8, 0x375a}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffffb}]}}}]}, 0x58}}, 0x10) 2m22.823847863s ago: executing program 4 (id=572): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000080)={'ip6gretap0\x00', @ifru_map={0xffffffffffffffff, 0xd89, 0x56fd, 0xf3, 0x9, 0x9}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m7.745330327s ago: executing program 34 (id=572): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000080)={'ip6gretap0\x00', @ifru_map={0xffffffffffffffff, 0xd89, 0x56fd, 0xf3, 0x9, 0x9}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m40.017772165s ago: executing program 6 (id=775): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980), 0x0, 0x5, 0x0, 0x0, r5}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4, 0x2003, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff1}, {0xffff}, {0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}]}}]}, 0x48}}, 0x4000010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r5], &(0x7f0000000680)=[0x5], &(0x7f0000000a80)=[r6, r6], &(0x7f0000000ac0), 0x0, 0x2}) 1m39.812408782s ago: executing program 6 (id=777): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000000)={0x80000000, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000003c0)=[{{}, {0x80000000}}]}) r3 = accept4(0xffffffffffffffff, &(0x7f0000003a00)=@caif=@rfm, &(0x7f0000003a80)=0x80, 0x1800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)={0x54, r5, 0x1, 0x70bd3b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfb}, {0xc, 0x90, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x18800}, 0x20040010) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003b80)={&(0x7f0000003c00)=ANY=[@ANYBLOB="5400f200d7ff48a483704155b3de139a09bb295f58edea2cbf9d7f91ee05dc8b99da50fbaeabc2a6e27054ede5e67a30cfb4842aeb2a343a35864d44db6588d43b8f7cc5e813905e44972f15dc5dad7ff18329101714ea1afbe7809c70591d5fa7b0ad3fb596e0ae32b9d03e0df537f650392f078bf9354eadb751cc6f639303d6689680ad3e4c82d53a965a952d13083aa80cd5dd9fd7b14fe5df", @ANYRES16=r5, @ANYBLOB="0b0228bd7000fbdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00010000000600110009000000080013000b0000000500140001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000000) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000080), 0x4, 0x523, &(0x7f00000018c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000200000020"], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) process_madvise(0xffffffffffffffff, &(0x7f0000000200)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x21}, 0x18) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000440)={r8, 0x24}) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg$sock(r9, &(0x7f0000003880)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x0, 0x2, 0x2, 0x1}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)="bd263e04471b9bbbb600c4357dc9ec4909dfcfb9932a43b7bb9d9b83051adf5fd9d8773844f15092926709392727c0518dbe082f7cf00e56e5d6b507af11ce038904caecb24e3f68ddcbecaf6e3a6b8aef4aac5b4166dba8020a2535c70eac28feba2907027e0b9950191704e6548dc10e5ea0362d04fd2144da43a713e205568997f77d14b09439c44d25a506ae5d", 0x8f}, {&(0x7f0000000600)="1de887e4b3eeba3e141e27c806e401dbce74cd", 0x13}, {&(0x7f0000000640)="044fa2802906b998c08dc3958a124bcccd8446f3c419bc93d191e082472a3064b57cca275a88a595b8b51e63", 0x2c}, {&(0x7f0000000680)="8d30718eb4b9dfe69d03481e7142fcc2dd73c1cdc93dbbdcd5c26da3a5ad679bd0dbe8339b05bae9586051fdaba8d18e5de4c6c71b2b583c54fd90ac6e756b235d8c722fa2009d90", 0x48}, {&(0x7f0000000700)="de2e02d201a47260e3fcb945baea9045653f9703ddaeb44b0331ddd4c307328c19fd946f211a6a1f6113764d2022119e342455bae2bbae85bbf5ae3e2af3f86f9fa48a14e68b2d9a4a0faf38b1aaa93b531e9436979d76d30d2ea29691a841286a964cdb1fc5fca13b6d131cfa45bc5ea27e5a458b4ce5d29e4ae3da4b0a5385644d7119ae6b01f750887e0076fefe2c6bc8b5448f11b735af854c6693a9aed852c94ae6bacb081c64207e50e142ae7a7c74e1d8b688edfea0f7ceb7b40c28e2b851ba9d7f21bd3c61607167bfa63f833ea816e846acad8d7ac5021228eda22aa271ab2cf8e2e299100a7b1376012f1fffc0b61440", 0xf5}], 0x5, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)="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", 0x1000}], 0x1}}, {{&(0x7f0000001e40)=@pppoe={0x18, 0x0, {0x2, @local, 'veth0_macvtap\x00'}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="0ea258d9da2c31b6f6070cbc608d0d342e2c0f40f35e708cfcdba8be20cf1e0cf8b5207feb63670041b5325be4a4e46767b2d406efffc58f0ce15e133e6a5f8a83776dbdaabeae42fa7f05e0c5b765018f1df823844388adf8712ddabd227661fbd0a851caffaafbfec6b2a71cfae8a88a18fe309b85dd7cbf251a89ed699341050a3c5ab904f1", 0x87}], 0x1, &(0x7f0000001fc0)=[@mark={{0x14, 0x1, 0x24, 0x5c}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000002000)=@llc={0x1a, 0x118, 0xa, 0x0, 0x7, 0x79}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002080)="dc345594c5b78eadac14ce3736141e175d58b07600acf8d1692e497ca34102aece5a4b4dad5296cc5317a332353de1a88172c0f68ad1ed6701b696545cdfcac194f54e4596854e9f8f241145664f9eac4e3285c2cdfc5b3be36a781bee6ccbe2beb1a2b2f97661cc04c0924fc074bffa0f61091f35a662a5a06b1afe7602a0f315db27188c23ef6b2dd5b9a5fe9fb05b", 0x90}, {&(0x7f0000002140)="ad640fbbd7ca1a35f075b07072e73203b28628e569ba61730cc16ac3f7b4c4aa963f0e489d6b992456ca167bb34ec6e1a3b7a118eced7c0df58d8cfcf20a8837dfd7fca290e60bd8dcfb853b705675c5f87a0f44fc4d079ee250ca626fb4b5d484694cdbdf64859ce8f02833fbd0e9c729b173a169b645b1ea051abaefc90c3355ec653bb8169785704bacddfdbffc1645dfaafb9ab2b794f34612b28a2c401f405d760b5d9b10baf4c5ade99ea65e5e6ae137e2e3b5f8fc14f1927be0c7cf4bd6", 0xc1}, {&(0x7f0000002240)="afce59c59c1b79c1d1aaa025a380583d13a26b3970bc008e384903bfaf400fba8b7b57b630f632997678cdc333596874817a2bb2a6798220ea50c17b2693ef936af0a4b8c9b740e3727af20aaf3473b214b1a44666a76cb87d2e48c011e6b555f4a9aec0e499bd466cb5d494c8a338c4691d56fc8b570cccad0e326bc60a1f54ecf2dd7cd384", 0x86}, {&(0x7f0000002300)="0548f2966a5b730f4e91ca871ff50440501b2d2afa092d3d20d14a2790493b8f4972d74be5641c84302f8447e4eeeee5a2ece3b0d23b8b9f9951cb8e66c53fd478b775c696f16f7813cf9c76ceb87b7ced07f946cd970cbf1d0f10", 0x5b}, {&(0x7f0000002380)}], 0x5, &(0x7f0000002440)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002500)="295a16264f792aa741ece7ddb1bfaf5c9394516d01d7dc0ea31f8aec6dd8da", 0x1f}, {&(0x7f0000002540)="c34d0546d0753810800e864443b4e09f0611abe18e228f02e91e1855ec31a400b5d8ab8fae957e2ac035d3724e772ed1fab987488159b53c", 0x38}], 0x2, &(0x7f00000025c0)=[@mark={{0x14, 0x1, 0x24, 0xa}}], 0x18}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002600)}, {&(0x7f0000002640)="f700e189364bf7e9fa8a82c2ab827b7334f51ff8c7f557a625333d2a83813f379068ec7254cdb353df72e89e94de0b925340f053f40917592e02881d54854f5e60a23dac83909b51ea28791ba646581a63b74a5daf974dc339825684ebac97fc0928d1f2b3ff745612945ac6bcf261183cf95f782aad358768ca8b051df23b1df4370cad03cc0f6bc0defbe13d", 0x8d}, {&(0x7f0000002700)="abfeec6448725075cad69cca490edca88e37501c40a0f6d04a14dd5fd6e02ef06449db9db3d5afe40d34771e5d144f995776817947a3a485e72a856e352572a001240b842b7696e931905d7b559e0498da2697d2caa33531e9a25101b89a7c3661aa987aed803bc942d3fdb16c6cf4b3f2cf302391f24c32e487589087ddcef5ade250a3045cdee67c", 0x89}, {&(0x7f00000027c0)="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", 0x1000}], 0x4, &(0x7f0000003800)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}], 0x6, 0x20000002) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000889000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffc0, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r12, 0x40246f4c, &(0x7f0000000080)={0x30a32c4, 0x1, @ofdm={0x6, 0x2, 0x0, 0x1, 0x9, 0x3, 0x3}}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r1, r7, 0x2, [0x80000001, 0x8]}, {r6, 0x0, 0x2, [0xc1b, 0x3]}, 0x1, [0x7d, 0x8]}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 1m37.252213098s ago: executing program 0 (id=794): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m37.217445157s ago: executing program 0 (id=795): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async, rerun: 64) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async, rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) (async, rerun: 64) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1m37.1453048s ago: executing program 0 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) syz_emit_ethernet(0x4a, &(0x7f0000002240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "57c2dc", 0x14, 0x3a, 0xff, @mcast1, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100000000000000000000001811890e1cebb1b86ee542890000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m37.144443079s ago: executing program 0 (id=797): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffffff07070000000899040003d1", @ANYRES32=r1, @ANYBLOB="0c0099000400000019000000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1400c, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x9226}}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) pipe2(&(0x7f0000000140), 0x80880) 1m37.00293712s ago: executing program 6 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000640)=""/220, 0xdc}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x0) 1m36.945329906s ago: executing program 0 (id=800): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000240)=""/15, 0xf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m33.441209891s ago: executing program 6 (id=808): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000, {r4}}, 0x20) 1m33.148894147s ago: executing program 0 (id=813): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r0, 0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) accept(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {0xa, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=r4, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m32.940861518s ago: executing program 35 (id=813): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r0, 0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) accept(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {0xa, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02", @ANYRES32=r4, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m32.934912535s ago: executing program 6 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r3, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="75843f59e7d7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 1m32.453368182s ago: executing program 6 (id=822): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000300004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 1m32.203995518s ago: executing program 36 (id=822): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000300004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 1m26.733115723s ago: executing program 2 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) fsync(0xffffffffffffffff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000000082b00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m26.281622272s ago: executing program 2 (id=850): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfffb, 0x90}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000500)=0xb8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}}, 0x20000010) 1m26.137054874s ago: executing program 2 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x41, @remote, 0xcfdf}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x9d, "6a880eefb15012de4e0d19ab5c93e2d15f0486e19f47a559be595c3b5e917674ef7cde6ae44f4151ba872e0f08fda5f19792005be863ad6011bbf4cc07f5126343ff123d64a6721e661b628aeac862c199671281048375e5945ee5d08d177c84cbd5754298fe95ea3e309f1b078e961cba1c5466a414d7e43f75dd90898600456297d9b21fb19e2874975d92f7bb7737d59738cef14e0559402af9fcf3"}, &(0x7f00000001c0)=0xa5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000200)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$inet_sctp(r4, &(0x7f0000000580)={&(0x7f0000000280)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="660af4d4ae440ed03efe6c76a9d77b7dfbfaf66003313fbd50ff39c8c61229c4e24ca901fc5da91d9ec2b316e6e3b3437843e93fae1bb1f37b356377fdf9", 0x3e}, {&(0x7f0000000300)="2b728d53e92056c449c0973dbed87b75517be8b99d8e5c57a39d70cce4ab1f5e9b4c95f4d6c1bc96ea03bcbe6c183a0ad793fc90bd54256a33883866fadfc46353b5660bb7e6f45e967a7b3c867218a6b9a4d6e85a6f895099984c9cc98a5e479dde6b3e2276", 0x66}, {&(0x7f0000000380)="c5de67680d4f1e0ff9bdbc2e3577f49adb86d60a8571feb1242dc9685a8c7a95536554e242fbbe332c0dd02bd31fda", 0x2f}, {&(0x7f00000003c0)="b291941c038cadfe11b27c3a9f40d36ddbd0d2858df84932bbd59616886337957e06fbccba5ee53e67b3029c81044f94c7810fc0bb7966ffe9a8f7a21e883844a88957eedb0f7e0a5828acbfe06f82cbc843804a403eb134825d8a57b8377e7ddf6316b2f8", 0x65}, {&(0x7f0000000440)="3cfd0b965902f9f6c3a9c7b9", 0xc}, {&(0x7f0000000480)="e72e619687127bf5b8935351356fa592658e5890610c0f2c3ede3aaca576436115ca00bf5eb53558351c0e6018d77560a2ec410e6704b840a1e4c28dc296c3573c48abfe8c4d1cefd7b79a18e88c95358241cdaab0da0a20c75ca5c62f4fde2fdfc6268524ec69eabaaa6e5d1fb2610e0bfa21d4a7965ab53e11c0d3e83298", 0x7f}], 0x6, 0x0, 0x0, 0x40050}, 0x4000821) write$P9_RMKNOD(r4, &(0x7f00000005c0)={0x14, 0x13, 0x2, {0x2, 0x0, 0x1}}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000640)={r2, 0x7}, &(0x7f0000000680)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000640)={r2, 0x7}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000006c0)=@assoc_value={r5, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000006c0)=@assoc_value={r5, 0x3}, 0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000700)=0x4) getpeername(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000007c0)=0x80) (async) getpeername(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000007c0)=0x80) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r5, 0x2, 0x1}, &(0x7f0000000840)=0xc) r7 = msgget(0x2, 0x346) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000880)=""/254) (async) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000880)=""/254) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x150, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x187}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x122, 0x2a, [@perr={0x84, 0x11c, {0x2, 0x12, [{{}, @device_a, 0x80, @void, 0xb}, {{}, @device_b, 0xfff, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x3d}, {{0x0, 0x1}, @broadcast, 0x8000, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x7ff, @value, 0x2c}, {{}, @device_b, 0x29649a4b, @void, 0x42}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x32}, {{}, @device_a, 0xfffffffd, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0x7ff, @value, 0x32}, {{}, @broadcast, 0x6, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x21}, {{}, @device_a, 0xce5, @void, 0x2}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x16}, {{}, @broadcast, 0x1ff, @void, 0x4}, {{}, @device_a, 0x6, @void, 0x7}, {{0x0, 0x1}, @device_a, 0x8c, @value=@device_b, 0x1f}, {{}, @device_b, 0x40, @void, 0x6}, {{}, @broadcast, 0xd793, @void, 0x3e}]}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8884}, 0x40) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000c40)={{0xffffffff, 0xb9}, 0x100, './file0\x00'}) recvmsg$kcm(r4, &(0x7f0000000e40)={&(0x7f0000000d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e00)}, 0x2140) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000ec0)={0x14, 0x28, &(0x7f0000000e80)="595ba8dcbaa1244b3e49afd2b0f71e1b8259d2e167cc90b39dc773e8a7c344001016c9399a0505b9"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001000)={'erspan0\x00', &(0x7f0000000f80)={'gretap0\x00', 0x0, 0x20, 0x10, 0x7, 0x0, {{0x9, 0x4, 0x2, 0x3b, 0x24, 0x67, 0x0, 0x94, 0xdb6ad1f39c2ef69f, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x6, [{@local, 0x9}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001000)={'erspan0\x00', &(0x7f0000000f80)={'gretap0\x00', 0x0, 0x20, 0x10, 0x7, 0x0, {{0x9, 0x4, 0x2, 0x3b, 0x24, 0x67, 0x0, 0x94, 0xdb6ad1f39c2ef69f, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x6, [{@local, 0x9}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d0e80, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000f40)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000001040)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001080)=[r4, r4], &(0x7f00000010c0)=[{0x2, 0x5, 0x5, 0x2}, {0x1, 0x5, 0x3}], 0x10, 0xbee}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d0e80, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000f40)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000001040)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001080)=[r4, r4], &(0x7f00000010c0)=[{0x2, 0x5, 0x5, 0x2}, {0x1, 0x5, 0x3}], 0x10, 0xbee}, 0x94) close(r3) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000011c0)={{r3}, 0x0, 0x3, 0x7f}) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000011c0)={{r3}, 0x0, 0x3, 0x7f}) accept4$inet6(r4, &(0x7f0000001200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001240)=0x1c, 0x800) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @desc2}, &(0x7f0000001300)={0x0, "48f5e9f50e3ebba3aa06f486c66cb8b73ea44c997c13ade97f8049ea280640281e2714d281191cd0246fdd8996270c8230792457f2942520852edabf0abe3d07", 0x15}, 0x48, 0xfffffffffffffffb) (async) r10 = add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @desc2}, &(0x7f0000001300)={0x0, "48f5e9f50e3ebba3aa06f486c66cb8b73ea44c997c13ade97f8049ea280640281e2714d281191cd0246fdd8996270c8230792457f2942520852edabf0abe3d07", 0x15}, 0x48, 0xfffffffffffffffb) r11 = add_key$user(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x1}, &(0x7f0000001400)="89961479212c3db853758e51d4fb0399440a389ba1b801ba5f5616cfb1bcdcac85f66589b61b8201dbaf3ff650e0396c84d103af8512228b5b13da58f0a2724e05ea1a7e407561296f826377af56c9679e07a93cdc9c6da5d69ccdcb7b7941c0117cd43e3b18682d4cf984a4f762e460d4c7509d10bf5f6b0bcd42564e673466bf3b4f1acb16f6eb", 0x88, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000014c0)={r10, 0x0, r11}, &(0x7f0000001500)=""/174, 0xae, &(0x7f0000001640)={&(0x7f00000015c0)={'wp384\x00'}, &(0x7f0000001600)="0d4c8f779745cea48826c7a9c3b71a8751b2f6ac48574a4bb009792af4a2846aea4fb0d0", 0x24}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001680)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001680)) 1m26.074819588s ago: executing program 2 (id=853): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000489422302fd17e5ffff0800040400b2e3e1000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x3fdd, @local, 'veth1\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0c00000088635aa7dd3f"], 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18f", 0x4b}, {&(0x7f0000001340)="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", 0xf46}], 0x2}, 0x9cdc2384056b48b8) 1m25.752872692s ago: executing program 2 (id=860): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0xa4000160) read(r0, &(0x7f0000000080)=""/68, 0x44) r1 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x214000, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643d9277afb570b949", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000004,max_read=0x00000000000000fd,blksize=0x0000000000000a00,blksize=0x0000000000000000,max_read=0x000000000000007d,max_read=0x0000000000000008,fsname=oldalloc,permit_directio,obj_user=overlay\x00,fsname=ext4\x00,\x00'], 0x1, 0x0, &(0x7f00000015c0)="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") mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x81) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[], [{@obj_role={'obj_role', 0x3d, '\\'}}], 0x5c}) 1m25.413184699s ago: executing program 2 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x297, 0x3, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x81, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8003, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffdfc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xffffffed, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x58b741) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x3, &(0x7f0000000a40)=[{0x1d, '\x00', @data=0xc, 0x400003}, {0x34, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x0, @svalue=0x9}, {0x3, @svalue=0x2}, {0x3, @uvalue=0x8}]}, 0x1}, {0x32, '\x00', @data=0x7, 0x4}]}) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000093) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) 1m25.254860348s ago: executing program 37 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x297, 0x3, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x81, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8003, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffdfc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xffffffed, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x58b741) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x3, &(0x7f0000000a40)=[{0x1d, '\x00', @data=0xc, 0x400003}, {0x34, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x0, @svalue=0x9}, {0x3, @svalue=0x2}, {0x3, @uvalue=0x8}]}, 0x1}, {0x32, '\x00', @data=0x7, 0x4}]}) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000093) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) 1m2.092998688s ago: executing program 9 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000000000000d5eee1830000000000000000000000f551bdb71435eeb91e90ce453c6d234d2736882dbc7a767405fbe75d63f3756ef8967a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x18e) mkdirat(r6, &(0x7f0000000000)='./sys\x00', 0x1f7) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x4084, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf6, 0x327, &(0x7f0000000b40)="$eJzs3ctrG0ccwPGf3pJdVz6UUgqFwYXSUrxYgt56qCk2lApabKtQFwrrWm6E1pKxhEEhRDoEcs05Bx9yDIEQyC2XEHL1JX9BXjdffAjEEOMJ+5C8Wq0tO478IN/PwRrPzG9/sy9ZHq1W2z/fWq2s1I13Oi6HacsPTzdffDP/5DP3d6VmpxdyeaWiIvLPtXsTjxujfz38/FFKtsb/3d7Jv95Ki8j+whWJqnJdVbXWWi3Vao2IHbxcrlcMpf60SmY94iVQptNuLlkltWLV1taayqwuj42srZfqdWVWm6pSaqpGTTXWm8r83yxXlWEYamzk0DF/Usa7pWhfm7uJ0+GBxbu7WsuOvYNSbdFaR/r7tDuFhPe4r08/YlwQgf1/ZN++gyM2zJHhLOzqeHf/Jwfs/17aM8TBYeh2tX0Sv7ztnv+t8x4Oztj834u/TxcKM3NKpUVWb24UN4ruo9v+fFTKYklJNud+XNw7OOu1loj9c/a3wsyUcozLd6stL761UXT/OEyvePE5ydqvU3zx0onPpdwF9MYnZMQfn5esfBEen1devER98Un5/ltfvCFZefaf1MSSZefZ6yD+ek6pX/8oBPL7XlUBAAAAAAAAAHDJGKrrYP4+0n2rN2MYKeeKj257xq525scd3fn1KcmK8/5ARoLz81MqbH4/Ll8ffskJAAAAAAD4iOrNqxXTskrrpyzomEhIU+xOpieFTrlp3ZqEiNgFkRsTdu2RKb70RhzaJy6BmqR440n6O8cCKdKhuVJiFzI/ufnuz3kDC6YYUBCR9mm36sBCVET8Ne6HNeyVtx50+mQkLCp6ogNgMhm65dNDX0F/QY7TufNRl5OmSDkrmJHWiQcW2evUfBXaR0cGL0ebVqJ72Dh6+rzpj/ol9HRIi1tIHG/we1rrQNPkK3e51hFPGm+59B8AAAC4jHz/OAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPyQXdi69y3v7dJvK+ID9wiLiQp9/0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAG9DwAA//9cLajk") sendmsg$rds(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/12, 0xc}, {&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/180, 0xb4}], 0x9, &(0x7f0000000f80)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x401}, &(0x7f0000000e80)=0x3, &(0x7f0000000ec0)=0x783, 0x4, 0x0, 0x401, 0xff, 0x0, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x6}, &(0x7f0000000f00)=0x8000000000000001, &(0x7f0000000f40)=0xff, 0x5, 0x100000000, 0xe91f, 0x4, 0x49}}], 0xb0, 0x4004}, 0x20040890) 1m1.875615559s ago: executing program 9 (id=976): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x4, 0x3, 0x37, 0x6, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}, @empty, 0x40, 0x700, 0x7, 0x4000}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=@RTM_DELMDB={0x138, 0x55, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x5, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x0, {@ip4=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x22}, 0x18b67}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x1, 0x4, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x1, 0x0, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x4, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x93ba6633154845f9, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x6, 0x2, {@in6_addr=@private1, 0x82dd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.368709891s ago: executing program 9 (id=981): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x8000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000080fa000000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0xfffffffc, 0xa, 0x4, 0x100, 0x8, {0x77359400}, {0x4, 0x2, 0x7, 0xfe, 0x2, 0xd3, "6a7db11a"}, 0x8d4, 0x2, {&(0x7f0000000040)}, 0x7}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r2, &(0x7f0000000300)="c6ed9ff55dd7a7d044562f5c9b820e3034fb7047f724b6935752040ffc3b805aa9b36840de9275b840fa37785c398ecc802d1041e8fc059883d220ff87cd2dd2227b625401395fad5284fc9dcf0e8c36ad9133e16cec13511b997a88aa02ba2bb3978cf49aa8a16e7627cef656dae57d7f41734e3156c2875482f5cd", &(0x7f0000000380)=""/202, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x5, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 1m1.096909648s ago: executing program 9 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500"/18, @ANYRES32=0x0, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="08000d000000000008000c006400000032000e0080000000080211000000080211000000505050505050000000000000000000000900090000060101010101010500a30001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYBLOB="fbcca100", @ANYRES16=r2, @ANYBLOB="030728bd7000fbdbdf252d0000002f004500832f23cd8642b24f672001d457e03f928ba062d53116508f1a2767b10281eb2cb4499e7b3b3cee8002f6180003014500e2d9856127524d33cea200640cc2a16b8670d3ca4d4fb76b0105e80c5fa249dc86576f8fdec670c4f7d69ab936e88e77011810bd147b3ab95ea122e3a0b635ec90167a14a45fcf3dac16e0e713b455c9de09f3f231d4656c6e4680200e2748ec9d249c39876767ea3c4749cd42e16c2167f595d1dc6d8a09b2e55aa2c38338d6db482e9b165afee366a3d70bbb52195b091d3a76a3df14a53bd44a32d11a50a9f1ee769054495ba4783bf4d6c47e364d7bfb34bb81df8ff4e969fc680b41c616d09d267287a178b638b15b37888181e92ded2c35aec23c8d59e36196e90fb4aff5e110af65c058afe1f592fe9205277d6890686aaf4d614c0954c91501ad1000ae0045000411cf92ea72c19ac2ac00f04daa7d2c18f8e8f75229274f7f979ef68e64cd8532c0b55df6b93dc2af7fe1d24f9bb4dfa24db402570c07ea6415b8626f71f12b6ccbb11c6c7ca8321ca5a40a1508f54e25a5312897e90b7be4df74e101872a985662bc270bc71e039770ae931c8d18755dfcf179e57538928170bcf9ec381ae082ff346951750e403781045623def19f6c536a633150a290092496e7e30e6c206d9b2b3399f857e8feb70000ae00450020a3a78d6ca4bc10424f9cfe49a69c659732fbae94d52158f1f166904095e0c841725c5b9d2c369d581246efcee7a5409dd8bcb0396316fe2b47703050eaae821024c13e541e98e421a4742a4574f377f932553b6f8a07490517a9d582f7d0cd57f8168e41450f20752cb8cfc01433735024f19fd5069d6b7b02c6c1c314a680d59ae0b6314d997c553b1f43a781b1046fbd741cb45a8ef317185f57ddaaaee0ab6fc2c9f7548f2aa41b00004c0045009b5973d329fcf5ce1c4f65e4b5ccd57a50c264c1101727c04d74f60602ab6cdfe521f3c8139fac2020f972d40aaa4d961a3c5ed58c3516c57623121bd03882516ea9ff8144196456da004500404186da0a72b4ba067f31ea5432ecd4474d110ae0eed639e69e7d64b692941b8209efa1e5e1093699a591c7cdaebedbac3bc725d90033a8e888b6b41b642a448a8554421391fa6c34314fd5395ea6e03ef7deb49dfc322be3161a6f20705e01f6d206ee1cbf37d89649101be846fbf47f71460d30c7e979ce90a15e5aa5fcf5c3f5afde7dd5016bf0ac1f2bf7a8d1727966d8857bd5492fdf9ea4d3a4b0ac1230ff65bbc6c9e5ca5c3b03c45d49cf2855b3f17a01ad3cb9ef51d7a40bd5280ea249418350c6fc504b7466ba46f3498351073b051f5a0000"], 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x8004) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket(0x10, 0x80002, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xfffd, 0x0, @mcast1, 0x400}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="d2eb082492bd46dbf16fd54e7c8055dcac1df1058087b36e03b60f1f00f85121b7926b9ba3019f126586dfff62e2a8cdfc2bd2d10a0f3336b059c7c0cb409e50a65230704cdfd4856bdf8d87ed2204bbc578627f5f0738d23a592d8738a83a12c9eb88a1b4f02064c6bd63546323d2a7e29a324ccbd3a047082160d5b5b0b7f88b94261e1eb9fd607879b4147d45497b2ed4422cfd262ec2659bae4e17f10a24a1ee41d6260eef9cf2e8c014b181"], 0x1c}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a3000000300080005400000001d28010100000000000000000700000008000f4000000003090002007379000000000000000084000a00000000000000d7ebd32cf22b678fd2861d3d8e12a865da9d6a7b731843878db88a1d4902859804572eeae3"], 0xac}}, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond_slave={{}, {0x0, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x45, 0x5, 0x8}}}}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f00000000c0)=0x2) ptrace(0xffffffffffffffff, r9) 1m0.801052632s ago: executing program 9 (id=987): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="8e69e1919d8ff7de6d3b0b25fd999ab9f35d6b6ffc2faf3304c26c2d510e37ede1a60bef452be2e9bfa35070277ce1abaa94559219ab7465cc0c3f556ca2d453bf1a151ab5d6ad4047c5df0530b9d6929f5e1e7eaa65d6324f97000ed0397bebda9c28804e23f5cf58d0b6e7aac486bf3261161764cd5b981f9cd8275652ae111126df21d0f4ca08f596a1590adb11bb2a74661d0a3a44c3ae430fb7a4fbc9882d594b6e4ac65eadacf4f6538fd04bb35807a0d161e62b4fe34c7d68a433f48a1e3de0f87107d453", 0xc8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428e4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0xe6}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r10, 0x1, 0x70bd27, 0x11, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x29, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r13, {0xb}, {}, {0x8, 0xfff4}}}, 0x24}}, 0x40004) 59.521506521s ago: executing program 9 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x2000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) 59.225875368s ago: executing program 38 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x2000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) 7.873283032s ago: executing program 5 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x0, 0x37}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48) r5 = fsmount(r2, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r6, &(0x7f0000009f40)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) r10 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) 6.212057149s ago: executing program 1 (id=1310): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) (async, rerun: 64) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x1, 0xfffffff8, 0xa44e, 0xf84, 0x14, "cf24eea926cce0e9e9bde057e88a6e65d0471f"}) (async, rerun: 64) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) (async) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000f603010000000000000000000000000a20000000120a05000000000000000000000000080c000640000000000000000214000000ebd70fb3da518ca603010000000000000000000000000a"], 0x48}}, 0x480c0) (async, rerun: 32) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) splice(r4, 0xfffffffffffffffe, r4, 0x0, 0x9, 0x8) (async) unshare(0x2c020400) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0x83}, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x401, @private1, 0xb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)="520d6343d4d2ed7749bb6848b57661903fc3349232d08793a4241b20e9bdb76b35af5d8476f362c02ac743ca2ce9e94338906b3ed4e40e3893d2dcaa49c57700e705a25401a55da0385356554762bdb5c63d34bc127445e65b6add5543142482577af9fdeb4a5fe8a235c2bf6142d040c18b2ebc679ff64134cd74f680f50331b9cc68579dea420b0578d1b1d22cd2ab4124f535efe8622ce96ebc", 0x9b}, {&(0x7f00000001c0)="c5dfabd073033c1e4b9a4d6d9c2bb518a5b0ada6bce07aec9df7c0ee40c872c2408404cac8a8bb2badbfd8ea09f43db68607e428ce5e298115b94daa5e2bfb9e03295b05a8304378d36cd12c70359ed5f6001b21e0bedf800408d32dc7507ba28369c3544f014425c1b97997923436c7c1038312516cde33f6b536ad9678275703e5e8193e8b6e817e187fd356cd4239a17d9f1eeca926d5cf99d94640acb35f616c4c0b05e205e0767b12c1b5f11254f85d7f8bee99cf37a2e75c4c0f24a6b7", 0xc0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="5520d6fba4047f73991fdbbea7db2487f0d7f3c1a670763f28145898e4", 0x1d}], 0x4, &(0x7f00000003c0)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}], 0x38}, 0x4010) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x401, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wVdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 6.100315375s ago: executing program 5 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x1df, 0x2, 0x4, 0x0, 0x1, "0300ffd76d7fcb940f00", 0x2, 0x201}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r11, 0x211, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "59072499c4"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.001306909s ago: executing program 1 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000040000701feffffff00000100047c0000340042802e00218008004000173c00005fa5560201003f7338f5497fec0ef590cb21bfad7194a8ff23d5ef1e3adc000008000180040006002b22f75d3983b6ff2e23c9150f6093e90cbe26b22622d646939b772b33603c4c4d09144a0e50d972bc022fe86cd7f5bcd58390caf918d9a9071be6c4de43b39287d3575c226d66b08ead1ddbc844845ceda6bbc5edc898f7ec832ae1d90aad5d4c93d1e8de4cc72bcb4bfd0168fe0aba05e3bac46259f636647e3940a2443527c9663aea1dac29f4d09a528f1f72a311"], 0x50}, 0x1, 0x0, 0x0, 0x48015}, 0xc000) 5.892893863s ago: executing program 1 (id=1318): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e39352c696f636861727365743d6d6163726f6d616e69616e2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c636f6465706167653d3935302c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c757466383d302c6e6f6e756d7461696c3d302c6e66733d7374616c655f72772c73686f72746e616d653d6c6f7765722c00944453ef35b0176b50b1d13c74df1cf2b56c0bc420601f8bd01cd79b8881cd58201796d5a8142f8b4d70a616ca52a4b283f18e3a8786a640b29cb5e2693e298d0617d73be570accd804531535e8d7606d240a20a1c5fe4c40edb39fb0f7606f2382122c52b09ebe2fb815a44ecfe3cd8c83c865e40b4be8ed3a645c698a7c7138583cdbc42ec5492d04b1d46b4c44ac21e9dc7a325a651fcba66bd7dc78d26b8be219e888a323cd00394abc3787bce8fb3a0b3ce69fee1e05fbdb40ec266dcedf82f864bd16a000000"], 0xfd, 0x2b0, &(0x7f00000007c0)="$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") (async) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0xe}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d414000000000000002900000003000000", 0xfe60) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x127) 5.554219614s ago: executing program 7 (id=1319): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x771, &(0x7f0000001280)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000050018000100000004001f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000022020000000000000"], 0x2c}}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00), 0x1001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5.552065128s ago: executing program 5 (id=1320): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000080)={'ip6gretap0\x00', @ifru_map={0xffffffffffffffff, 0xd89, 0x56fd, 0xf3, 0x9, 0x9}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, r2, &(0x7f0000000600), 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000540), 0x200400, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000005c0)={r5}) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000001020400000008ffffffbd0301000000000095000000000000006916320000000000bf670000000000001706000007ff07006706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.377231312s ago: executing program 1 (id=1322): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0xf07, &(0x7f0000000400)={0x0, 0x595d, 0x0, 0x20002, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SOCKET={0x2d, 0x2, 0x0, 0x3, 0x8001, 0x0, 0x2d, 0x0, 0x1, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x7}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x1}, {}, {0x8, 0x1, 0xee00}]}, 0x5c, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) io_uring_setup(0x4ded, &(0x7f0000000240)={0x0, 0x54c4, 0x1, 0x2, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) utimensat(r7, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) 3.715983398s ago: executing program 5 (id=1324): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) bind$inet6(r2, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cc, &(0x7f00000002c0)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000827bd7000db05cc38010000000000008000000001410000001800170000000a9ca000057564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 3.596901996s ago: executing program 1 (id=1326): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa0081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}}, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75c71529}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000640)=@x25, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)="a3174eea8e4b254b13d256444fb7cf4c7a62922f12ec8775b937b039e5abf7d03d38b5876a0865e1106ae0cf3df84eeb582038b34f46c09027a8b2271155deca94b521496ac75abea41bd5a2a6e7cbcab094f708f9b3cd2659b0d7eb47d83b3bfb92c425db7256278ddba9ff4498fc30131c0440c3eaf8d7679c476732c8af12299647c04308738d2c9bdffdf8fdb98a887acd6f3476a06d5a291b21ad04ea02679a9d9ce37cf9f177cf7b71c42d5a4ab0d872f18f699594533c07ff6faa35253cf5c63f5c7bf97396ea76db63fcf88bb015c52fd988c3efad9c7907318dac699d57a2cf9ef16dd03a19f730444b27112b", 0xf1}, {&(0x7f0000000a00)="a5209cea272569231a643a8f881386a6d8d709de0e852bb7bcfe18c6efab1dafdb279d207881907010645857888e30bc55d66f9d7416e02773a43634e65312bd9f7ad667cf4adf5b7e4c683a768a33dfc193505937bf108509a15ec94e353bab4b76aed2e92c00524433b15b0446bff7cd6a0a6aa7f02e181799fa853a50eb901a7d30a073f480f908b8333f416834a98229f588109b5a464883fc1504598bf6fdf9a918bb57b4aebb8a34d06eab2ce738df69f7d70f44cbd945f9571f911350f5bceda5de9081865a72b2bf7358911af68a4fc35ba6bbba799f83b8", 0xdc}, {&(0x7f00000008c0)="7789bc5d8da460a2adfd2e4f48fd942f2669678fbe82a664b1f681b6766229bdf4fc3f1fc5d8d8b1860e6625c4dec5c2cf50e61986cff77900bddbc3f334902f7afc041e661b477a80b0a5b254cd5cded700a2fa03b972ca07f50011a221eee38ac612f84d93e35e351285d35ca4892cae5b76d892628284720a3f5106b1db885a25e15f70b6af49dd992a9201e19c1fcaf670c1c1a440704f09137f2cbd9676d1e454e0c3a1582914c40f6a38bef0d75598805e400b53c3bdf156a48c5f7a1c84f043ba1c30c3c36b9c264e91ca25a2f5be58b84d3490f95a958654e46566b3269b0505c2a8aefa8ca41480", 0xec}], 0x3, &(0x7f0000000b80)=[{0x68, 0x112, 0x1ff, "a2c6dc77985405ef61b760a20dee8329b1ac4f90ac2f7ffc498a28835e9babb7b8d7c2ca04639d09d5eae89ec711b5e0831d1000c5a171f5309694544976b469b1d69d51b75138e67b6dc3d6f7e9abf30000e9fbcf8b"}, {0xb8, 0x10d, 0x0, "31636a928cb760c491a79f327afb95a269affac3bd827b33e333678b14a3803a97fe3c7a65d2cef761ffb8cca59ed744ceda1a388260312ebf6df5e16605dcb2f082acff4cfaf19490394335b080b4616b08baed53cba853f155d981809db8fa43518cd1ad76d06ee72e8beaaf410a5a911a169259dd17409cf1db4148cd0cfaf09cc606d1ed6c6c2ba17935e23d8d47e2592b245d8091a56fadb2d6c712269f9abb45d475d16cf3"}], 0x120}, 0x4) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r9}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f0000000000)={&(0x7f0000000340)={'sha1\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r5, r5, r8}, &(0x7f0000000380)=""/5, 0x5, &(0x7f0000000600)={&(0x7f00000003c0)={'sha256-neon\x00'}, &(0x7f0000000580)="2fd88323aef7b0495fe29330cab83722ca524f71e31a61398e07fb93f9c738ee5028c9f98b65522da02d58089d988fde22d99dcc9ae2f97440f9eae4d054979ac05eb8a4071cf3552c475d3c39f454f8e9b33c066d32ba50c7d26599fa487785efad4ac965555a0abd22def66f4855eb112e2570a2d89b9ed7", 0x79}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'sit0\x00', 0x400}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x5}) 3.525284862s ago: executing program 5 (id=1327): setuid(0xee00) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r0 = syz_io_uring_setup(0x48ce, &(0x7f00000004c0)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x3b7, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff}}}, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2}, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x11a}, @l2cap_cid_signaling={{0x116}, [@l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xc, 0x9, 0xfffd, 0x101}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x9, 0x1}}, @l2cap_conn_req={{0x2, 0xff, 0x4}, {0x3, 0x2}}, @l2cap_conn_req={{0x2, 0xc, 0x4}, {0x6, 0x4}}, @l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x200, 0xffff}}, @l2cap_info_rsp={{0xb, 0x81, 0xe6}, {0xf, 0x7, "5fa67aac1b98e37bd525d029426ea637076d9253f5c3ad8687a37eed2d0cfbe2c747c26f8691cf277c35a9afd8f5766a3a32b6a9cc12c200300738b9bb4d219a9bcd04471ce0c8f09c185e435d3337b72c71afd808d04e82230e5d7514679464580197137ac85861cd611a2fdb998c3d22a11d0e46427c12e413cd97b70fc6f5c6bda62dfd053d4365a77402d99772af3fcf5a3cc09e244c7cfde5f4536a1ba1b10a0e279e25a44a7451743bcf23796cb3948d3601d510d73cfa98d97c12d7390346cb9228d9979471e6be99af1109fb2de161636e0805331cda1b6147202047de19"}}]}}, 0x11f) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81, 0xc8}}}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x73}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, &(0x7f0000000b40), 0x0) socket$packet(0x11, 0x2, 0x300) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r10 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r10, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x4f0a}, 0x8) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000640)="afc806e0963da158e0d2511b6b3e2df5f77de46824a86f", 0x17) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.686572217s ago: executing program 1 (id=1332): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0xcf0be2279761c16b) setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xfffffffffffffeb5) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0xfb4c9485be8f5007, 0x3, 0x7fff, r1}) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) socket$kcm(0x11, 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000000)=0x0) 2.356954354s ago: executing program 8 (id=1334): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xfa}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.093290977s ago: executing program 8 (id=1336): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0xf07, &(0x7f0000000400)={0x0, 0x595d, 0x0, 0x20002, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SOCKET={0x2d, 0x2, 0x0, 0x3, 0x8001, 0x0, 0x2d, 0x0, 0x1, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x7}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x4, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x1}, {}, {0x8, 0x1, 0xee00}]}, 0x5c, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) io_uring_setup(0x4ded, &(0x7f0000000240)={0x0, 0x54c4, 0x1, 0x2, 0x2ff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) utimensat(r7, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) 2.064157499s ago: executing program 3 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_measure}], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x604880, 0x82) r1 = fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x7e, 0x2fa, &(0x7f00000010c0)="$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") fanotify_mark(r1, 0x80, 0x8000000, r0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') setfsuid(0xee00) 1.916344643s ago: executing program 3 (id=1338): ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 1.733281419s ago: executing program 3 (id=1339): openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7ffff6, 0x10, r1, 0x6000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/73, 0x49, 0x9) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x3}}, 0x20) (async) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x3, 0x9, '\x00', &(0x7f0000000080)=0x8}) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000100003052caa7000e327df2500000020ba7eb3fc4b2b3c0f426d30433da6e4ec4fcbc09fc518719b9c000000000000ca80d35ea1de535d48bcabe18493b326a9b37ab2281397e886d3fad44f71a4dba6307b327fc19016bb708733e8b8d43046745ddd3150ad1d0a4b9731e61fda63b2bafd735b61b25e28389164320cbc96b1ca59ee7ae27f2da39958e638d9303bc3ac634deb4441052173520413d73b3490ef", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x400c811) (async) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket(0x1d, 0x2, 0x6) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.694876686s ago: executing program 7 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xeeeeeeee}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$binfmt_script(r4, &(0x7f0000000440), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000000000007118be000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) connect$pppl2tp(r2, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001300)) readv(r2, &(0x7f0000001240)=[{&(0x7f0000001080)=""/182, 0xb6}], 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc04}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x4, 0x87f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 1.568121903s ago: executing program 3 (id=1341): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0102000000f5ffffff00010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 1.496834937s ago: executing program 7 (id=1342): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8480, 0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000140)) prctl$PR_GET_DUMPABLE(0x3) r6 = getegid() mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@noxattr}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@noextend}, {@noxattr}, {@version_u}, {@mmap}, {@uname={'uname', 0x3d, '[%{#:!]'}}, {@directio}], [{@subj_type={'subj_type', 0x3d, '/dev/net/tun\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/net/tun\x00'}}]}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000024c0)={0x0, 0x0, 0x0}, &(0x7f0000002500)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002840)=0xe8) r12 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000029c0)={0x10, 0x7, {}, {0xee01}, 0x8792, 0x400}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002cc0)={0x3ff, 0x1, {0xffffffffffffffff}, {0xee01}, 0x7fc7, 0x1}) r15 = getegid() syz_fuse_handle_req(r7, &(0x7f0000000340)="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", 0x2000, &(0x7f0000002f40)={&(0x7f0000002340)={0x50, 0x0, 0xe, {0x7, 0x2d, 0x8, 0x78842002, 0x3, 0x1, 0x7, 0x6, 0x0, 0x0, 0x10, 0xd}}, &(0x7f00000023c0)={0x18, 0xffffffffffffffda, 0x5, {0xfff}}, &(0x7f0000002400)={0x18, 0x0, 0x6, {0x2c7}}, &(0x7f0000002440)={0x18, 0x611aadb5ff903139, 0x9, {0x8}}, &(0x7f0000002480)={0x18, 0x0, 0x7, {0xca7}}, &(0x7f0000002540)={0x28, 0xfffffffffffffff5, 0x1, {{0x7, 0xffffffffffffff20, 0x2, r8}}}, &(0x7f0000002580)={0x60, 0x0, 0x44, {{0xf4c2, 0x9, 0xffffffff, 0x2e, 0xfffffffffffffff8, 0x80, 0x3, 0x4}}}, &(0x7f0000002600)={0x18, 0x0, 0x4, {0x9}}, &(0x7f0000002640)={0x14, 0x0, 0x0, {'}\',\x00'}}, &(0x7f0000002680)={0x20, 0x0, 0x101, {0x0, 0x7}}, &(0x7f00000026c0)={0x78, 0x0, 0x4, {0x4, 0x8, 0x0, {0x0, 0x6, 0x7, 0x8, 0x693, 0x40, 0x2, 0x6, 0x81, 0x1000, 0x7, 0xee00, r4, 0xffffffff, 0x6}}}, &(0x7f0000002880)={0x90, 0xb, 0x80, {0x6, 0x3, 0xfffffffffffffffe, 0x4, 0x83c4, 0x8000, {0x4, 0xfffffffffffffff4, 0x6, 0xb, 0x0, 0x4, 0x9, 0x1, 0x20d3, 0x6000, 0xb9, r11, r4, 0x7f, 0x9}}}, &(0x7f0000002940)={0x68, 0xffffffffffffffda, 0x7f, [{0x1, 0xc, 0x3, 0x0, '(-\xa4'}, {0x3, 0xb, 0x3, 0x0, '@}*'}, {0x4, 0x4, 0x0, 0x5}]}, &(0x7f0000002a00)={0x290, 0xffffffffffffffda, 0xffffffffffffffff, [{{0x6, 0x1, 0xe29f, 0x9, 0x5, 0x1, {0x4, 0x7, 0x3, 0x1c6, 0x9, 0x8, 0x98a, 0xff, 0x3, 0xc000, 0x9, 0xffffffffffffffff, r12, 0x400, 0x7fff}}, {0x3, 0x8000000000000001, 0x8, 0x6, 'directio'}}, {{0x5, 0x3, 0x2, 0x3, 0xc, 0x6, {0x4, 0x2, 0x0, 0x8, 0x9, 0x7fff, 0x3, 0x642, 0x3, 0x7000, 0x3, r13, r2, 0x4, 0xfffff4c4}}, {0x0, 0x3, 0x3, 0x5, '.(:'}}, {{0x1, 0x0, 0x0, 0x2, 0x60779f7b, 0x2, {0x5, 0x3, 0x3c, 0x9ef3, 0x6, 0x8, 0x2aa, 0xffff8001, 0x25, 0x6000, 0x9, 0x0, r2, 0x7f, 0x8}}, {0x0, 0x8000, 0x7, 0x8, 'dfltgid'}}, {{0x6, 0x0, 0x6, 0x9, 0x405, 0x1000, {0x0, 0x0, 0x6b6ef44d, 0x95e4000, 0x2, 0x1000, 0x0, 0x6, 0x16, 0xa000, 0x81, 0xffffffffffffffff, r6, 0xfffffffd, 0x7}}, {0x1, 0x0, 0x7, 0x3, '[%{#:!]'}}]}, &(0x7f0000002d00)={0xa0, 0x0, 0x8000000000000000, {{0x4, 0x3, 0x9, 0x5, 0x3, 0xa88b, {0x3, 0x9, 0xffffffff, 0xc0, 0x3, 0xd7, 0x2, 0x3, 0x4, 0xa000, 0x7ff, r14, r3, 0x80000001, 0x3}}, {0x0, 0x2}}}, &(0x7f0000002dc0)={0x20, 0x0, 0x9, {0xfff, 0x0, 0x5b, 0xdd}}, &(0x7f0000002e00)={0x130, 0x0, 0x3, {0x9, 0x5, 0x0, '\x00', {0x4, 0x7, 0x5, 0x1000, 0xffffffffffffffff, r15, 0xc000, '\x00', 0x8, 0x3, 0x6, 0x9, {0x100000000, 0x80}, {0x7, 0xfffffff9}, {0xe, 0x6}, {0x3, 0x5}, 0x5, 0x1c, 0x588, 0x4}}}}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd3320cdc1fbd83f7) ioctl$TUNSETOWNER(r1, 0x400454cc, r9) preadv2(r1, &(0x7f0000003440)=[{&(0x7f0000003000)=""/121, 0x79}, {&(0x7f0000003080)=""/132, 0x84}, {0x0}, {&(0x7f0000003140)=""/81, 0x51}, {&(0x7f00000031c0)=""/36, 0x24}, {&(0x7f0000003200)=""/149, 0x95}, {&(0x7f00000032c0)=""/99, 0x63}, {&(0x7f0000003340)=""/250, 0xfa}], 0x8, 0xfffffffa, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003500)={{0x14}, [@NFT_MSG_DELSET={0x1c0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4d7c174f0af12ceb}, @NFTA_SET_DESC={0x11c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b4b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34d4b4b9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x809}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ca}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x58, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x8f, 0x7, 0x1, 0x0, "25a6747bcd91172d1b3bc908939f8379cd2b7765d34a297ef77f08f79801ab17fe56b3cc1e2d7cf231c2484f5c95b642ff460837b329329d03295b8dcc169bf4223b6450621c37d8ac2252f77ce7663ae33791132cc907efb8f21960f199931d5a6315f0afa23ebe8364343258bf315724e2aa31e345929d6b74461760fea92b6338f5164bd717e2f64f7d"}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x5, 0x0, 0x0, {0x12250e28de8f3e1b, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x5, 0xc, '\a'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0xfc, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0xa7, 0xd, 0x1, 0x0, "2361a7730dd5f8c6260428a51c0e853e976413da4c6e82e2695c58253cac7663b4e2e7f1d8658d8cca0325508fdd944986828932ae3a3c79612e71c2f412d72a435ef182dc147a661d9bdcfcc0655521eff725305b74fa322ead84da888d90825bba6150128612af2f6611b7a4c816122d90aa9e07d36cf9287053cb66e36ec373c725c26c70dc044a4ca0fc5c8a86a3b1787d6fdc12a4d48304cc1fa42e65464a0a62"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb06}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSET={0x174, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xd, 0xd, 0x1, 0x0, "6a28232ba6d3bde3df"}, @NFTA_SET_EXPRESSIONS={0x144, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf0}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xdd}]}}}, {0x40, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5e8}, 0x1, 0x0, 0x0, 0x88e0}, 0x20040800) lsetxattr$system_posix_acl(&(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)='system.posix_acl_access\x00', &(0x7f0000003c00)={{}, {0x1, 0x2}, [{0x2, 0x3, r14}, {0x2, 0x2, r9}, {0x2, 0x2, r14}, {0x2, 0x3, 0xee01}, {0x2, 0x1, r11}, {0x2, 0x6, r13}], {0x4, 0x3}, [{0x8, 0x1, r12}, {0x8, 0x7, r6}, {0x8, 0x5, r12}, {0x8, 0x3, r2}, {0x8, 0x6, r3}, {0x8, 0x4, r10}, {0x8, 0x7, r3}], {0x10, 0x5}, {0x20, 0x1}}, 0x8c, 0x1) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003cc0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000003d00), &(0x7f0000003d40)='./file0\x00', 0x1020, &(0x7f0000003d80)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}], [{@subj_type={'subj_type', 0x3d, 'system.posix_acl_access\x00'}}]}}, 0x1, 0x0, &(0x7f0000003e80)="40e1b8bd093383c3560937473523271a50a3a549d43ca8f41c0378e5a097ef6fd9d74392c5ffa83e7e1a71295fe8d40f98b35157667324ea34fd259a88d0edcb1f058083b27059513cab6dfa08368199f2f397260437bc106293b2e5b9e318f862ea7eaa1d079760a8619eaf0880b6fe07e01c7006adc200656670ae2b74cb863b2ca13e6909d88b0d194a8024d104fcc9be379946da") prctl$PR_GET_DUMPABLE(0x3) getgroups(0x3, &(0x7f0000003f40)=[r12, r2, 0xee01]) 1.174104952s ago: executing program 7 (id=1343): r0 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f00000020c0)=""/4099, 0x80000000, 0xfffffffffffffefe}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e00010000000000000000000000007f000001000000000000000000000000ac14140400000000000000000000000032040000043500000a00020055780675db30654b5070f7b142ae77f7e2e10e64d5f3c3801f6d09aa0ffab1661a557b453533d96ba73dd375f7266e8600aa7390da5c5e7f3ca1d7a8e4e0202a62119ba1545c55d3034824ab3415b11f55be3b"], 0xa0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0xffec, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x2cf2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000002c0)={0x5, 0x800, 0x1, 0x4}) sendmsg$nl_xfrm(r2, &(0x7f0000004340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004300)={&(0x7f0000003100)=@updpolicy={0x11fc, 0x19, 0x10, 0x70bd26, 0x25dfdbfb, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e20, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x20, 0x89, r5, r6}, {0x1, 0x2, 0x8, 0xf, 0x178d40000000000, 0x7, 0x2, 0x5}, {0x0, 0x4, 0x2, 0x75}, 0x10001, 0x6e6bb2, 0x1, 0x1, 0x3}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @algo_crypt={0x1048, 0x2, {{'cbc-camellia-aesni-avx2\x00'}, 0x8000, "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"}}, @sec_ctx={0xc8, 0x8, {0xc4, 0x8, 0x1, 0xe, 0xbc, "b765043649967d498e593da225d62ac0141b7625f5a31776ef1923c8c903b3e51770c6bf12c4cdaf16ab9c9823f1f4854ee0e2fc5a4417d30f6b1b6b512a80e24656243463c19d0ee5c6e01e634c039ce0450c26b506c6c5fa78a3da244e16389812193c244a94fdb6af3a637297f20a36849699eec8b2723d131832c489e5731ecd6efd8c7a6a9f2d00c485dd92f22e83d94fbfd1b1c6e3ae7eb8ba081f54d1689117545048f65980bd0919bd90bf25780f7d337c174bbeb7f927b0"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x40}, 0x20008015) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000300000a0900010073797a31000000000900030073797a320000000014000000020a030000000000000000000a000003140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000a73b9e74eb97288c009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 1.166821052s ago: executing program 8 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_robust_list(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.041697389s ago: executing program 8 (id=1345): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x0, 0x52c, &(0x7f0000000640)="$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") (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) rt_sigtimedwait(&(0x7f0000000080)={[0xfa5]}, 0x0, &(0x7f0000000180), 0x8) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000003100000008000300", @ANYRES32=r4], 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050003000000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="e47b63658818e8fe33a80565d9a272e021628ab905ace68db294049fe9bba2d67b04744d3ca1e3041d946086fc37f768e5757f73ba1decc9f80a380a025dca50"], 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x64}}, 0x4000810) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x50, 0x11, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x6401, 0x4}, [@IFLA_NET_NS_FD={0x8, 0x1c, r11}, @IFLA_MTU={0x8, 0x4, 0xc5}, @IFLA_ADDRESS={0xa}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "3c6436b7cc"}, @IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 905.309887ms ago: executing program 8 (id=1346): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x17, 0x3, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x0, 0x2, 0x201) flock(0xffffffffffffffff, 0x0) 538.066128ms ago: executing program 3 (id=1347): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x17, 0x3, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x0, 0x2, 0x201) flock(0xffffffffffffffff, 0x0) (fail_nth: 1) 523.962386ms ago: executing program 7 (id=1348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x59b300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 321.202726ms ago: executing program 5 (id=1349): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x4000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x2, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x7, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031401000000000000000000966e0900020073797a3000000000080041007369770014003300776c616e3000"/58], 0x38}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f00000002c0)=0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 124.244982ms ago: executing program 3 (id=1350): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @remote, 0x6}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b0009008000", 0x2c}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@discard}, {@errors_remount}, {@nouser_xattr, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nobarrier}, {@noblock_validity}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r2) 46.447197ms ago: executing program 7 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000480085e014000000005080007006e6174"], 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa4000d707010000080020007500feff0000820095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000240)=""/255, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 0s ago: executing program 8 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x80000001}}, 0xffff, 0x4}, 0x90) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) syz_usb_connect(0x3, 0x36, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) (async) utimensat(r7, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) recvmmsg(r8, &(0x7f0000003700)=[{{0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xf18}], 0x1}}], 0x5c, 0x10140, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") (async) landlock_create_ruleset(&(0x7f0000000000)={0x30, 0xb, 0x2, 0x4, 0x2, 0x3}, 0x30, 0x3) kernel console output (not intermixed with test programs): t file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 148.585350][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.585430][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 148.585445][ C0] EXT4-fs (loop1): initial error at time 148: dx_probe:791: inode 2 [ 148.585476][ C0] EXT4-fs (loop1): last error at time 148: dx_probe:791: inode 2 [ 148.646601][ T7397] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 148.648659][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.669920][ T7397] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 8: comm syz.1.611: lblock 11 mapped to illegal pblock 8 (length 1) [ 148.842397][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.613'. [ 148.881571][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.168519][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 149.625305][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.665287][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.705290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.654334][ T7440] loop1: detected capacity change from 0 to 512 [ 152.681352][ T7440] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.622: bad orphan inode 13 [ 152.681391][ T7440] loop1: lost filesystem error report for type 5 error -117 [ 152.683668][ T7440] ext4_test_bit(bit=12, block=4) = 1 [ 152.683700][ T7440] is_bad_inode(inode)=0 [ 152.683720][ T7440] NEXT_ORPHAN(inode)=0 [ 152.683731][ T7440] max_ino=32 [ 152.683742][ T7440] i_nlink=1 [ 152.684238][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.697955][ T7440] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.622: Hash code is SIPHASH, but hash not in dirent [ 152.700419][ T7440] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.622: Corrupt directory, running e2fsck is recommended [ 152.703205][ T7440] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.622: Hash code is SIPHASH, but hash not in dirent [ 152.706659][ T7440] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.622: Corrupt directory, running e2fsck is recommended [ 152.745384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.043526][ T50] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 153.049351][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.553461][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.556952][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.559665][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.561616][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.564368][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.785291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.825282][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.934373][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 154.934418][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 154.934450][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 155.865293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.924659][ T4721] Bluetooth: hci5: command tx timeout [ 156.905284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.329398][ T7460] lo speed is unknown, defaulting to 1000 [ 157.945566][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.212198][ T4721] Bluetooth: hci5: command tx timeout [ 158.579495][ T7496] ±ÿ: renamed from lo [ 158.846164][ T7507] netlink: 'syz.6.641': attribute type 4 has an invalid length. [ 158.866887][ T7508] loop0: detected capacity change from 0 to 256 [ 158.937980][ T7508] vfat: Unknown parameter 'uid<00000000000000000000' [ 158.985333][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.025293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.113942][ T7522] syzkaller0: entered promiscuous mode [ 160.115124][ T7522] syzkaller0: entered allmulticast mode [ 161.064809][ T4721] Bluetooth: hci5: command tx timeout [ 161.066127][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.105385][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.607261][ T7532] netlink: 'syz.1.648': attribute type 3 has an invalid length. [ 162.613032][ T7537] loop1: detected capacity change from 0 to 2048 [ 162.692951][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.705010][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.709623][ T7460] bridge_slave_0: entered allmulticast mode [ 162.714470][ T7460] bridge_slave_0: entered promiscuous mode [ 162.726439][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.726518][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.726604][ T7460] bridge_slave_1: entered allmulticast mode [ 162.727087][ T7460] bridge_slave_1: entered promiscuous mode [ 162.737010][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 162.797345][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.798464][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.878778][ T7460] team0: Port device team_slave_0 added [ 162.883302][ T7548] overlayfs: conflicting lowerdir path [ 162.885014][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 162.890288][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.655'. [ 162.893258][ T7460] team0: Port device team_slave_1 added [ 162.898817][ T7550] xt_TCPMSS: Only works on TCP SYN packets [ 162.952767][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.952802][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.952832][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.967904][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.967934][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.967962][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.044776][ T7552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.656'. [ 163.062089][ T7460] hsr_slave_0: entered promiscuous mode [ 163.065517][ T4721] Bluetooth: hci5: command tx timeout [ 163.071434][ T7460] hsr_slave_1: entered promiscuous mode [ 163.073794][ T7460] debugfs: 'hsr0' already exists in 'hsr' [ 163.075128][ T7460] Cannot create hsr debugfs directory [ 163.145322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.420381][ T7557] loop1: detected capacity change from 0 to 512 [ 163.430228][ T7557] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 163.475677][ T7557] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 163.554829][ T7559] syzkaller0: entered promiscuous mode [ 163.556372][ T7559] syzkaller0: entered allmulticast mode [ 163.772476][ T7460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.781757][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.783827][ T7460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.789874][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.794154][ T7460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.802672][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.804724][ T7460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.811465][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.931407][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 163.939893][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.996023][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.999493][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.021267][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.021319][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.025092][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.025133][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.062843][ T7460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.185343][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.520011][ T7595] netlink: 52 bytes leftover after parsing attributes in process `syz.2.665'. [ 164.572986][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.782544][ T5366] dummy0: left promiscuous mode [ 164.834265][ T7460] veth0_vlan: entered promiscuous mode [ 164.853385][ T7460] veth1_vlan: entered promiscuous mode [ 164.904253][ T7460] veth0_macvtap: entered promiscuous mode [ 164.919747][ T7608] loop0: detected capacity change from 0 to 512 [ 164.921350][ T7460] veth1_macvtap: entered promiscuous mode [ 164.930605][ T7608] EXT4-fs: Ignoring removed i_version option [ 164.931967][ T7608] EXT4-fs: Ignoring removed nobh option [ 164.935570][ T7608] ext4: Unknown parameter 'noacl' [ 164.939057][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.952449][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.052764][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.052832][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.052866][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.052888][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.075164][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 165.086558][ T7609] vlan1: entered allmulticast mode [ 165.086597][ T7609] veth0_vlan: entered allmulticast mode [ 165.142815][ T4911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.142851][ T4911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.225336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.291466][ T7630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.291502][ T7630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.464881][ T7642] loop7: detected capacity change from 0 to 512 [ 165.472144][ T7642] EXT4-fs: Ignoring removed i_version option [ 165.509802][ T7642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.527403][ T7642] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.630: iget: bad i_size value: 2533274857506816 [ 165.538669][ T7642] EXT4-fs (loop7): Remounting filesystem read-only [ 165.545425][ T4729] Bluetooth: hci1: command 0x1003 tx timeout [ 165.545485][ T4721] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 165.653516][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.221968][ T7676] loop1: detected capacity change from 0 to 8192 [ 166.265462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.451664][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 166.730774][ T30] audit: type=1326 audit(166.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7691 comm="syz.2.684" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5777fe8 code=0x0 [ 166.774623][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.685'. [ 166.797702][ T7694] loop6: detected capacity change from 0 to 2048 [ 166.850885][ T7694] loop6: p1 < > p4 [ 166.850885][ T7694] p4: [ 166.853341][ T7694] loop6: p4 size 722688 extends beyond EOD, truncated [ 166.865524][ T7694] loop6: p6 start 262464109 is beyond EOD, truncated [ 166.866826][ T7694] loop6: p7 size 2304 extends beyond EOD, truncated [ 167.065011][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 167.080114][ T7239] udevd[7239]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 167.305290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.060269][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 168.061748][ T7236] udevd[7236]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 168.345293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.385285][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.425352][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.523301][ T30] audit: type=1107 audit(170.490:12): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='D~ [ 170.523301][ T30] ˆ&.ƒýAŽ¢nÑ¢Ö¿¤—%˜ï=ÙÉ`Žd%¸O}#8˜k%Vö2±§à«ºz1[¤…é㺤uŒ« [ 170.523301][ T30] ÐøLð^ ‡€F邏µÈ°4’¸ü @ƒ6~' [ 170.543695][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 170.564622][ T7721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.694'. [ 170.584332][ T7719] loop1: detected capacity change from 0 to 1024 [ 170.755654][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 170.805054][ T7719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.896073][ T7732] 9p: Bad value for 'rfdno' [ 171.030625][ T7735] nbd: must specify at least one socket [ 171.465424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.505376][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.236142][ T4721] Bluetooth: hci0: command 0x0406 tx timeout [ 173.545291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.908520][ T7769] loop1: detected capacity change from 0 to 256 [ 174.585359][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.676035][ T7796] loop1: detected capacity change from 0 to 128 [ 174.698421][ T7796] vfat: Unknown parameter 'zßž})' [ 174.746620][ T7795] netlink: 208944 bytes leftover after parsing attributes in process `syz.2.717'. [ 174.748716][ T7795] netlink: zone id is out of range [ 174.750051][ T7795] netlink: zone id is out of range [ 174.752895][ T7795] netlink: zone id is out of range [ 174.754043][ T7795] netlink: zone id is out of range [ 174.755045][ T7795] netlink: zone id is out of range [ 174.756876][ T7795] netlink: zone id is out of range [ 175.056138][ T7800] file system registered [ 175.123528][ T7802] loop7: detected capacity change from 0 to 128 [ 175.244599][ T4718] ffs_data_put(): freeing [ 175.496522][ T7806] qrtr: Invalid version 30 [ 175.700487][ T4721] Bluetooth: hci0: unexpected event for opcode 0x203c [ 175.727287][ T4721] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 176.149693][ T7825] syzkaller0: entered promiscuous mode [ 176.159414][ T7825] syzkaller0: entered allmulticast mode [ 176.369256][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 176.378433][ T7830] bridge0: port 2(batadv2) entered blocking state [ 176.382409][ T7830] bridge0: port 2(batadv2) entered disabled state [ 176.382593][ T7830] batadv2: entered allmulticast mode [ 176.386338][ T7830] batadv2: entered promiscuous mode [ 176.517318][ T4711] ffs_data_put(): freeing [ 176.665391][ C0] net_ratelimit: 16 callbacks suppressed [ 176.665434][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.877970][ T1780] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 176.878009][ T1780] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 176.958778][ T7839] loop0: detected capacity change from 0 to 512 [ 176.980043][ T7839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.001473][ T7839] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.734: corrupted xattr block 33: overlapping e_value [ 177.011158][ T7839] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.734: corrupted xattr block 33: overlapping e_value [ 177.017580][ T7839] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.734: corrupted xattr block 33: overlapping e_value [ 177.159530][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.251850][ T7853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.737'. [ 177.705377][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.711434][ T5975] ffs_data_put(): freeing [ 177.740039][ T7872] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 [ 177.770675][ T7872] loop0: detected capacity change from 0 to 256 [ 177.781561][ T4835] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 177.781594][ T4835] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 177.781619][ T4835] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 177.781635][ T4835] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 177.781649][ T4835] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 177.790909][ T4835] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 177.809273][ T7876] loop6: detected capacity change from 0 to 256 [ 177.972598][ T7878] fido_id[7878]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.189222][ T7889] syzkaller0: entered promiscuous mode [ 178.189259][ T7889] syzkaller0: entered allmulticast mode [ 178.362568][ T4721] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 178.745310][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.329899][ T7904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.340969][ T30] audit: type=1400 audit(179.300:13): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=7898 comm="syz.0.752" dest=2 [ 179.527483][ T7460] ffs_data_put(): freeing [ 179.647240][ T7912] loop7: detected capacity change from 0 to 1024 [ 179.675914][ T7912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.726051][ T7922] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 179.728722][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 179.739410][ T7912] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 179.785329][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.911976][ T7926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 179.919702][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.030474][ T7930] loop7: detected capacity change from 0 to 1024 [ 180.037851][ T7930] EXT4-fs: Ignoring removed bh option [ 180.044884][ T7930] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.052542][ T7907] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.070644][ T7930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.135437][ T7930] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.163846][ T7941] usb usb8: usbfs: process 7941 (syz.2.763) did not claim interface 7 before use [ 180.169694][ T7930] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.760: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 180.190616][ T7930] EXT4-fs (loop7): Remounting filesystem read-only [ 180.197420][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 180.205916][ T30] audit: type=1400 audit(180.170:14): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=7936 comm="syz.1.762" daddr=::ffff:172.20.20.170 [ 180.221228][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 180.307480][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.612217][ T4729] Bluetooth: hci4: connection err: -111 [ 180.620049][ T7955] loop1: detected capacity change from 0 to 512 [ 180.620491][ T7955] ext4: Unknown parameter 'bsdgrou' [ 180.738520][ T5975] ffs_data_put(): freeing [ 180.796345][ T30] audit: type=1400 audit(180.770:15): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=7959 comm="syz.7.770" daddr=fe80::aa dest=20000 [ 180.825339][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.895168][ T7965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.771'. [ 181.493268][ T30] audit: type=1400 audit(181.460:16): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=7998 comm="syz.0.779" daddr=fe80::aa dest=20004 [ 181.865304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.193179][ T4721] Bluetooth: hci4: unexpected event for opcode 0x8c11 [ 182.339809][ T8010] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.783'. [ 182.341910][ T8010] netlink: zone id is out of range [ 182.343287][ T8010] netlink: zone id is out of range [ 182.344888][ T8010] netlink: get zone limit has 8 unknown bytes [ 182.665694][ T4729] Bluetooth: hci5: command 0x2016 tx timeout [ 182.673800][ T8024] loop0: detected capacity change from 0 to 256 [ 182.854318][ T8038] loop0: detected capacity change from 0 to 512 [ 182.859659][ T8038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.864648][ T8038] EXT4-fs (loop0): 1 truncate cleaned up [ 182.865146][ T8038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.891871][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.905341][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.876346][ T8050] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.794'. [ 183.878099][ T8050] netlink: zone id is out of range [ 183.879258][ T8050] netlink: zone id is out of range [ 183.880569][ T8050] netlink: get zone limit has 8 unknown bytes [ 183.945304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.971281][ T8060] loop0: detected capacity change from 0 to 512 [ 183.974753][ T8060] EXT4-fs: inline encryption not supported [ 183.979995][ T8060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.983433][ T8060] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.797: bad orphan inode 131083 [ 183.983464][ T8060] loop0: lost filesystem error report for type 5 error -117 [ 183.985624][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 183.985650][ C0] EXT4-fs (loop0): initial error at time 183: ext4_orphan_get:1425 [ 183.985662][ C0] EXT4-fs (loop0): last error at time 183: ext4_orphan_get:1425 [ 183.992358][ T8060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.007472][ T8063] overlayfs: upper fs needs to support d_type. [ 184.049514][ T7976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.115491][ T4713] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /167/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 184.190802][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.191015][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.208957][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.209172][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.230711][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.230929][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.985348][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.298121][ T4729] Bluetooth: hci5: command 0x2016 tx timeout [ 187.065381][ C0] net_ratelimit: 1 callbacks suppressed [ 187.065432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.475950][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.475996][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.534165][ T8089] loop1: detected capacity change from 0 to 256 [ 187.565837][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 187.681621][ T8097] loop6: detected capacity change from 0 to 512 [ 187.702696][ T8097] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 187.717159][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 187.720712][ T8097] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.725319][ T8097] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.808: bad orphan inode 15 [ 187.725354][ T8097] loop6: lost filesystem error report for type 5 error -117 [ 187.728567][ T8097] ext4_test_bit(bit=14, block=18) = 1 [ 187.728593][ T8097] is_bad_inode(inode)=0 [ 187.728604][ T8097] NEXT_ORPHAN(inode)=1023 [ 187.728615][ T8097] max_ino=32 [ 187.728626][ T8097] i_nlink=0 [ 187.735236][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 187.735276][ C0] EXT4-fs (loop6): initial error at time 187: ext4_orphan_get:1425 [ 187.735308][ C0] EXT4-fs (loop6): last error at time 187: ext4_orphan_get:1425 [ 187.759578][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.759709][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.759755][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.759780][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.767851][ T8097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.808: bg 0: block 161: padding at end of block bitmap is not set [ 187.767891][ T8097] loop6: lost filesystem error report for type 5 error -117 [ 187.770986][ T8097] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 187.771028][ T8097] loop6: lost filesystem error report for type 5 error -117 [ 187.777226][ T8097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.910535][ T7733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.000702][ T8110] loop1: detected capacity change from 0 to 2048 [ 188.019830][ T5975] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /93/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 188.032979][ T5975] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 188.068276][ T8111] binder: 8106:8111 tried to acquire reference to desc 0, got 1 instead [ 188.082702][ T8111] binder: 8106:8111 got transaction with out-of-order buffer fixup [ 188.082738][ T8111] binder: 8111:8106 failed to fixup parent [ 188.082856][ T8111] binder: 8106:8111 transaction call to 8106:0 failed 20/29201/-22, code 0 size 120-24 line 3717 [ 188.091889][ T4814] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.105370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.110570][ T5975] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 188.391164][ T8120] loop7: detected capacity change from 0 to 1024 [ 188.394208][ T4729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.396994][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.399507][ T8120] EXT4-fs: Ignoring removed bh option [ 188.400780][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.403260][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.404961][ T4729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.440054][ T8127] loop1: detected capacity change from 0 to 512 [ 188.446975][ T8120] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.449956][ T8127] EXT4-fs (loop1): Test dummy encryption mode enabled [ 188.452485][ T8127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.462865][ T8127] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.820: bad orphan inode 131072 [ 188.462911][ T8127] loop1: lost filesystem error report for type 5 error -117 [ 188.463575][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.516599][ T8120] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c028, mo2=0002] [ 188.516684][ T8120] System zones: 0-1, 3-12 [ 188.517292][ T8120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.554914][ T8104] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.616832][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.620550][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.694723][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.758288][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.760543][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.866736][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.869984][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.945124][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.948509][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.117395][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.120042][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.122657][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.128057][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.129826][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.145367][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.232241][ T8152] netlink: 9 bytes leftover after parsing attributes in process `syz.7.824'. [ 189.264745][ T8126] lo speed is unknown, defaulting to 1000 [ 189.318308][ T12] batadv2: left allmulticast mode [ 189.318346][ T12] batadv2: left promiscuous mode [ 189.318459][ T12] bridge0: port 1(batadv2) entered disabled state [ 189.324741][ T12] batadv1: left allmulticast mode [ 189.324770][ T12] batadv1: left promiscuous mode [ 189.324861][ T12] bridge0: port 3(batadv1) entered disabled state [ 189.396062][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.508264][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.828'. [ 189.777096][ T30] audit: type=1326 audit(189.740:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8162 comm="syz.7.828" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x0 [ 189.850943][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 189.876164][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.898185][ T12] bond0 (unregistering): Released all slaves [ 189.926389][ T8190] bridge0: port 3(batadv3) entered blocking state [ 189.927861][ T8190] bridge0: port 3(batadv3) entered disabled state [ 189.929482][ T8190] batadv3: entered allmulticast mode [ 189.940199][ T8190] batadv3: entered promiscuous mode [ 190.185319][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.236795][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 190.427285][ T4721] Bluetooth: hci1: command tx timeout [ 190.431983][ T7625] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 190.432022][ T7625] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 190.464583][ T8149] lo speed is unknown, defaulting to 1000 [ 190.638704][ T12] hsr_slave_0: left promiscuous mode [ 190.651185][ T12] hsr_slave_1: left promiscuous mode [ 190.661086][ T12] veth1_macvtap: left promiscuous mode [ 190.661140][ T12] veth0_macvtap: left promiscuous mode [ 190.661204][ T12] veth1_vlan: left promiscuous mode [ 190.661246][ T12] veth0_vlan: left promiscuous mode [ 191.147068][ T4721] Bluetooth: hci2: command tx timeout [ 191.154374][ T8233] loop1: detected capacity change from 0 to 512 [ 191.174612][ T8233] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.178502][ T8233] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.840: inode has both inline data and extents flags [ 191.178538][ T8233] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.181006][ T8233] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.840: couldn't read orphan inode 15 (err -117) [ 191.181039][ T8233] loop1: lost filesystem error report for type 5 error -117 [ 191.203340][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.225639][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.484684][ T8218] lo speed is unknown, defaulting to 1000 [ 191.486538][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 192.070840][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.072374][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.073942][ T8126] bridge_slave_0: entered allmulticast mode [ 192.085973][ T8126] bridge_slave_0: entered promiscuous mode [ 192.105819][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.105873][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.105957][ T8126] bridge_slave_1: entered allmulticast mode [ 192.106987][ T8126] bridge_slave_1: entered promiscuous mode [ 192.114097][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.115146][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.232331][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.249244][ T8126] team0: Port device team_slave_0 added [ 192.265407][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.269844][ T8126] team0: Port device team_slave_1 added [ 192.364042][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.843'. [ 192.446876][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.448549][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.453924][ T8126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.459068][ T8262] bridge0: port 3(batadv1) entered blocking state [ 192.460825][ T8262] bridge0: port 3(batadv1) entered disabled state [ 192.462309][ T8262] batadv1: entered allmulticast mode [ 192.467200][ T8262] batadv1: entered promiscuous mode [ 192.487893][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 192.492020][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.493649][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.500249][ T8126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.506032][ T4721] Bluetooth: hci1: command tx timeout [ 192.832210][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.943633][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.948651][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.951328][ T8149] bridge_slave_0: entered allmulticast mode [ 192.963413][ T8149] bridge_slave_0: entered promiscuous mode [ 192.966538][ T1780] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 192.966565][ T1780] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 192.973980][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.976986][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.977149][ T8149] bridge_slave_1: entered allmulticast mode [ 192.991926][ T8149] bridge_slave_1: entered promiscuous mode [ 193.009238][ T8126] hsr_slave_0: entered promiscuous mode [ 193.018108][ T8126] hsr_slave_1: entered promiscuous mode [ 193.031447][ T8126] debugfs: 'hsr0' already exists in 'hsr' [ 193.031498][ T8126] Cannot create hsr debugfs directory [ 193.225986][ T4729] Bluetooth: hci2: command tx timeout [ 193.244401][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.271058][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.290418][ T8280] loop1: detected capacity change from 0 to 8 [ 193.305350][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.313273][ T8280] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 193.317112][ T8280] unable to read xattr id index table [ 193.353827][ T8280] SQUASHFS error: Failed to read block 0x1ab: -5 [ 193.353864][ T8280] SQUASHFS error: Unable to read metadata cache entry [1a9] [ 193.353891][ T8280] SQUASHFS error: Unable to read inode 0x127 [ 194.111885][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 194.239019][ T8149] team0: Port device team_slave_0 added [ 194.239900][ T8149] team0: Port device team_slave_1 added [ 194.345314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.346781][ T8299] netlink: 'syz.1.847': attribute type 8 has an invalid length. [ 194.552950][ T30] audit: type=1326 audit(194.520:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.7.848" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x0 [ 194.563876][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.567225][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.572173][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.585854][ T4729] Bluetooth: hci1: command tx timeout [ 194.591322][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.594379][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.594427][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.653775][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.848'. [ 194.757193][ T8149] hsr_slave_0: entered promiscuous mode [ 194.759037][ T8149] hsr_slave_1: entered promiscuous mode [ 194.760770][ T8149] debugfs: 'hsr0' already exists in 'hsr' [ 194.762293][ T8149] Cannot create hsr debugfs directory [ 194.857061][ T8126] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.861910][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.869977][ T8126] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.874140][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.876606][ T8126] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.881024][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.894355][ T8126] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.901536][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.905535][ T4721] Bluetooth: hci5: command 0x2016 tx timeout [ 194.950140][ T8321] sctp: [Deprecated]: syz.2.851 (pid 8321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.950140][ T8321] Use struct sctp_sack_info instead [ 194.954118][ T8318] sctp: [Deprecated]: syz.2.851 (pid 8318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.954118][ T8318] Use struct sctp_sack_info instead [ 195.067720][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 195.080743][ T8325] bridge0: port 4(batadv4) entered blocking state [ 195.081038][ T8325] bridge0: port 4(batadv4) entered disabled state [ 195.081120][ T8325] batadv4: entered allmulticast mode [ 195.087123][ T8325] batadv4: entered promiscuous mode [ 195.157945][ T8326] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 195.164548][ T8326] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 195.264527][ T8335] bridge_slave_0: default FDB implementation only supports local addresses [ 195.306405][ T4729] Bluetooth: hci2: command tx timeout [ 195.309329][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.331808][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.337269][ T8149] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 195.365740][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.372593][ T8149] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 195.376459][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.385346][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.415444][ T30] audit: type=1326 audit(195.380:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.7.858" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb77fe8 code=0x0 [ 195.431475][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.431526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.432093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.432129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.440634][ T8149] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.458650][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.478285][ T8126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.493229][ T8149] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 195.503684][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.589609][ T7620] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 195.589644][ T7620] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 195.833180][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.889753][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.956472][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.956527][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.009555][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.009609][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.107793][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.110537][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.112539][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.114525][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.116986][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.425319][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.514614][ T4728] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 196.665433][ T4728] Bluetooth: hci1: command tx timeout [ 196.986315][ T4729] Bluetooth: hci5: command 0x2016 tx timeout [ 197.142201][ T8395] loop1: detected capacity change from 0 to 1024 [ 197.151215][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.187740][ T8395] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 197.194659][ T7620] batadv2: left allmulticast mode [ 197.194696][ T7620] batadv2: left promiscuous mode [ 197.194800][ T7620] bridge0: port 2(batadv2) entered disabled state [ 197.205073][ T7620] batadv1: left allmulticast mode [ 197.205108][ T7620] batadv1: left promiscuous mode [ 197.205186][ T7620] bridge0: port 1(batadv1) entered disabled state [ 197.211913][ T8401] loop7: detected capacity change from 0 to 256 [ 197.227445][ T8401] vfat: Unknown parameter 'dmbug' [ 197.392475][ T4721] Bluetooth: hci2: command tx timeout [ 197.465420][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.610086][ T7620] bond0 (unregistering): Released all slaves [ 197.621621][ T8401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.843277][ T8374] lo speed is unknown, defaulting to 1000 [ 197.930286][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.124149][ T8126] veth0_vlan: entered promiscuous mode [ 198.300858][ T4721] Bluetooth: hci3: command tx timeout [ 198.301562][ T4721] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 198.322529][ T8126] veth1_vlan: entered promiscuous mode [ 198.501839][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.505312][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.523911][ T8466] loop1: detected capacity change from 0 to 256 [ 198.533383][ T8126] veth0_macvtap: entered promiscuous mode [ 198.547131][ T8466] vfat: Bad value for 'shortname' [ 198.590304][ T8126] veth1_macvtap: entered promiscuous mode [ 198.772635][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.781653][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.790098][ T7620] hsr_slave_0: left promiscuous mode [ 198.796632][ T7620] hsr_slave_1: left promiscuous mode [ 199.318808][ T4402] 8021q: adding VLAN 0 to HW filter on device eth13 [ 199.352473][ T1416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.355699][ T5376] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.356088][ T5376] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.356384][ T5376] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.501160][ T8149] veth0_vlan: entered promiscuous mode [ 199.545358][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.642464][ T8149] veth1_vlan: entered promiscuous mode [ 199.727352][ T7620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.727390][ T7620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.732401][ T8513] tipc: Enabling not permitted [ 199.732447][ T8513] tipc: Enabling of bearer rejected, failed to enable media [ 199.752138][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.764716][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.764919][ T8374] bridge_slave_0: entered allmulticast mode [ 199.769713][ T8374] bridge_slave_0: entered promiscuous mode [ 199.772087][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.773467][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.775021][ T8374] bridge_slave_1: entered allmulticast mode [ 199.784503][ T8374] bridge_slave_1: entered promiscuous mode [ 199.789044][ T8149] veth0_macvtap: entered promiscuous mode [ 199.863609][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.868726][ T8149] veth1_macvtap: entered promiscuous mode [ 199.883921][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.903971][ T1780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.904015][ T1780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.957723][ T8374] team0: Port device team_slave_0 added [ 199.977331][ T8374] team0: Port device team_slave_1 added [ 200.053182][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.054700][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.061343][ T8374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.071133][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.083697][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.083732][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.083760][ T8374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.116258][ T8530] syzkaller0: entered promiscuous mode [ 200.116295][ T8530] syzkaller0: entered allmulticast mode [ 200.134021][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.240742][ T8374] hsr_slave_0: entered promiscuous mode [ 200.247979][ T8374] hsr_slave_1: entered promiscuous mode [ 200.248241][ T8374] debugfs: 'hsr0' already exists in 'hsr' [ 200.248266][ T8374] Cannot create hsr debugfs directory [ 200.263985][ T1780] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.264052][ T1780] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.264089][ T1780] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.264111][ T1780] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.345634][ T4728] Bluetooth: hci3: command tx timeout [ 200.381051][ T4402] 8021q: adding VLAN 0 to HW filter on device eth14 [ 200.540056][ T8541] loop8: detected capacity change from 0 to 8 [ 200.585388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.920156][ T4728] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 201.066168][ T4721] Bluetooth: hci5: command 0x2016 tx timeout [ 201.140505][ T7620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.142219][ T7620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.255088][ T1780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.258584][ T1780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.340153][ T8559] ubi31: attaching mtd0 [ 201.340921][ T8559] ubi31: scanning is finished [ 201.340951][ T8559] ubi31: empty MTD device detected [ 201.411294][ T8559] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 201.411346][ T8559] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 201.411378][ T8559] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 201.411395][ T8559] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 201.411409][ T8559] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 201.411422][ T8559] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 201.411436][ T8559] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2484040670 [ 201.411449][ T8559] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 201.413604][ T8564] ubi31: background thread "ubi_bgt31d" started, PID 8564 [ 201.625356][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.822682][ T8580] sysfs: Unknown parameter '.log' [ 202.030833][ T4402] 8021q: adding VLAN 0 to HW filter on device eth15 [ 202.058447][ T30] audit: type=1400 audit(202.030:20): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=8588 comm="syz.1.895" daddr=fc02::1 dest=20004 [ 202.188616][ T8563] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 202.271468][ T8374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.299140][ T8374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.304303][ T8374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.665365][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.257882][ T4721] Bluetooth: hci3: command tx timeout [ 203.705295][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.259237][ T4721] Bluetooth: hci0: command 0x0406 tx timeout [ 204.282946][ T8374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.283429][ T8374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.745290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.290474][ T8374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.295006][ T8374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.297149][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.898'. [ 205.297181][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.898'. [ 205.307757][ T4721] Bluetooth: hci3: command tx timeout [ 205.508730][ T8374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.567434][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 205.569155][ T8616] netlink: 'syz.1.899': attribute type 26 has an invalid length. [ 205.572414][ T1416] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.572466][ T1416] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.572500][ T1416] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.572522][ T1416] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.761515][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.782130][ T8374] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.785327][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.845970][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.846028][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.846619][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.846647][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.877623][ T8374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.930543][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.9.903'. [ 206.033451][ T8645] loop8: detected capacity change from 0 to 512 [ 206.045552][ T8645] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 206.068298][ T8645] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.905: invalid indirect mapped block 9 (level 0) [ 206.071594][ T8645] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.075240][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 206.075272][ C0] EXT4-fs (loop8): initial error at time 206: ext4_free_branches:1023: inode 11 [ 206.075308][ C0] EXT4-fs (loop8): last error at time 206: ext4_free_branches:1023: inode 11 [ 206.093365][ T8645] EXT4-fs (loop8): 1 truncate cleaned up [ 206.095081][ T8645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.559537][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.640832][ T8374] veth0_vlan: entered promiscuous mode [ 206.657457][ T8374] veth1_vlan: entered promiscuous mode [ 206.771638][ T8374] veth0_macvtap: entered promiscuous mode [ 206.777322][ T8126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.825295][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.683662][ T8374] veth1_macvtap: entered promiscuous mode [ 207.866863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.713503][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.905290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.726956][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.945316][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.051451][ T8705] overlayfs: workdir and upperdir must be separate subtrees [ 210.053927][ T7620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.056357][ T7620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.056400][ T7620] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.056436][ T7620] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.360124][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.9.914'. [ 210.360179][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.9.914'. [ 210.435382][ T30] audit: type=1326 audit(210.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8719 comm="syz.1.917" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f77fe8 code=0x0 [ 210.441390][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.9.914'. [ 210.441447][ T8721] netlink: 48 bytes leftover after parsing attributes in process `syz.9.914'. [ 210.488889][ T7623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.488907][ T7623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.569357][ T7623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.569394][ T7623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.608062][ T8729] input: syz0 as /devices/virtual/input/input10 [ 210.619824][ T8731] netlink: 208 bytes leftover after parsing attributes in process `syz.8.920'. [ 210.727342][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 210.757241][ T8739] bridge0: port 3(batadv1) entered blocking state [ 210.765784][ T8739] bridge0: port 3(batadv1) entered disabled state [ 210.765915][ T8739] batadv1: entered allmulticast mode [ 210.766424][ T8739] batadv1: entered promiscuous mode [ 210.985338][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.020202][ T8754] loop3: detected capacity change from 0 to 256 [ 211.023350][ T8754] vfat: Deprecated parameter 'posix' [ 211.032935][ T8754] FAT-fs: "posix" option is obsolete, not supported now [ 211.186304][ T8762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.235853][ T1416] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 211.235887][ T1416] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 211.363856][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.549781][ T8781] macsec1: entered allmulticast mode [ 211.552057][ T8781] hsr0: entered allmulticast mode [ 211.555115][ T30] audit: type=1400 audit(211.520:22): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=8783 comm="syz.7.931" daddr=fe80::39 dest=16385 [ 211.560452][ T8781] hsr_slave_0: entered allmulticast mode [ 211.560490][ T8781] hsr_slave_1: entered allmulticast mode [ 211.560523][ T8781] hsr0: entered promiscuous mode [ 211.683859][ T8791] loop3: detected capacity change from 0 to 512 [ 211.701334][ T8791] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.717367][ T8791] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.932: inode has both inline data and extents flags [ 211.717410][ T8791] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.720145][ T8791] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.932: couldn't read orphan inode 15 (err -117) [ 211.720171][ T8791] loop3: lost filesystem error report for type 5 error -117 [ 211.725232][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 211.725249][ C0] EXT4-fs (loop3): initial error at time 211: ext4_orphan_get:1399: inode 15 [ 211.725267][ C0] EXT4-fs (loop3): last error at time 211: ext4_orphan_get:1404 [ 211.732372][ T8791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.752232][ T8791] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 211.785050][ T8797] syzkaller0: entered promiscuous mode [ 211.790288][ T8797] syzkaller0: entered allmulticast mode [ 211.847500][ T30] audit: type=1400 audit(211.820:23): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=8799 comm="syz.9.934" daddr=fc00::4 dest=20001 [ 211.870258][ T8801] loop9: detected capacity change from 0 to 512 [ 211.883285][ T8801] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.025353][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.167349][ T8374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.294519][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.8.939'. [ 212.351912][ T8839] loop8: detected capacity change from 0 to 8 [ 212.352326][ T8839] squashfs: Unknown parameter '' [ 212.406144][ T8833] usb usb1: usbfs: process 8833 (syz.1.940) did not claim interface 0 before use [ 212.567383][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.943'. [ 212.590504][ T8854] loop3: detected capacity change from 0 to 512 [ 212.603563][ T8854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.616440][ T8854] EXT4-fs (loop3): 1 truncate cleaned up [ 212.616941][ T8854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.721820][ T8374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.811098][ T4721] Bluetooth: hci3: Malformed HCI Event [ 212.864034][ T8861] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 213.006506][ T8886] netlink: 72 bytes leftover after parsing attributes in process `syz.8.946'. [ 213.016610][ T8894] fuse: Bad value for 'group_id' [ 213.016637][ T8894] fuse: Bad value for 'group_id' [ 213.065339][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.095321][ T30] audit: type=1400 audit(213.060:24): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=8872 comm="syz.8.946" daddr=::ffff:127.0.0.1 [ 213.149359][ T8864] bridge0: port 1(batadv1) entered blocking state [ 213.149419][ T8864] bridge0: port 1(batadv1) entered forwarding state [ 213.152639][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.156147][ T8864] bridge0: port 2(batadv2) entered blocking state [ 213.156192][ T8864] bridge0: port 2(batadv2) entered forwarding state [ 213.169423][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 213.184639][ T8864] bridge0: port 3(batadv3) entered blocking state [ 213.184691][ T8864] bridge0: port 3(batadv3) entered forwarding state [ 213.187686][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 213.197414][ T8864] bridge0: port 4(batadv4) entered blocking state [ 213.197461][ T8864] bridge0: port 4(batadv4) entered forwarding state [ 213.200513][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 213.203811][ T8864] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 213.261481][ T8904] netlink: 144 bytes leftover after parsing attributes in process `syz.9.948'. [ 213.510649][ T8915] netlink: 'syz.7.951': attribute type 10 has an invalid length. [ 214.105345][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.367457][ T8919] geneve2: entered promiscuous mode [ 214.367488][ T8919] geneve2: entered allmulticast mode [ 214.501017][ T7623] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.525853][ T7623] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.525914][ T7623] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.525941][ T7623] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.145289][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.506436][ T8917] __nla_validate_parse: 1 callbacks suppressed [ 215.507808][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.509575][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.511501][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523046][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523126][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523175][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523225][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523271][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523316][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.523362][ T8917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'. [ 216.185333][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.108161][ T8925] bridge0: port 4(batadv2) entered blocking state [ 217.116820][ T8925] bridge0: port 4(batadv2) entered disabled state [ 217.116954][ T8925] batadv2: entered allmulticast mode [ 217.127385][ T8925] batadv2: entered promiscuous mode [ 217.225322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.344835][ T7616] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 217.344870][ T7616] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 217.376646][ T30] audit: type=1400 audit(217.350:25): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=8938 comm="syz.9.958" daddr=::ffff:224.0.0.1 dest=20000 [ 217.596685][ T8946] loop9: detected capacity change from 0 to 8192 [ 217.734020][ T8963] loop7: detected capacity change from 0 to 512 [ 217.736157][ T8963] EXT4-fs: Ignoring removed nobh option [ 217.740020][ T8963] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.754820][ T8963] EXT4-fs error (device loop7): __ext4_iget:5533: inode #11: block 1: comm syz.7.964: invalid block [ 217.754862][ T8963] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.757242][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 217.757261][ C0] EXT4-fs (loop7): initial error at time 217: __ext4_iget:5533: inode 11: block 1 [ 217.757280][ C0] EXT4-fs (loop7): last error at time 217: __ext4_iget:5533: inode 11: block 1 [ 217.759912][ T8963] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.964: couldn't read orphan inode 11 (err -117) [ 217.759932][ T8963] loop7: lost filesystem error report for type 5 error -117 [ 217.778879][ T8963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.989671][ T8975] input: syz0 as /devices/virtual/input/input13 [ 218.265335][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.334050][ T8984] bridge0: port 3(batadv1) entered blocking state [ 218.337193][ T8984] bridge0: port 3(batadv1) entered disabled state [ 218.343607][ T8984] batadv1: entered allmulticast mode [ 218.348635][ T8984] batadv1: entered promiscuous mode [ 218.596728][ T8968] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 218.826105][ T7616] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 218.826192][ T7616] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 218.841013][ T9008] loop3: detected capacity change from 0 to 8192 [ 218.843177][ T9008] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.857253][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.937616][ T9012] loop9: detected capacity change from 0 to 128 [ 219.096319][ T9021] loop7: detected capacity change from 0 to 256 [ 219.159100][ T9020] loop9: detected capacity change from 0 to 128 [ 219.167640][ T9020] FAT-fs (loop9): bogus number of reserved sectors [ 219.167683][ T9020] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 219.167706][ T9020] FAT-fs (loop9): Can't find a valid FAT filesystem [ 219.305314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.312172][ T9027] loop9: detected capacity change from 0 to 512 [ 219.315091][ T9027] EXT4-fs: inline encryption not supported [ 219.325906][ T9027] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 219.335515][ T9027] EXT4-fs (loop9): 1 truncate cleaned up [ 219.336004][ T9027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.811114][ T8149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.904279][ T30] audit: type=1400 audit(219.870:26): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9058 comm="syz.9.981" daddr=fe80:: dest=20002 [ 219.904331][ T30] audit: type=1400 audit(219.870:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9058 comm="syz.9.981" daddr=::ffff:172.20.20.170 dest=20003 [ 220.050314][ T9066] loop9: detected capacity change from 0 to 1024 [ 220.072428][ T9066] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.105922][ T9066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.123303][ T9066] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.984: bg 0: block 112: padding at end of block bitmap is not set [ 220.238630][ T9075] loop7: detected capacity change from 0 to 1024 [ 220.247195][ T9075] EXT4-fs: Ignoring removed bh option [ 220.255735][ T9075] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 220.275089][ T8149] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /27/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 220.294975][ T8149] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 220.305958][ T8149] EXT4-fs error (device loop9): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 220.311730][ T9075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.316641][ T8149] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 220.324337][ T8149] EXT4-fs error (device loop9): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 220.330935][ T8149] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 220.339525][ T8149] EXT4-fs error (device loop9): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 220.344412][ T8149] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 220.349024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.357233][ T8149] EXT4-fs error (device loop9): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 220.438740][ T7460] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 220.454081][ T7460] EXT4-fs (loop7): Remounting filesystem read-only [ 220.512630][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.811088][ T9097] __nla_validate_parse: 25 callbacks suppressed [ 220.811131][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 220.817356][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 221.139253][ T9105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.991'. [ 221.385307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.553289][ T8149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.697753][ T7616] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.725327][ T7616] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.725380][ T7616] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.967422][ T7616] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.979746][ T7616] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.981886][ T7616] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.027305][ T9130] loop7: detected capacity change from 0 to 2048 [ 222.103259][ T9130] Alternate GPT is invalid, using primary GPT. [ 222.103322][ T9130] loop7: p1 p2 p3 [ 222.103342][ T9130] loop7: partition table partially beyond EOD, truncated [ 222.207600][ T7616] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.209958][ T7616] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.212158][ T7616] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.225529][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.230727][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.237680][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.239447][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.412887][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.425336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.518494][ T7616] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.518535][ T7616] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.518568][ T7616] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.534729][ T7239] udevd[7239]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 222.588823][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 222.604524][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 222.788657][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1004'. [ 222.793765][ T7616] batadv1: left allmulticast mode [ 222.793800][ T7616] batadv1: left promiscuous mode [ 222.793900][ T7616] bridge0: port 3(batadv1) entered disabled state [ 222.801541][ T7616] bridge_slave_1: left allmulticast mode [ 222.811224][ T7616] bridge_slave_1: left promiscuous mode [ 222.811362][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.853894][ T7616] bridge_slave_0: left allmulticast mode [ 222.853936][ T7616] bridge_slave_0: left promiscuous mode [ 222.854105][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.139604][ T30] audit: type=1400 audit(223.110:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9173 comm="syz.1.1008" daddr=fe80::c dest=20003 [ 223.208170][ T9183] loop3: detected capacity change from 0 to 256 [ 223.284956][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 223.465412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.571477][ T7616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.579447][ T7616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.584693][ T7616] bond0 (unregistering): Released all slaves [ 223.724540][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 223.760848][ T9211] loop7: detected capacity change from 0 to 512 [ 223.794199][ T9139] lo speed is unknown, defaulting to 1000 [ 224.200201][ T9228] pim6reg1: entered promiscuous mode [ 224.200243][ T9228] pim6reg1: entered allmulticast mode [ 224.506504][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.526828][ T9237] overlay: Unknown parameter 'fsuuid' [ 224.527520][ T4728] Bluetooth: hci2: command tx timeout [ 224.869949][ T7616] hsr_slave_0: left promiscuous mode [ 224.871586][ T7616] hsr_slave_1: left promiscuous mode [ 224.873187][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.874952][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.879172][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.879211][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.911031][ T7616] veth1_macvtap: left promiscuous mode [ 224.911087][ T7616] veth0_macvtap: left promiscuous mode [ 224.911155][ T7616] veth1_vlan: left promiscuous mode [ 224.911207][ T7616] veth0_vlan: left promiscuous mode [ 224.964192][ T9252] loop7: detected capacity change from 0 to 256 [ 225.207418][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1026'. [ 225.465376][ T4728] Bluetooth: hci3: command tx timeout [ 225.474277][ T7616] team0 (unregistering): Port device team_slave_1 removed [ 225.500272][ T7616] team0 (unregistering): Port device team_slave_0 removed [ 225.545431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.614125][ T9270] sctp: [Deprecated]: syz.8.1029 (pid 9270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.614125][ T9270] Use struct sctp_sack_info instead [ 225.763345][ T30] audit: type=1400 audit(225.730:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9275 comm="syz.7.1030" daddr=::ffff:172.20.20.44 dest=20000 [ 225.876091][ T9285] fuse: Bad value for 'fd' [ 225.909435][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.913514][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.915312][ T9139] bridge_slave_0: entered allmulticast mode [ 225.921701][ T9139] bridge_slave_0: entered promiscuous mode [ 225.930268][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.932953][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.933104][ T9139] bridge_slave_1: entered allmulticast mode [ 225.945990][ T9139] bridge_slave_1: entered promiscuous mode [ 225.982687][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.018895][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.153240][ T9139] team0: Port device team_slave_0 added [ 226.163144][ T9139] team0: Port device team_slave_1 added [ 226.217151][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.218916][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.218975][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.233921][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.237214][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.237266][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.336700][ T9139] hsr_slave_0: entered promiscuous mode [ 226.341605][ T9139] hsr_slave_1: entered promiscuous mode [ 226.348669][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 226.353813][ T9139] Cannot create hsr debugfs directory [ 226.585413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.589374][ T4728] Bluetooth: hci2: command tx timeout [ 226.630382][ T9306] loop8: detected capacity change from 0 to 8192 [ 226.648639][ T9306] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.699330][ T9306] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 226.711543][ T9306] FAT-fs (loop8): Filesystem has been set read-only [ 226.838832][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1038'. [ 226.838893][ T9314] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1038'. [ 226.875101][ T30] audit: type=1400 audit(226.840:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9316 comm="syz.8.1039" [ 227.139469][ T9331] Soft offlining pfn 0x13e266 at process virtual address 0x20000000 [ 227.625393][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.665308][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.806227][ T4728] Bluetooth: hci2: command tx timeout [ 229.088663][ T9139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.096893][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.100125][ T9139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.108726][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.112185][ T9139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.119866][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.123929][ T9139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.132609][ T9139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.204094][ T4889] IPVS: starting estimator thread 0... [ 229.209833][ T9365] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 229.295415][ T9366] IPVS: using max 61 ests per chain, 146400 per kthread [ 229.339546][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.427483][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.439940][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.440005][ T7613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.440551][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.440577][ T7613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.500415][ T9139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.517712][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.705314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.717725][ T9378] FAULT_INJECTION: forcing a failure. [ 229.717725][ T9378] name failslab, interval 1, probability 0, space 0, times 0 [ 229.717763][ T9378] CPU: 0 UID: 0 PID: 9378 Comm: syz.3.1048 Not tainted syzkaller #0 PREEMPT [ 229.717777][ T9378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 229.717784][ T9378] Call trace: [ 229.717788][ T9378] show_stack+0x2c/0x3c (C) [ 229.717810][ T9378] __dump_stack+0x30/0x40 [ 229.717824][ T9378] dump_stack_lvl+0xd8/0x12c [ 229.717833][ T9378] dump_stack+0x1c/0x28 [ 229.717843][ T9378] should_fail_ex+0x41c/0x590 [ 229.717857][ T9378] should_failslab+0xc4/0x120 [ 229.717866][ T9378] __kmalloc_noprof+0x108/0x6b8 [ 229.717876][ T9378] tomoyo_realpath_from_path+0xbc/0x4dc [ 229.717886][ T9378] tomoyo_path_number_perm+0x1f0/0x500 [ 229.717893][ T9378] tomoyo_file_ioctl+0x2c/0x3c [ 229.717901][ T9378] security_file_ioctl+0xdc/0x2b0 [ 229.717909][ T9378] __arm64_sys_ioctl+0xa8/0x1c4 [ 229.717920][ T9378] invoke_syscall+0x98/0x244 [ 229.717930][ T9378] el0_svc_common+0xec/0x23c [ 229.717939][ T9378] do_el0_svc+0x4c/0x5c [ 229.717949][ T9378] el0_svc+0x64/0x260 [ 229.717959][ T9378] el0t_64_sync_handler+0x48/0x148 [ 229.717968][ T9378] el0t_64_sync+0x198/0x19c [ 229.717988][ T9378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.871704][ T9384] loop3: detected capacity change from 0 to 8 [ 229.896498][ T9384] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 229.896522][ T9384] unable to read xattr id index table [ 230.080350][ T9401] securityfs: Unknown parameter 'gid' [ 230.217066][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.234740][ T9412] loop3: detected capacity change from 0 to 256 [ 230.745320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.826737][ T4728] Bluetooth: hci2: command tx timeout [ 231.010912][ T4728] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 231.034359][ T9434] loop7: detected capacity change from 0 to 1024 [ 231.047650][ T9435] FAULT_INJECTION: forcing a failure. [ 231.047650][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 231.051164][ T9435] CPU: 0 UID: 0 PID: 9435 Comm: syz.8.1058 Not tainted syzkaller #0 PREEMPT [ 231.051185][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 231.051191][ T9435] Call trace: [ 231.051195][ T9435] show_stack+0x2c/0x3c (C) [ 231.051221][ T9435] __dump_stack+0x30/0x40 [ 231.051233][ T9435] dump_stack_lvl+0xd8/0x12c [ 231.051245][ T9435] dump_stack+0x1c/0x28 [ 231.051260][ T9435] should_fail_ex+0x41c/0x590 [ 231.051276][ T9435] should_failslab+0xc4/0x120 [ 231.051286][ T9435] __kmalloc_noprof+0x108/0x6b8 [ 231.051295][ T9435] tomoyo_encode2+0x10c/0x330 [ 231.051304][ T9435] tomoyo_encode+0x34/0x50 [ 231.051312][ T9435] tomoyo_realpath_from_path+0x488/0x4dc [ 231.051320][ T9435] tomoyo_path_number_perm+0x1f0/0x500 [ 231.051327][ T9435] tomoyo_file_ioctl+0x2c/0x3c [ 231.051335][ T9435] security_file_ioctl+0xdc/0x2b0 [ 231.051343][ T9435] __arm64_sys_ioctl+0xa8/0x1c4 [ 231.051354][ T9435] invoke_syscall+0x98/0x244 [ 231.051364][ T9435] el0_svc_common+0xec/0x23c [ 231.051373][ T9435] do_el0_svc+0x4c/0x5c [ 231.051382][ T9435] el0_svc+0x64/0x260 [ 231.051393][ T9435] el0t_64_sync_handler+0x48/0x148 [ 231.051402][ T9435] el0t_64_sync+0x198/0x19c [ 231.076517][ T9434] EXT4-fs: Ignoring removed bh option [ 231.080980][ T9435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.084518][ T9434] ext4: Unknown parameter 'nouser_xattr' [ 231.270395][ T9139] veth0_vlan: entered promiscuous mode [ 231.292773][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 231.302561][ T9139] veth1_vlan: entered promiscuous mode [ 231.389551][ T9139] veth0_macvtap: entered promiscuous mode [ 231.462585][ T9139] veth1_macvtap: entered promiscuous mode [ 231.476706][ T9448] syzkaller1: entered promiscuous mode [ 231.478557][ T9448] syzkaller1: entered allmulticast mode [ 231.493138][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.731157][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.749615][ T7613] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.749718][ T7613] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.749762][ T7613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.749792][ T7613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.785321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.821862][ T9455] loop3: detected capacity change from 0 to 256 [ 232.010579][ T9460] loop3: detected capacity change from 0 to 256 [ 232.037102][ T7613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.037138][ T7613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.105891][ T7616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.105925][ T7616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.112738][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 232.123080][ T30] audit: type=1400 audit(232.090:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9459 comm="syz.3.1064" daddr=fe80::bb [ 232.139373][ T30] audit: type=1400 audit(232.110:32): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9459 comm="syz.3.1064" daddr=fe80::bb [ 232.825642][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.865299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.905312][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.517706][ T9497] FAULT_INJECTION: forcing a failure. [ 235.517706][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.517744][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.7.1070 Not tainted syzkaller #0 PREEMPT [ 235.517758][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 235.517764][ T9497] Call trace: [ 235.517768][ T9497] show_stack+0x2c/0x3c (C) [ 235.517787][ T9497] __dump_stack+0x30/0x40 [ 235.517800][ T9497] dump_stack_lvl+0xd8/0x12c [ 235.517810][ T9497] dump_stack+0x1c/0x28 [ 235.517819][ T9497] should_fail_ex+0x41c/0x590 [ 235.517833][ T9497] should_fail+0x14/0x24 [ 235.517843][ T9497] should_fail_usercopy+0x20/0x30 [ 235.517853][ T9497] _inline_copy_from_user+0x3c/0x174 [ 235.517865][ T9497] __tun_chr_ioctl+0x1dc/0x18d8 [ 235.517874][ T9497] tun_chr_ioctl+0x38/0x4c [ 235.517884][ T9497] __arm64_sys_ioctl+0x14c/0x1c4 [ 235.517896][ T9497] invoke_syscall+0x98/0x244 [ 235.517906][ T9497] el0_svc_common+0xec/0x23c [ 235.517916][ T9497] do_el0_svc+0x4c/0x5c [ 235.517925][ T9497] el0_svc+0x64/0x260 [ 235.517937][ T9497] el0t_64_sync_handler+0x48/0x148 [ 235.517946][ T9497] el0t_64_sync+0x198/0x19c [ 235.668654][ T9502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.706957][ T9] lo speed is unknown, defaulting to 1000 [ 235.706985][ T9] syz1: Port: 1 Link DOWN [ 235.707705][ T9] lo speed is unknown, defaulting to 1000 [ 235.945291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.054404][ T30] audit: type=1326 audit(236.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9504 comm="syz.3.1074" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x0 [ 236.093499][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 236.740484][ T9529] loop7: detected capacity change from 0 to 512 [ 236.762690][ T9529] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1078: inode has both inline data and extents flags [ 236.762728][ T9529] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.765297][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 236.765312][ C0] EXT4-fs (loop7): initial error at time 236: ext4_orphan_get:1399: inode 15 [ 236.765327][ C0] EXT4-fs (loop7): last error at time 236: ext4_orphan_get:1399: inode 15 [ 236.775808][ T9529] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1078: couldn't read orphan inode 15 (err -117) [ 236.775852][ T9529] loop7: lost filesystem error report for type 5 error -117 [ 236.779268][ T9529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.786907][ T9529] overlayfs: failed to resolve './file1': -2 [ 236.872244][ T9536] loop3: detected capacity change from 0 to 1024 [ 236.890331][ T9536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.985320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.096835][ T8374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.270075][ T9529] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.516047][ T30] audit: type=1400 audit(237.490:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9557 comm="syz.3.1084" daddr=fe80::bb dest=20002 [ 237.975527][ T9575] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 237.975566][ T9575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1085'. [ 237.977658][ T9575] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 238.025305][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.179893][ T9586] loop5: detected capacity change from 0 to 512 [ 238.199013][ T9586] EXT4-fs: inline encryption not supported [ 238.221253][ T9586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.230352][ T9586] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 238.232609][ T9586] EXT4-fs: failed to create workqueue [ 238.239235][ T9586] EXT4-fs (loop5): mount failed [ 238.553882][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 238.559491][ T9605] syzkaller0: entered promiscuous mode [ 238.559524][ T9605] syzkaller0: entered allmulticast mode [ 238.917491][ T9617] loop7: detected capacity change from 0 to 2048 [ 238.936255][ T9617] loop7: p1 < > p4 < > [ 238.936283][ T9617] loop7: partition table partially beyond EOD, truncated [ 238.942413][ T9617] loop7: p4 start 42180 is beyond EOD, truncated [ 239.065315][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.118548][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 239.173047][ T9598] loop3: detected capacity change from 0 to 2048 [ 239.204248][ T9626] loop7: detected capacity change from 0 to 512 [ 239.211025][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.216985][ T9626] EXT4-fs (loop7): Test dummy encryption mode enabled [ 239.232503][ T9626] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1099: inode has both inline data and extents flags [ 239.232548][ T9626] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.235301][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 239.235325][ C0] EXT4-fs (loop7): initial error at time 239: ext4_orphan_get:1399: inode 15 [ 239.235345][ C0] EXT4-fs (loop7): last error at time 239: ext4_orphan_get:1399: inode 15 [ 239.243715][ T9626] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1099: couldn't read orphan inode 15 (err -117) [ 239.243756][ T9626] loop7: lost filesystem error report for type 5 error -117 [ 239.246788][ T9626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.268450][ T9635] tc_dump_action: action bad kind [ 239.466652][ T30] audit: type=1400 audit(239.410:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9625 comm="syz.7.1099" daddr=2001::1 dest=20000 [ 239.473671][ T9638] loop8: detected capacity change from 0 to 512 [ 239.497793][ T9643] 9p: Bad value for 'rfdno' [ 239.516969][ T9638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.541546][ T9638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1102: corrupted xattr block 33: invalid header [ 239.544715][ T9638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1102: corrupted xattr block 33: invalid header [ 239.548976][ T9638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1102: corrupted xattr block 33: invalid header [ 239.738409][ T8374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.860393][ T30] audit: type=1326 audit(239.830:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.868337][ T30] audit: type=1326 audit(239.840:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.874732][ T30] audit: type=1326 audit(239.840:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.885385][ T30] audit: type=1326 audit(239.850:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.885488][ T30] audit: type=1326 audit(239.850:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.894971][ T30] audit: type=1326 audit(239.860:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.901174][ T30] audit: type=1326 audit(239.870:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 239.906461][ T30] audit: type=1326 audit(239.880:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.3.1107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f977fe8 code=0x7ffc0000 [ 240.105336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.407522][ T8126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.437925][ T4814] atkbd serio2: keyboard reset failed on [ 240.500675][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 240.758539][ T9680] loop3: detected capacity change from 0 to 512 [ 240.832650][ T9680] EXT4-fs: Invalid want_extra_isize 1 [ 240.839193][ T9684] loop5: detected capacity change from 0 to 256 [ 240.865909][ T9684] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.089734][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.145622][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.185299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.512907][ T9718] loop7: detected capacity change from 0 to 128 [ 242.521027][ T9718] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.225357][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.253318][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 243.255938][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 243.676060][ T9776] IPv6: addrconf: prefix option has invalid lifetime [ 243.772192][ T9780] loop7: detected capacity change from 0 to 1024 [ 243.793200][ T9780] EXT4-fs: inline encryption not supported [ 243.824200][ T9780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.861791][ T9780] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1132: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.949459][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.153108][ T9797] loop7: detected capacity change from 0 to 2048 [ 244.206592][ T9797] GPT:first_usable_lbas don't match. [ 244.206616][ T9797] GPT:34 != 290 [ 244.206637][ T9797] GPT: Use GNU Parted to correct GPT errors. [ 244.206693][ T9797] loop7: p1 p2 p3 [ 244.236485][ T9798] overlayfs: failed to resolve './cgroup': -2 [ 244.265305][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.296022][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 244.296061][ T30] audit: type=1400 audit(244.270:85): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9782 comm="syz.8.1131" daddr=::ffff:172.20.20.170 dest=20003 [ 244.397025][ T9809] usb usb8: usbfs: process 9809 (syz.5.1138) did not claim interface 0 before use [ 244.436978][ T7239] udevd[7239]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 244.504954][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 244.512561][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 244.808215][ T9830] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1143'. [ 244.819157][ T30] audit: type=1400 audit(244.690:86): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9826 comm="syz.5.1144" daddr=::ffff:172.20.20.1 [ 244.892519][ T9833] fuse: Bad value for 'fd' [ 245.258494][ T9853] overlayfs: failed to clone lowerpath [ 245.305334][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.316951][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1151'. [ 245.677225][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 245.701834][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 245.965157][ T9882] bond1: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms [ 246.345593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.422448][ T9894] syzkaller0: entered promiscuous mode [ 246.422487][ T9894] syzkaller0: entered allmulticast mode [ 246.899090][ T30] audit: type=1326 audit(246.870:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9915 comm="syz.1.1164" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f77fe8 code=0x0 [ 246.913846][ T30] audit: type=1326 audit(246.880:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9915 comm="syz.1.1164" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f77fe8 code=0x0 [ 247.283140][ T9938] loop8: detected capacity change from 0 to 512 [ 247.304434][ T9938] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 247.307127][ T9938] EXT4-fs (loop8): orphan cleanup on readonly fs [ 247.310008][ T9938] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 247.310033][ T9938] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 247.310060][ T9938] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1169: Failed to acquire dquot type 1 [ 247.310077][ T9938] loop8: lost filesystem error report for type 5 error -5 [ 247.316487][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 247.316503][ C0] EXT4-fs (loop8): initial error at time 247: ext4_acquire_dquot:7041 [ 247.316516][ C0] EXT4-fs (loop8): last error at time 247: ext4_acquire_dquot:7041 [ 247.364796][ T9938] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1169: bg 0: block 40: padding at end of block bitmap is not set [ 247.375812][ T9938] loop8: lost filesystem error report for type 5 error -117 [ 247.378571][ T9938] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 247.378604][ T9938] loop8: lost filesystem error report for type 5 error -117 [ 247.382613][ T9938] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.1169: data will be lost [ 247.383153][ T9938] EXT4-fs (loop8): 1 truncate cleaned up [ 247.383750][ T9938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.385623][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.432345][ T9942] loop7: detected capacity change from 0 to 128 [ 247.432847][ T9942] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.440075][ T9942] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.451226][ T8126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.756506][ T6660] Bluetooth: Error in BCSP hdr checksum [ 247.941144][ T9956] loop3: detected capacity change from 0 to 512 [ 247.947308][ T9956] EXT4-fs: inline encryption not supported [ 247.952145][ T9956] EXT4-fs: Ignoring removed oldalloc option [ 247.959377][ T9956] EXT4-fs: journaled quota format not specified [ 247.997940][ T15] Bluetooth: Error in BCSP hdr checksum [ 248.323419][ T9971] loop8: detected capacity change from 0 to 512 [ 248.357518][ T9971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.376892][ T9971] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 248.401758][ T9971] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 248.425316][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.517131][ T8126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.947688][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.340725][ T30] audit: type=1400 audit(249.310:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=9998 comm="syz.1.1181" daddr=fc00:: dest=20002 [ 249.397374][ T4728] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 249.465457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.628337][T10008] loop8: detected capacity change from 0 to 8 [ 249.754659][T10016] netlink: 'syz.8.1183': attribute type 3 has an invalid length. [ 249.796463][ T4721] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 249.839839][ T15] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.916638][T10023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1185'. [ 250.306864][ T30] audit: type=1400 audit(250.270:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10037 comm="syz.7.1191" dest=20001 [ 250.382181][ T30] audit: type=1400 audit(250.350:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10043 comm="syz.1.1192" daddr=fc00:: dest=20002 [ 250.447450][ T4728] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 250.505317][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.112559][T10057] overlayfs: failed to clone upperpath [ 251.545310][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.977308][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 252.449755][T10099] "syz.8.1202" (10099) uses obsolete ecb(arc4) skcipher [ 252.585322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.625337][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.192939][ T4728] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 254.192979][ T4728] CPU: 0 UID: 0 PID: 4728 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT [ 254.192993][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 254.193008][ T4728] Workqueue: hci1 hci_rx_work [ 254.193036][ T4728] Call trace: [ 254.193039][ T4728] show_stack+0x2c/0x3c (C) [ 254.193058][ T4728] __dump_stack+0x30/0x40 [ 254.193071][ T4728] dump_stack_lvl+0xd8/0x12c [ 254.193083][ T4728] dump_stack+0x1c/0x28 [ 254.193095][ T4728] sysfs_warn_dup+0x9c/0xb8 [ 254.193107][ T4728] sysfs_create_dir_ns+0x190/0x1f4 [ 254.193119][ T4728] kobject_add_internal+0x290/0x6f0 [ 254.193129][ T4728] kobject_add_varg+0x9c/0xe8 [ 254.193141][ T4728] kobject_add+0x110/0x1c8 [ 254.193153][ T4728] device_add+0x394/0x9e0 [ 254.193167][ T4728] hci_conn_add_sysfs+0xbc/0x1e8 [ 254.193178][ T4728] le_conn_complete_evt+0xc68/0x10f8 [ 254.193188][ T4728] hci_le_conn_complete_evt+0x114/0x3d8 [ 254.193197][ T4728] hci_le_meta_evt+0x2b0/0x46c [ 254.193208][ T4728] hci_event_packet+0x4c0/0x9c8 [ 254.193219][ T4728] hci_rx_work+0x2f4/0xd78 [ 254.193231][ T4728] process_scheduled_works+0x788/0x10b8 [ 254.193243][ T4728] worker_thread+0x798/0xbd0 [ 254.193253][ T4728] kthread+0x304/0x3d4 [ 254.193262][ T4728] ret_from_fork+0x10/0x20 [ 254.193294][ T4728] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 254.193316][ T4728] Bluetooth: hci1: failed to register connection device [ 254.555181][T10206] netlink: 'syz.5.1227': attribute type 4 has an invalid length. [ 254.665312][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.780938][T10210] loop7: detected capacity change from 0 to 512 [ 254.781473][T10210] vfat: Unknown parameter '>' [ 255.019385][T10224] loop3: detected capacity change from 0 to 256 [ 255.027901][T10219] lo speed is unknown, defaulting to 1000 [ 255.654912][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1232'. [ 255.705322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.145881][T10231] lo speed is unknown, defaulting to 1000 [ 256.305870][ T4721] Bluetooth: hci1: command 0x2016 tx timeout [ 256.745296][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.336574][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1240'. [ 257.785961][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.325543][T10268] bridge0: port 5(batadv3) entered blocking state [ 258.325591][T10268] bridge0: port 5(batadv3) entered disabled state [ 258.325691][T10268] batadv3: entered allmulticast mode [ 258.329985][T10268] batadv3: entered promiscuous mode [ 258.348674][ T4721] Bluetooth: hci1: command 0x2016 tx timeout [ 258.825332][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.848064][ T6660] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 258.848099][ T6660] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 258.864505][T10270] bridge1: entered promiscuous mode [ 258.864545][T10270] bridge1: entered allmulticast mode [ 258.925718][T10275] loop5: detected capacity change from 0 to 1024 [ 258.926138][T10275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.926174][T10275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.934381][T10275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.226583][T10275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.421840][ T9139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.527013][T10291] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 259.554564][T10291] bond2 (unregistering): Released all slaves [ 259.865326][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.990268][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1249'. [ 259.992782][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1249'. [ 260.264440][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 260.323253][T10331] loop3: detected capacity change from 0 to 512 [ 260.905297][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.945299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.240211][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.240443][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.985288][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.025291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.812697][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1261'. [ 265.065329][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.206868][T10389] loop7: detected capacity change from 0 to 256 [ 265.614618][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.614700][T10394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.850338][T10405] loop5: detected capacity change from 0 to 512 [ 265.853233][T10405] ext4: Bad value for 'sb' [ 266.105482][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.616328][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1272'. [ 266.637550][T10424] bridge0: port 6(batadv4) entered blocking state [ 266.639085][T10424] bridge0: port 6(batadv4) entered disabled state [ 266.640822][T10424] batadv4: entered allmulticast mode [ 266.647763][T10424] batadv4: entered promiscuous mode [ 266.842352][T10431] overlayfs: upper fs does not support file handles, falling back to index=off. [ 267.076668][ T30] audit: type=1400 audit(267.050:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10437 comm="syz.7.1276" daddr=fe80::aa dest=20000 [ 267.112563][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.112599][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.112623][T10441] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.119711][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.130135][ T7616] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 267.130167][ T7616] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 267.133659][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.133700][T10440] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1276'. [ 267.145322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.582074][T10455] overlay: filesystem on ./file0 is read-only [ 268.131541][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'. [ 268.143394][T10476] bridge0: port 5(batadv5) entered blocking state [ 268.148008][T10476] bridge0: port 5(batadv5) entered disabled state [ 268.148156][T10476] batadv5: entered allmulticast mode [ 268.148685][T10476] batadv5: entered promiscuous mode [ 268.185495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.359369][T10484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1286'. [ 268.367381][T10484] 9p: Bad value for 'wfdno' [ 268.635991][ T7630] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 268.636037][ T7630] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 268.685964][T10504] syzkaller0: entered promiscuous mode [ 268.688292][T10504] syzkaller0: entered allmulticast mode [ 268.822986][ T30] audit: type=1400 audit(269.786:93): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="syz1" object="_" requested=w pid=10501 comm="syz.8.1291" saddr=fe80::bb daddr=fe80::aa dest=3618 [ 269.225447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.265303][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.865716][T10518] __nla_validate_parse: 2 callbacks suppressed [ 270.866870][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 270.880795][T10518] bridge0: port 6(batadv6) entered blocking state [ 270.885820][T10518] bridge0: port 6(batadv6) entered disabled state [ 270.885946][T10518] batadv6: entered allmulticast mode [ 270.886464][T10518] batadv6: entered promiscuous mode [ 271.305286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.533818][T10522] loop7: detected capacity change from 0 to 2048 [ 272.345294][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.508282][T10522] EXT4-fs: Ignoring removed oldalloc option [ 272.548119][ T12] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 272.548154][ T12] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 272.808124][T10522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.844412][T10522] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 272.860795][T10522] EXT4-fs (loop7): Remounting filesystem read-only [ 272.923908][T10542] overlay: filesystem on ./file0 is read-only [ 272.925833][ T30] audit: type=1400 audit(273.886:94): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10541 comm="syz.1.1300" daddr=fc00::1 [ 272.951727][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.385290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.426710][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.918401][T10574] loop3: detected capacity change from 0 to 512 [ 275.014674][T10574] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1308: Directory hole found for htree index block 0 [ 275.014722][T10574] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 275.017414][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 275.017426][ C0] EXT4-fs (loop3): initial error at time 275: dx_probe:791: inode 2 [ 275.017444][ C0] EXT4-fs (loop3): last error at time 275: dx_probe:791: inode 2 [ 275.023909][T10574] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 275.024408][T10574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.035060][T10574] EXT4-fs (loop3): shut down requested (2) [ 275.049744][T10583] loop8: detected capacity change from 0 to 1024 [ 275.086146][ T30] audit: type=1400 audit(276.046:95): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10573 comm="syz.3.1308" daddr=fe80::16 dest=5 [ 275.089794][T10583] EXT4-fs: inline encryption not supported [ 275.109229][T10583] EXT4-fs warning (device loop8): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop8. [ 275.147226][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 275.173788][ T8374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.333770][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 275.465294][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.526929][T10609] netdevsim netdevsim8 ªªªªª»: renamed from netdevsim0 (while UP) [ 275.699541][T10613] loop7: detected capacity change from 0 to 2048 [ 275.708621][T10613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.505298][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.698925][T10613] random: crng reseeded on system resumption [ 277.379013][ T4721] Bluetooth: hci5: command 0x2016 tx timeout [ 277.410845][T10627] fuse: Bad value for 'fd' [ 277.422851][T10627] overlayfs: failed to clone upperpath [ 277.545318][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.872649][T10645] loop8: detected capacity change from 0 to 256 [ 278.198889][T10650] loop3: detected capacity change from 0 to 256 [ 278.345188][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 278.585321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.003764][T10618] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters [ 279.019214][T10629] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 279.019248][T10629] EXT4-fs (loop7): This should not happen!! Data will be lost [ 279.019248][T10629] [ 279.019284][T10629] EXT4-fs (loop7): Total free blocks count 0 [ 279.019298][T10629] EXT4-fs (loop7): Free/Dirty block details [ 279.019387][T10629] EXT4-fs (loop7): free_blocks=66497544192 [ 279.019412][T10629] EXT4-fs (loop7): dirty_blocks=16 [ 279.019424][T10629] EXT4-fs (loop7): Block reservation details [ 279.019434][T10629] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 279.094675][T10677] overlay: filesystem on ./file0 is read-only [ 279.110527][T10679] overlayfs: failed to resolve 'dont_measure': -2 [ 279.147391][T10679] loop3: detected capacity change from 0 to 256 [ 279.152275][T10679] FAT-fs (loop3): bogus number of FAT sectors [ 279.152310][T10679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 279.411927][ T7460] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 279.418378][ T7460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.625346][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.877625][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 279.980274][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1343'. [ 280.026223][T10698] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1344'. [ 280.029414][T10698] netlink: zone id is out of range [ 280.030692][T10698] netlink: zone id is out of range [ 280.031951][T10698] netlink: zone id is out of range [ 280.033276][T10698] netlink: get zone limit has 8 unknown bytes [ 280.162772][T10696] loop7: detected capacity change from 0 to 2048 [ 280.196200][T10696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.229871][T10696] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 280.246059][T10696] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 280.246104][T10696] EXT4-fs (loop7): This should not happen!! Data will be lost [ 280.246104][T10696] [ 280.246127][T10696] EXT4-fs (loop7): Total free blocks count 0 [ 280.246141][T10696] EXT4-fs (loop7): Free/Dirty block details [ 280.246167][T10696] EXT4-fs (loop7): free_blocks=4096 [ 280.246189][T10696] EXT4-fs (loop7): dirty_blocks=16 [ 280.246201][T10696] EXT4-fs (loop7): Block reservation details [ 280.246211][T10696] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 280.591923][ T6660] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 280.602202][ T7460] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 280.665347][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.912444][T10715] FAULT_INJECTION: forcing a failure. [ 280.912444][T10715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.912486][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.3.1347 Not tainted syzkaller #0 PREEMPT [ 280.912500][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 280.912508][T10715] Call trace: [ 280.912511][T10715] show_stack+0x2c/0x3c (C) [ 280.912538][T10715] __dump_stack+0x30/0x40 [ 280.912551][T10715] dump_stack_lvl+0xd8/0x12c [ 280.912561][T10715] dump_stack+0x1c/0x28 [ 280.912571][T10715] should_fail_ex+0x41c/0x590 [ 280.912585][T10715] should_fail+0x14/0x24 [ 280.912594][T10715] should_fail_usercopy+0x20/0x30 [ 280.912604][T10715] simple_read_from_buffer+0xc4/0x238 [ 280.912615][T10715] proc_fail_nth_read+0x1a8/0x248 [ 280.912623][T10715] vfs_read+0x230/0x8c8 [ 280.912633][T10715] ksys_read+0x12c/0x228 [ 280.912643][T10715] __arm64_sys_read+0x7c/0x90 [ 280.912649][T10715] invoke_syscall+0x98/0x244 [ 280.912660][T10715] el0_svc_common+0xec/0x23c [ 280.912670][T10715] do_el0_svc+0x4c/0x5c [ 280.912679][T10715] el0_svc+0x64/0x260 [ 280.912689][T10715] el0t_64_sync_handler+0x48/0x148 [ 280.912699][T10715] el0t_64_sync+0x198/0x19c [ 281.023563][ T30] audit: type=1400 audit(281.986:96): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="syz1" requested=w pid=10717 comm="syz.5.1349" daddr=::ffff:172.20.20.170 dest=20003 [ 281.045545][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1349'. [ 281.107754][T10718] smc: removing ib device syz1 [ 281.504861][T10718] ------------[ cut here ]------------ [ 281.504883][T10718] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.5.1349/10718 [ 281.507926][T10718] Modules linked in: [ 281.508588][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.5.1349 Not tainted syzkaller #0 PREEMPT [ 281.510144][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.511924][T10718] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 281.513309][T10718] pc : rxe_pool_cleanup+0x58/0x60 [ 281.514158][T10718] lr : rxe_pool_cleanup+0x58/0x60 [ 281.515036][T10718] sp : ffff8000927e6f40 [ 281.515763][T10718] x29: ffff8000927e6f40 x28: dfff800000000000 x27: ffff0001227f8d06 [ 281.517254][T10718] x26: dfff800000000000 x25: ffff0000cf531108 x24: dfff800000000000 [ 281.518719][T10718] x23: 1fffe00019ea61f1 x22: ffff0000cf530f88 x21: dfff800000000000 [ 281.520190][T10718] x20: ffff800084584760 x19: ffff0000cf531428 x18: 00000000ffffffff [ 281.521595][T10718] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bed32c [ 281.523011][T10718] x14: 00000000868e0060 x13: 0000000000000001 x12: 0000000000000000 [ 281.524437][T10718] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 281.525851][T10718] x8 : ffff800093847000 x7 : 0000000000000000 x6 : 0000000000000000 [ 281.527342][T10718] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000844026d4 [ 281.528758][T10718] x2 : 0000000000000002 x1 : ffff0000db361d40 x0 : 0000000000000001 [ 281.530211][T10718] Call trace: [ 281.530786][T10718] rxe_pool_cleanup+0x58/0x60 (P) [ 281.531702][T10718] rxe_dealloc+0x30/0xd0 [ 281.532444][T10718] ib_dealloc_device+0x50/0x1e0 [ 281.533311][T10718] __ib_unregister_device+0x2bc/0x33c [ 281.534273][T10718] ib_unregister_device_and_put+0x5c/0x80 [ 281.535317][T10718] nldev_dellink+0x330/0x374 [ 281.536142][T10718] rdma_nl_rcv+0x4f0/0x814 [ 281.536924][T10718] netlink_unicast+0x600/0x7f8 [ 281.537761][T10718] netlink_sendmsg+0x648/0x948 [ 281.538600][T10718] __sock_sendmsg+0xc8/0x17c [ 281.539396][T10718] ____sys_sendmsg+0x3d0/0x6c8 [ 281.540216][T10718] ___sys_sendmsg+0x198/0x224 [ 281.541049][T10718] __sys_sendmsg+0x158/0x204 [ 281.541811][T10718] __arm64_sys_sendmsg+0x80/0x94 [ 281.542668][T10718] invoke_syscall+0x98/0x244 [ 281.543453][T10718] el0_svc_common+0xec/0x23c [ 281.544245][T10718] do_el0_svc+0x4c/0x5c [ 281.544968][T10718] el0_svc+0x64/0x260 [ 281.545642][T10718] el0t_64_sync_handler+0x48/0x148 [ 281.546527][T10718] el0t_64_sync+0x198/0x19c [ 281.547331][T10718] irq event stamp: 218696 [ 281.548087][T10718] hardirqs last enabled at (218695): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 281.550347][T10718] hardirqs last disabled at (218696): [] el1_brk64+0x20/0x54 [ 281.552047][T10718] softirqs last enabled at (218578): [] __alloc_skb+0x1c0/0x610 [ 281.553641][T10718] softirqs last disabled at (218576): [] __alloc_skb+0x1a8/0x610 [ 281.555308][T10718] ---[ end trace 0000000000000000 ]--- [ 281.557516][T10718] ------------[ cut here ]------------ [ 281.557528][T10718] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.5.1349/10718 [ 281.560628][T10718] Modules linked in: [ 281.561340][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.5.1349 Tainted: G W syzkaller #0 PREEMPT [ 281.563207][T10718] Tainted: [W]=WARN [ 281.563894][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.565682][T10718] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 281.567086][T10718] pc : rxe_pool_cleanup+0x58/0x60 [ 281.568024][T10718] lr : rxe_pool_cleanup+0x58/0x60 [ 281.568944][T10718] sp : ffff8000927e6f40 [ 281.569666][T10718] x29: ffff8000927e6f40 x28: dfff800000000000 x27: ffff0001227f8d06 [ 281.571123][T10718] x26: dfff800000000000 x25: ffff0000cf531108 x24: dfff800000000000 [ 281.572594][T10718] x23: 1fffe00019ea61f1 x22: ffff0000cf530f88 x21: dfff800000000000 [ 281.574048][T10718] x20: ffff800084584760 x19: ffff0000cf531720 x18: 00000000ffffffff [ 281.575471][T10718] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bed32c [ 281.576932][T10718] x14: 00000000868e0060 x13: 0000000000000001 x12: 0000000000000000 [ 281.578406][T10718] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 281.579944][T10718] x8 : ffff800093847000 x7 : 0000000000000000 x6 : 0000000000000000 [ 281.581476][T10718] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000844026d4 [ 281.583019][T10718] x2 : 0000000000000002 x1 : ffff0000db361d40 x0 : 0000000000000001 [ 281.584548][T10718] Call trace: [ 281.585169][T10718] rxe_pool_cleanup+0x58/0x60 (P) [ 281.586105][T10718] rxe_dealloc+0x6c/0xd0 [ 281.586868][T10718] ib_dealloc_device+0x50/0x1e0 [ 281.587763][T10718] __ib_unregister_device+0x2bc/0x33c [ 281.588708][T10718] ib_unregister_device_and_put+0x5c/0x80 [ 281.589749][T10718] nldev_dellink+0x330/0x374 [ 281.590547][T10718] rdma_nl_rcv+0x4f0/0x814 [ 281.591357][T10718] netlink_unicast+0x600/0x7f8 [ 281.592188][T10718] netlink_sendmsg+0x648/0x948 [ 281.593060][T10718] __sock_sendmsg+0xc8/0x17c [ 281.593867][T10718] ____sys_sendmsg+0x3d0/0x6c8 [ 281.594716][T10718] ___sys_sendmsg+0x198/0x224 [ 281.595510][T10718] __sys_sendmsg+0x158/0x204 [ 281.596287][T10718] __arm64_sys_sendmsg+0x80/0x94 [ 281.597140][T10718] invoke_syscall+0x98/0x244 [ 281.597948][T10718] el0_svc_common+0xec/0x23c [ 281.598752][T10718] do_el0_svc+0x4c/0x5c [ 281.599483][T10718] el0_svc+0x64/0x260 [ 281.600195][T10718] el0t_64_sync_handler+0x48/0x148 [ 281.601084][T10718] el0t_64_sync+0x198/0x19c [ 281.601882][T10718] irq event stamp: 219248 [ 281.602683][T10718] hardirqs last enabled at (219247): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 281.604473][T10718] hardirqs last disabled at (219248): [] el1_brk64+0x20/0x54 [ 281.606272][T10718] softirqs last enabled at (219246): [] handle_softirqs+0xc28/0xd98 [ 281.608184][T10718] softirqs last disabled at (218699): [] __do_softirq+0x14/0x20 [ 281.609943][T10718] ---[ end trace 0000000000000000 ]--- [ 281.611659][T10718] ------------[ cut here ]------------ [ 281.611670][T10718] WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xa4/0xd4, CPU#0: syz.5.1349/10718 [ 281.614703][T10718] Modules linked in: [ 281.615456][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.5.1349 Tainted: G W syzkaller #0 PREEMPT [ 281.617534][T10718] Tainted: [W]=WARN [ 281.618283][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.620235][T10718] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 281.621680][T10718] pc : rdma_restrack_clean+0xa4/0xd4 [ 281.622664][T10718] lr : rdma_restrack_clean+0xa4/0xd4 [ 281.623572][T10718] sp : ffff8000927e6f30 [ 281.624274][T10718] x29: ffff8000927e6f30 x28: dfff800000000000 x27: ffff0001227f8d06 [ 281.625635][T10718] x26: dfff800000000000 x25: ffff0000d024e800 x24: ffff0000d024e848 [ 281.627030][T10718] x23: 0000000000000048 x22: 1fffe00019ea61da x21: dfff800000000000 [ 281.628392][T10718] x20: ffff0000d024e800 x19: ffff0000cf530ed0 x18: 00000000ffffffff [ 281.629734][T10718] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bed32c [ 281.631150][T10718] x14: 00000000868e0060 x13: 0000000000000001 x12: 0000000000000000 [ 281.632554][T10718] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 281.633950][T10718] x8 : ffff800093847000 x7 : 0000000000000000 x6 : 0000000000000000 [ 281.635381][T10718] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008440081c [ 281.636758][T10718] x2 : 0000000000000000 x1 : ffff0000db361d40 x0 : 0000000000000001 [ 281.638178][T10718] Call trace: [ 281.638741][T10718] rdma_restrack_clean+0xa4/0xd4 (P) [ 281.639610][T10718] ib_dealloc_device+0x14c/0x1e0 [ 281.640454][T10718] __ib_unregister_device+0x2bc/0x33c [ 281.641370][T10718] ib_unregister_device_and_put+0x5c/0x80 [ 281.642362][T10718] nldev_dellink+0x330/0x374 [ 281.643129][T10718] rdma_nl_rcv+0x4f0/0x814 [ 281.643894][T10718] netlink_unicast+0x600/0x7f8 [ 281.644710][T10718] netlink_sendmsg+0x648/0x948 [ 281.645506][T10718] __sock_sendmsg+0xc8/0x17c [ 281.646279][T10718] ____sys_sendmsg+0x3d0/0x6c8 [ 281.647082][T10718] ___sys_sendmsg+0x198/0x224 [ 281.648037][T10718] __sys_sendmsg+0x158/0x204 [ 281.648910][T10718] __arm64_sys_sendmsg+0x80/0x94 [ 281.649858][T10718] invoke_syscall+0x98/0x244 [ 281.650741][T10718] el0_svc_common+0xec/0x23c [ 281.651598][T10718] do_el0_svc+0x4c/0x5c [ 281.652348][T10718] el0_svc+0x64/0x260 [ 281.653029][T10718] el0t_64_sync_handler+0x48/0x148 [ 281.653980][T10718] el0t_64_sync+0x198/0x19c [ 281.654809][T10718] irq event stamp: 219362 [ 281.655582][T10718] hardirqs last enabled at (219361): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 281.657445][T10718] hardirqs last disabled at (219362): [] el1_brk64+0x20/0x54 [ 281.658970][T10718] softirqs last enabled at (219358): [] handle_softirqs+0xc28/0xd98 [ 281.660570][T10718] softirqs last disabled at (219251): [] __do_softirq+0x14/0x20 [ 281.662092][T10718] ---[ end trace 0000000000000000 ]--- [ 281.706179][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.836243][ T6660] ================================================================== [ 281.836263][ T6660] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x48/0x60 [ 281.836289][ T6660] Read of size 1 at addr ffff0000d024e818 by task kworker/u8:19/6660 [ 281.836297][ T6660] [ 281.836305][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT [ 281.836316][ T6660] Tainted: [W]=WARN [ 281.836319][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.836324][ T6660] Workqueue: krdsd rds_ib_dev_free [ 281.836336][ T6660] Call trace: [ 281.836340][ T6660] show_stack+0x2c/0x3c (C) [ 281.836352][ T6660] __dump_stack+0x30/0x40 [ 281.836362][ T6660] dump_stack_lvl+0xd8/0x12c [ 281.836371][ T6660] print_address_description+0xb0/0x238 [ 281.836380][ T6660] print_report+0x68/0x84 [ 281.836386][ T6660] kasan_report+0x8c/0xc4 [ 281.836396][ T6660] __kasan_check_byte+0x3c/0x54 [ 281.836404][ T6660] lock_acquire+0xa4/0x364 [ 281.836411][ T6660] _raw_spin_lock+0x48/0x60 [ 281.836420][ T6660] xa_erase+0x24/0x50 [ 281.836429][ T6660] rdma_restrack_del+0xc0/0x284 [ 281.836438][ T6660] ib_dealloc_pd_user+0x134/0x168 [ 281.836446][ T6660] rds_ib_dev_free+0xc0/0x27c [ 281.836454][ T6660] process_scheduled_works+0x788/0x10b8 [ 281.836463][ T6660] worker_thread+0x798/0xbd0 [ 281.836471][ T6660] kthread+0x304/0x3d4 [ 281.836478][ T6660] ret_from_fork+0x10/0x20 [ 281.836485][ T6660] [ 281.836487][ T6660] Allocated by task 4962: [ 281.836492][ T6660] kasan_save_track+0x40/0x78 [ 281.836499][ T6660] kasan_save_alloc_info+0x44/0x54 [ 281.836507][ T6660] __kasan_kmalloc+0x9c/0xb4 [ 281.836513][ T6660] __kmalloc_cache_noprof+0x2e8/0x5ec [ 281.836520][ T6660] rdma_restrack_init+0x60/0x154 [ 281.836527][ T6660] _ib_alloc_device+0x58/0x4c8 [ 281.836534][ T6660] rxe_net_add+0x30/0x114 [ 281.836542][ T6660] rxe_newlink+0x114/0x1c0 [ 281.836551][ T6660] nldev_newlink+0x478/0x4f0 [ 281.836556][ T6660] rdma_nl_rcv+0x4f0/0x814 [ 281.836562][ T6660] netlink_unicast+0x600/0x7f8 [ 281.836569][ T6660] netlink_sendmsg+0x648/0x948 [ 281.836575][ T6660] __sock_sendmsg+0xc8/0x17c [ 281.836582][ T6660] ____sys_sendmsg+0x3d0/0x6c8 [ 281.836589][ T6660] ___sys_sendmsg+0x198/0x224 [ 281.836595][ T6660] __sys_sendmsg+0x158/0x204 [ 281.836602][ T6660] __arm64_sys_sendmsg+0x80/0x94 [ 281.836609][ T6660] invoke_syscall+0x98/0x244 [ 281.836617][ T6660] el0_svc_common+0xec/0x23c [ 281.836625][ T6660] do_el0_svc+0x4c/0x5c [ 281.836633][ T6660] el0_svc+0x64/0x260 [ 281.836640][ T6660] el0t_64_sync_handler+0x48/0x148 [ 281.836648][ T6660] el0t_64_sync+0x198/0x19c [ 281.836654][ T6660] [ 281.836655][ T6660] Freed by task 10718: [ 281.836659][ T6660] kasan_save_track+0x40/0x78 [ 281.836665][ T6660] kasan_save_free_info+0x58/0x70 [ 281.836673][ T6660] __kasan_slab_free+0x74/0xa4 [ 281.836679][ T6660] kfree+0x188/0x690 [ 281.836685][ T6660] rdma_restrack_clean+0xb8/0xd4 [ 281.836691][ T6660] ib_dealloc_device+0x14c/0x1e0 [ 281.836699][ T6660] __ib_unregister_device+0x2bc/0x33c [ 281.836706][ T6660] ib_unregister_device_and_put+0x5c/0x80 [ 281.836714][ T6660] nldev_dellink+0x330/0x374 [ 281.836720][ T6660] rdma_nl_rcv+0x4f0/0x814 [ 281.836725][ T6660] netlink_unicast+0x600/0x7f8 [ 281.836731][ T6660] netlink_sendmsg+0x648/0x948 [ 281.836737][ T6660] __sock_sendmsg+0xc8/0x17c [ 281.836743][ T6660] ____sys_sendmsg+0x3d0/0x6c8 [ 281.836750][ T6660] ___sys_sendmsg+0x198/0x224 [ 281.836757][ T6660] __sys_sendmsg+0x158/0x204 [ 281.836763][ T6660] __arm64_sys_sendmsg+0x80/0x94 [ 281.836770][ T6660] invoke_syscall+0x98/0x244 [ 281.836778][ T6660] el0_svc_common+0xec/0x23c [ 281.836786][ T6660] do_el0_svc+0x4c/0x5c [ 281.836794][ T6660] el0_svc+0x64/0x260 [ 281.836801][ T6660] el0t_64_sync_handler+0x48/0x148 [ 281.836808][ T6660] el0t_64_sync+0x198/0x19c [ 281.836813][ T6660] [ 281.836815][ T6660] The buggy address belongs to the object at ffff0000d024e800 [ 281.836815][ T6660] which belongs to the cache kmalloc-1k of size 1024 [ 281.836821][ T6660] The buggy address is located 24 bytes inside of [ 281.836821][ T6660] freed 1024-byte region [ffff0000d024e800, ffff0000d024ec00) [ 281.836828][ T6660] [ 281.836830][ T6660] The buggy address belongs to the physical page: [ 281.836834][ T6660] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110248 [ 281.836840][ T6660] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.836846][ T6660] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 281.836854][ T6660] page_type: f5(slab) [ 281.836861][ T6660] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 281.836866][ T6660] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 281.836872][ T6660] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 281.836878][ T6660] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 281.836883][ T6660] head: 05ffc00000000003 fffffdffc3409201 00000000ffffffff 00000000ffffffff [ 281.836888][ T6660] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 281.836892][ T6660] page dumped because: kasan: bad access detected [ 281.836895][ T6660] [ 281.836896][ T6660] Memory state around the buggy address: [ 281.836900][ T6660] ffff0000d024e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.836904][ T6660] ffff0000d024e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.836908][ T6660] >ffff0000d024e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.836911][ T6660] ^ [ 281.836915][ T6660] ffff0000d024e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.836919][ T6660] ffff0000d024e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.836922][ T6660] ================================================================== [ 281.837286][ T6660] Disabling lock debugging due to kernel taint [ 281.837648][ T6660] ------------[ cut here ]------------ [ 281.838000][ T6660] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 281.838347][ T6660] index 13882 is out of range for type 'unsigned long[8]' [ 281.838691][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: kworker/u8:19 Tainted: G B W syzkaller #0 PREEMPT [ 281.838702][ T6660] Tainted: [B]=BAD_PAGE, [W]=WARN [ 281.838705][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.838708][ T6660] Workqueue: krdsd rds_ib_dev_free [ 281.838717][ T6660] Call trace: [ 281.838719][ T6660] show_stack+0x2c/0x3c (C) [ 281.838730][ T6660] __dump_stack+0x30/0x40 [ 281.838739][ T6660] dump_stack_lvl+0xd8/0x12c [ 281.838749][ T6660] dump_stack+0x1c/0x28 [ 281.838757][ T6660] ubsan_epilogue+0x14/0x48 [ 281.838766][ T6660] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 281.838776][ T6660] queued_spin_lock_slowpath+0x834/0xd04 [ 281.838787][ T6660] do_raw_spin_lock+0x21c/0x2d0 [ 281.838795][ T6660] _raw_spin_lock+0x50/0x60 [ 281.838804][ T6660] xa_erase+0x24/0x50 [ 281.838812][ T6660] rdma_restrack_del+0xc0/0x284 [ 281.838820][ T6660] ib_dealloc_pd_user+0x134/0x168 [ 281.838827][ T6660] rds_ib_dev_free+0xc0/0x27c [ 281.838835][ T6660] process_scheduled_works+0x788/0x10b8 [ 281.838843][ T6660] worker_thread+0x798/0xbd0 [ 281.838851][ T6660] kthread+0x304/0x3d4 [ 281.838858][ T6660] ret_from_fork+0x10/0x20 [ 281.839188][ T6660] ---[ end trace ]--- [ 281.839535][ T6660] Unable to handle kernel paging request at virtual address ffff800088ac7700 [ 281.839885][ T6660] KASAN: probably user-memory-access in range [0x000000044563b800-0x000000044563b807] [ 281.840244][ T6660] Mem abort info: [ 281.840583][ T6660] ESR = 0x0000000096000047 [ 281.840924][ T6660] EC = 0x25: DABT (current EL), IL = 32 bits [ 281.841278][ T6660] SET = 0, FnV = 0 [ 281.841615][ T6660] EA = 0, S1PTW = 0 [ 281.841950][ T6660] FSC = 0x07: level 3 translation fault [ 281.842291][ T6660] Data abort info: [ 281.842634][ T6660] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 281.842962][ T6660] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 281.843295][ T6660] GCS = 0, Overlay = 0, DirtyBit = 0 [ 281.843613][ T6660] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b01e000 [ 281.843934][ T6660] [ffff800088ac7700] pgd=0000000000000000, p4d=10000002212fc003, pud=10000002212fd003, pmd=1000000221301003, pte=0000000000000000 [ 281.845876][ T6660] Internal error: Oops: 0000000096000047 [#1] SMP [ 281.981588][ T6660] Modules linked in: [ 281.982252][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: kworker/u8:19 Tainted: G B W syzkaller #0 PREEMPT [ 281.983948][ T6660] Tainted: [B]=BAD_PAGE, [W]=WARN [ 281.984757][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 281.986491][ T6660] Workqueue: krdsd rds_ib_dev_free [ 281.987337][ T6660] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 281.988672][ T6660] pc : queued_spin_lock_slowpath+0x544/0xd04 [ 281.989690][ T6660] lr : queued_spin_lock_slowpath+0x834/0xd04 [ 281.990648][ T6660] sp : ffff800097527840 [ 281.991342][ T6660] x29: ffff8000975278e0 x28: ffff800088ac7700 x27: 1fffe000193783aa [ 281.992691][ T6660] x26: 1fffe0001a049d00 x25: ffff0001ade40708 x24: dfff800000000000 [ 281.994138][ T6660] x23: ffff700012ea4f0c x22: ffff0001ade40700 x21: 1fffe00035bc80e0 [ 281.995611][ T6660] x20: ffff0000c9bc1d50 x19: ffff0000d024e800 x18: 00000000ffffffff [ 281.996958][ T6660] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 281.998368][ T6660] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004 [ 281.999694][ T6660] x11: ffff70001145ec6c x10: ffff800088ac7700 x9 : ffff800088ac7700 [ 282.001042][ T6660] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff80008048de94 [ 282.002335][ T6660] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7498 [ 282.003674][ T6660] x2 : 0000000000000005 x1 : 0000000000000004 x0 : ffff0001ade40708 [ 282.005106][ T6660] Call trace: [ 282.005642][ T6660] queued_spin_lock_slowpath+0x544/0xd04 (P) [ 282.006654][ T6660] do_raw_spin_lock+0x21c/0x2d0 [ 282.007468][ T6660] _raw_spin_lock+0x50/0x60 [ 282.008243][ T6660] xa_erase+0x24/0x50 [ 282.008932][ T6660] rdma_restrack_del+0xc0/0x284 [ 282.009772][ T6660] ib_dealloc_pd_user+0x134/0x168 [ 282.010651][ T6660] rds_ib_dev_free+0xc0/0x27c [ 282.011446][ T6660] process_scheduled_works+0x788/0x10b8 [ 282.012351][ T6660] worker_thread+0x798/0xbd0 [ 282.013146][ T6660] kthread+0x304/0x3d4 [ 282.013803][ T6660] ret_from_fork+0x10/0x20 [ 282.014530][ T6660] Code: aa1c03e0 968a58fd 910022c0 52800081 (f9000396) [ 282.015650][ T6660] ---[ end trace 0000000000000000 ]--- [ 282.314720][ T6660] Kernel panic - not syncing: Oops: Fatal exception [ 282.315934][ T6660] Kernel Offset: disabled [ 282.316638][ T6660] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 282.317744][ T6660] Memory Limit: none [ 282.612053][ T6660] Rebooting in 86400 seconds..