last executing test programs: 8.160833942s ago: executing program 0 (id=26): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020da09060000000000000109022d00010000b010090400080303000100092107000801220500090503000007062009050203ff03f3870100"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x8080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7}]}}, 0x0}, 0x0) 5.418092971s ago: executing program 2 (id=32): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x58c}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 5.296696352s ago: executing program 1 (id=33): socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[], 0x1, 0x5e05, &(0x7f0000011a00)="$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") 5.193411651s ago: executing program 2 (id=34): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x8202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x0, {0x4b564d04, 0x401}}, @nested_load_code={0x12e, 0x54, {0x2, "c4017c50d26d65660f38337a920f01c4c48260f77109430f32420f32b99c080000b830000000ba000000000f302e64d1343766bad00466b80b0066ef"}}], 0x6c}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 4.56546262s ago: executing program 1 (id=35): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x301242f, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 4.480584319s ago: executing program 0 (id=36): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) keyctl$set_reqkey_keyring(0xe, 0x2) r0 = syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x1000000d) (async) open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)=@newtaction={0x4c0, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x9c, 0x1e, 0x0, 0x0, {{0x7}, {0x4}, {0x74, 0x6, "410505d69f564464d85ceb404a80de005126b91578ee0bfe0de296f7981ce172d4d6c5be955c093cf9801099269efe509d3069d16d55727ab612ef13668e83b42372e9e8f058f147b5abc75f6cf48d0b3156a4dcd7b835dc84e69769b9a3fc8ca2a723cf866ee73713abb51ff7d73c7b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x40c, 0x1, [@m_mpls={0xec, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9434c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0xa6, 0x6, "6e0319261d698ac2bcbac71ebe3947803b91ef350697f8c6f960774b04244a86b09ad3a22f7b2efce049d7fed2e80fbf9b81cb2be91e8685423e5e099a49ab33f58f338f0e290039bc85376a9fd498758844d7e5041c5c55b6eed9ea4297ff8a175fc56186fe452fc94334f397826f4003382a80ec36104d3ff0244aa56d7ff781267873c6be8c557881889d03d7e01c5cc23cf5e8362e864e572cfb341d99160752"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x148, 0x1a, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x84d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x165}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5ed}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x74c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf2, 0x6, "2468d537ac98f6c3f5d6f6f58aab517bacbc0c3559ec190d4981fb5498040bef5f715a42ccb094ce531f407b8baf9f751bef2685fce16edd7cb6beb240f69be610fc3c36400c507d69b094feaaa80d87e7aff83987ebe5d56ba673754e25c12c1c8b61aaf09b04b652f8716102cfcdf641e9613fe9d6660f0a59c115fa0e06a4f62d572624ac5e4c3723a3d77eea468a7d8eb26c9a5d9ad12edd36580c57097b67733fdc8ae530fd3ca897f13f8dd2509abaa72861856f0ef2e239a2306bf3326b9c4d3e9ad19408b17d4912dea6cd2435bc2a8a460c48bcf74b0075cc865d90b093c81a095b6d4733dedbf9e1ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x54, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x20, 0x6, "dec248ecdff223ba52e6a1961177cf2d9b569c5d324dfab7d84174eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x180, 0x17, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x5, 0x10000000, 0x5, 0xffffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0xec, 0x6, "cdd90c4fd38e0453bc0b82b7414066550d5352a9a8978b6cb4c2c20abc1737ded2f7aeb7b9ab580638992f812743721e74afe4792710cae9678c5ce55b9cce391b3302d1f07cef209306e20a03a00217779ac8a54c4a6213c5a7a8f70bab632314079f32a443a6ab72a9c82b57533e5338f356367f4fe00034012129ffa78abea1a4b8349c55386d4509668ff321c05fbbde76d13f5a5b618ce40145cae0398a1b46f01253e0b4adb55b385b16bec20d078d1fa2cca3d4dba44c27810dd0ee6679f08f47e4702c2be26629e9ae0db5e37aaa5690bcebd611de0ccc8d2b5a0cd9442e42bbdf9bfb93"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x14, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x80) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-6,uid=', @ANYRES64=r0, @ANYRESDEC=0x0], 0xff, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") (async) truncate(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 4.1604552s ago: executing program 0 (id=37): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800b00010067656e657665000018000280060005004e24000400060008000a04", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.964709028s ago: executing program 1 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) clock_getres(0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)='M', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r7, 0x1, 0x0, 0x0) timer_gettime(r7, &(0x7f0000000100)) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="16ea", 0x2}], 0x1}, 0x0) close(r2) r8 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x8aa1, 0x10100, 0xfffffffc, 0xdc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000100)={@id={0x2, 0x0, @a}}) socket$nl_xfrm(0x10, 0x3, 0x6) 3.958292209s ago: executing program 2 (id=40): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x8, 0x70bd25, 0x25dfdbfb, {0x40, 0x1, 0x0, r1, 0x5, 0x2, 0xfffff635, 0x2, 0x0, 0x5, 0xb8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48840) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x5) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r10 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_G_AUDIO(r10, 0x80345621, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000a00)={r11, r8, r9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 3.917912643s ago: executing program 3 (id=41): r0 = socket$inet(0x2, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190009000000000000000000021800000000fd000000ed0008000100ac1414"], 0x2c}}, 0x0) 2.326006904s ago: executing program 2 (id=42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) (async) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000240)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESHEX=r1, @ANYRESOCT, @ANYRES32, @ANYRES64=r0, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES64=r0], 0x1, 0x703, &(0x7f0000001f80)="$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") 2.252832731s ago: executing program 0 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) 2.206789955s ago: executing program 3 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth1_to_team\x00', 0x1000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1832, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0a040000000000000500000006"], &(0x7f0000000f40)=""/4071, 0x3e, 0xfe7, 0x8, 0x9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0a040000000000000500000006"], &(0x7f0000000f40)=""/4071, 0x3e, 0xfe7, 0x8, 0x9}, 0x28) memfd_secret(0x0) close_range(r0, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x8c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.960876638s ago: executing program 3 (id=45): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.680837363s ago: executing program 3 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004855) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x1}, {0xffff, 0xf}, {0x1, 0xb}}}, 0x24}}, 0x40) 1.665454334s ago: executing program 0 (id=47): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x1, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x2007bb}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="400000001400b59527bd7000ffdbdf250a40c000", @ANYRES32=r10, @ANYBLOB="14000100fe80000000000000000000000000008f20522887232dffebb5dda3d7e349aa0000009400000000000043f00000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c5) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40010) splice(r6, 0x0, r8, 0x0, 0x8001, 0xd) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x8000002}}, 0x10) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x240080c0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f00000012c0)="33eb8b8a3c87af90858d2f78499f0205cee8f0acb8ae7b20483ea75948aa57a89b9c64bd8d8f57fec9284fb6ba5166610aa6966b6f5ede85bc8ed80532cae5d3b0da41fd973eae787c68aabef7936f60e39f90d82b1b069cea1a2e2f47083367a2ebf57dd7c07ee2778932d1d596dff143c519a07eba3b3190ca828d8dc18192caeb21ee701c49ddc9d0473ef7f8e39d6bb2ea46c0b9c268e0bb4f574f6cd337f7bf737da719f68c3eeb4fae220966687088ec86bc9917fba3bf1faeb00c3ff98c9a858f9e481b0120a7314dc54a33756fda32583eea730027c6cd4bbfa261a6025a"}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000013c0)={'ipvlan0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x400}) dup(r0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xc1, &(0x7f00000011c0)="$eJzs1zFKxkAQBtAxEYla2YhgYZ0md/AMnkAtLLQRK0XIFbyIV/EIuYFFWgtHdlc8gE3g570iMx9DYIotdj++3s/fxoicI3I8e8zMnLN5en6534/yvX4IdlIXh7UOEXFxUnLE52Wb7UUbLuvr7bL2f/8ctJJ5c1xOyxZrAwAA/9D10283HNX8nVO9+VflFVib07i6azH7yK2WBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjATwAAAP//Z4gvhg==") 1.380738532s ago: executing program 1 (id=48): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000200)=ANY=[], 0x1, 0xb07, &(0x7f00000014c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 1.252868954s ago: executing program 3 (id=49): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = getpid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989, 0x1}) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4d, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 961.842572ms ago: executing program 3 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="56752dd3020601010000000000"], 0xffffff2a}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c000780ffff0500070084000000060004404e2200000c000280080001407f000001769371e2e5a48dbdd865dd099ca95a00bf152a9e64ce72e5e39502"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313060004070c0000002a7f08870200000083253409120b09007a1583"], 0x0}, 0x0) 649.538341ms ago: executing program 1 (id=51): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x2, 0xf1, 0x2b, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0x18bb, 0x100}}) (rerun: 64) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 512.095463ms ago: executing program 2 (id=52): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', @ifru_mtu=0x4}) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={&(0x7f00000000c0), 0x10}}, 0x20) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0x6, 0x4) (async) getrandom(&(0x7f0000000280)=""/228, 0xe4, 0x1) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x314535fcc976af96, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x3, {0x0, 0x1, 0x4}, {0x0, 0xff}, 0xfe, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x2, 0xf, 0x3}, 0x1, 0xfd}, {0x2, 0x2, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0x1}, {0x1, 0x0, {0x0, 0xff, 0x1}, {0x2, 0xff, 0x3}, 0xfd, 0x2}, {0x3, 0x2, {0x2, 0x1, 0x4}, {0x0, 0xf0}, 0xfd, 0xfe}, {0x3, 0x2, {0x1, 0xff, 0x3}, {0x0, 0x1}, 0x1, 0xfe}], 0xc0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xa0bcbd5c394334af}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x9f, 0x5]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x860}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x9, 0x8]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xeea}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8811) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x1000) (async, rerun: 64) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), r4) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044810}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x10, 0x20, 0x20000000, 0x4, {{0x41, 0x4, 0x0, 0x2e, 0x104, 0x68, 0x0, 0x0, 0x7b, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xe}, {[@end, @ssrr={0x89, 0xf, 0x59, [@multicast2, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x74, 0x3, 0x9, [{@rand_addr=0x64010102, 0x165}, {@multicast1, 0x1ff}, {@loopback, 0x9}, {@multicast2, 0x882}, {@rand_addr=0x64010100, 0x3}, {@local, 0xffff}, {@broadcast, 0x8}]}, @lsrr={0x83, 0xb, 0x48, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x13, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xd0, [@rand_addr=0x64010102, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x5d, 0x3, 0x0, [{@loopback, 0xde6}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0xaa2f}, {@private=0xa010101, 0x10001}]}, @generic={0x44, 0xc, "4798833c0e60aca02403"}, @timestamp_prespec={0x44, 0xc, 0xbd, 0x3, 0x7, [{@multicast1, 0xfffffffe}]}, @timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0x1, [{@local, 0x2}, {@local, 0xfffffff8}, {@remote, 0x7ff}, {@rand_addr=0x64010100, 0xc21}, {@local, 0x3}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r7, r9, 0x25, 0xf, @val=@iter={&(0x7f0000000a40)=@map_fd=r7, 0x10}}, 0x20) (async) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000ac0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000b00)={0x1, 0x3, 0x7, 0x800, 0xc, 0xe4}) (async, rerun: 64) syz_usb_connect(0x3, 0x397, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xee, 0x98, 0x4b, 0x10, 0x525, 0x9901, 0xef9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x385, 0x1, 0xa, 0x4, 0x60, 0x8, [{{0x9, 0x4, 0x17, 0x49, 0xa, 0xd4, 0x35, 0x79, 0x9, [], [{{0x9, 0x5, 0xe, 0x8, 0x200, 0x2, 0xf7, 0xfe, [@generic={0x22, 0x21, "42a66f079f7fa3d2a095b7c5a5a8b2755361afd2ca9e5038db9394d7a7f926c0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x51, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x10, 0x6, 0x4, [@generic={0xbf, 0xe, "4d0aa714af25ae5061d4ef6b4852764615443ce29109a59f5e4c956994b625174713b4d27342738cd0ed625dffa3b5bf59f3b6e053950948a49e0f01adf182703a29400c3b648ce12f8d1b055eeb11092d87709ec2f9a590f8b42ff1e4e086343f8edf2f6c48731d8175008ead0beab4bf4fcd93cc2c387836c2ade97f6c1383d16e0c5e66d6bb5f5fc0e11e119cee7e8af51ed94fea81aa1e7b4a6aeacdb7e009bb3db714aeaa5063dbc39637eebea3a25f052a196b3ffce68e822834"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0x1, 0x8, [@generic={0x26, 0x11, "817388aaf95389d42ce35c591d5be6bc72a9439078eeca9bccc6ca00092a0e63e2c51f0d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x7f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x0, 0xa0e}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x5, 0x1, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x81, 0xc, 0x21, [@generic={0xce, 0xb, "b532c64bd873319ce2215c5b0203bde5d6645e4f66bced6933ebe365cddf2c61e62bdb1aaabf96a93992a2d250257dc7cd5279ca4e29ecdddf45735bd8d3eaece900808d4a3e9e6660b7cfd0b716571980bd5c9e1268dc41f806a984d543256e884afcfa5496528752e95cc5b81c910589cda47fa5ea4acc13b97b566b98c13dd1535096e2bfe4b4156300778a84dff4a4498ae43540051c92de5c1fbf290e260d6951ba9313812f7f200e1bd270a325f73b8c52f9789d9f52745cf86da299b581a901352c31a1b9f0d12e59"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x1, 0xfb, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0xa, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x8, 0x3, 0x4, [@generic={0x85, 0x30, "8cc7a0767c61197c754af11319ebcc46252de988eb958eee5e15b94f30bf31d422983417190714ebbb3261d966bbb5b0a7571390945f462ca53bfedd5678ab8846a4ea6ea038c915db52b5bf1deb62a88ae5be4072645a50a4ed7d78bea3899ba577ee6fba788556f4a6a5139bbf5026aafa9723114226e1724a4121dfe9db61cc35f5"}, @generic={0x9c, 0x1b4d067766c2d1c9, "e40280c5f73b46904145e4eb5dd4816061ec3fd61f3cbbc0f87f0f2e38983ce20d7e1aafcbc529238019a0894d953cc5448473913be6e469028065bd53aa6b829d586c1c403fe2e4804e6b463780806305df51811467c085c0d0c5061bb12ffddd3912817438fa5aae1ff575bf1517ea1784ae122c22640a601527e6db09b6b1432b849d1750364790f6d4ed6a9fc32a7db85ff25efee3084e45"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0xe3, 0xe, 0x28, 0x8}, 0xc9, &(0x7f0000000f40)={0x5, 0xf, 0xc9, 0x3, [@generic={0x95, 0x10, 0xb, "c553364d672a010fea9c8d11297bb16924aad917d10b66dd9e7e97f48fbcaac57cf1a10ef056a2adfde4f3e9c95eb7e6fb17e5a184d4262ddfee71c3eb0f3fa04eea34986385dbef5cf442bd6e703cc926a9ecd1751625594e9e549fcf5747bf494c5f38aec24cf4a8438f3572faf0bb3300d0d66c09d88536dd5e78d260ec60ec2b9e8e984de1f8d2b6afa742d567ad93de"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x0, 0x8, 0x8, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0xf6, 0x6, 0xb563, 0xf000, 0x7fff, [0x3fc0, 0xff000f, 0x3f37, 0x21, 0xc000, 0xc000]}]}, 0x7, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3401}}, {0xee, &(0x7f0000001140)=@string={0xee, 0x3, "fe11b5979f087a78dd2756575dc3a0fefac18e79532ff603f3e5d86e5e4c0d1aca174e8eaa8c00eb92560d0720fb0b0fc0ae9c67a717be142a479e678f5a10bb9d47be58cd24264bed655ce71f88d56d478ccc55d15b536c3afc55dfbab2cdd60d7ba25dd6f635dd8345eeac6485d393723a189a9a041756c70e7f1d5f5ea0089be1be716980da188b2a974e78b042430773653f952b3f33f1a3d87d60bd271ef45f248d506bdaef09b574d1d7db37d36d221cfc4d8f9b92957ab7c4fec04a038eb3fd99f52904a26a55ff7dc6bfe256f27ba99df557e74b3a7a5211eb2fb2ca63be62ad4d00f5cd6341237c"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x422}}, {0xe4, &(0x7f0000001280)=@string={0xe4, 0x3, "b9ac7cab385f801891597d3e5777bcebec0f403912701567e3848229337f854ac71a3b644a67d80ff9e0e577f15ed7f3e976815d7f13ffe47341b4741707b64002b0e58c5a6f4bfc1bf95d3cae9123c92738d421b5389bc1ed591bdeb2e78aceecc8de076ad7752b836a2b80b51f30123a6752e2f6648ed8fab6fced6649e535d62b6d79870fe961c3ef677cd5080a41e07c71fb50927583f95639365d41c0c79a61d789cffc3bfd36ec4b029ab1901bfa67f274afe96996ad55d2be9d5fb0583bdc3454026a24bc30a523d1c33e23f749267303f6274a9a3342f0ee45dbd2d121bb"}}]}) (rerun: 64) getsockopt(r4, 0x9, 0x9, &(0x7f0000001400)=""/4096, &(0x7f0000002400)=0x1000) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002480), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x50, r10, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) (async) syz_open_dev$vim2m(&(0x7f00000025c0), 0xfffffffffffffff9, 0x2) (async, rerun: 32) modify_ldt$read(0x0, &(0x7f0000002600)=""/247, 0xf7) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, &(0x7f0000003780)={0x0, &(0x7f0000003740)=[&(0x7f0000002700)="6abebd6cc85579be57a5916255c7533515006157c6b5ea5d4c53ed96943c25a94907d01db2861f75e977c1a9917945", &(0x7f0000002740)="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"]}) 389.209414ms ago: executing program 1 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="86a73476445f04949289d1c045c0d50000070000000000000000006e96c98f6aeaa8e5f7301bbcda7bd9230000", @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="8de7ee0c7cdad9b4b47380c988ca2520a9d1769835aa9ceacc04d25983c69f6e0d", 0x21}, {&(0x7f0000000300)="f2278edfb9", 0x5}], 0x2) 204.920541ms ago: executing program 2 (id=54): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0xfffffffffffffe45) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010027bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0a460b16bf54a544fa36911f5a89c2f566c03f7283907e94f53f1b7acf29bc3f0c591e2e7da7c4d3f3e0327717623251e44aea500b77d3f18a5f51b785d29c3fa37d01e4e1a07950c441e4598cf67b014a92d32aa88504068dbb91e0f8c2c6b9dacf38998258184c80ad58258c36ce18aa2601cf94ed4ef915bce761e0a87591b70113a276a540b51122d498133e77f60331a49400f35e8d92bf7088e9abd5dd7ce8fe82c92254fb4aab20983ba7059a2162173eb111283c03592edc88d2cfc330c4a8779baab74e65c05c90799658d8654b4b13a466b581c2c44bb84021d5d66949"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 0s ago: executing program 0 (id=55): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x80000, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r9, 0xc0485630, &(0x7f0000000340)={0x6, "e2f9b7c864555b36a22ac9b6c28297f1dd98a291de46744a3786ca124ebbefbe", 0x0, 0x0, 0x0, 0x2, 0x2}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1c, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x401, 0x0, 0x7c24, 0x2, 0x1, {0x0, r8}}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0x2, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0xe40, 0xe54, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/7, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_clone(0x202800, &(0x7f00000005c0)="0b173cd39d859cb358027ff7439f2cf749afa1209b7b66456c316762d9518c5dafa0051b5ae2d3bebb507f95afd00f390274dc0ce791307c4fe8c3b99d739eadd36405e153a873f976ad5ff5045db1737c5bd688df2d5ea576e938c7ebc4fca17fba761c9220372b045d7b15c44d6e7c9e0a466d9b323cf5dcf0a623f2201f23f2f5ce2610c94d8e5f605f5af07965f5", 0x90, &(0x7f0000000280), &(0x7f0000000300), &(0x7f00000004c0)="0ca4") (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5e, r12}) (async) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) r15 = accept4(r14, 0x0, 0x0, 0x0) ioctl$int_in(r15, 0x5452, &(0x7f0000000100)=0x8000) (async) read$alg(r15, &(0x7f0000000000)=""/35, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. [ 76.603152][ T5759] cgroup: Unknown subsys name 'net' [ 76.742018][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.432667][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.197591][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.212836][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.220994][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.229511][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.262374][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.276747][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.285533][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.295041][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.302686][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.311463][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.342737][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.345474][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.357602][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.366534][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.369695][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.385328][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.402601][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.410049][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.465645][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.474263][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.490397][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.499732][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.508117][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.515865][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.868797][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.091402][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.109380][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.116724][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.124303][ T5772] bridge_slave_0: entered allmulticast mode [ 81.131589][ T5772] bridge_slave_0: entered promiscuous mode [ 81.149135][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.178762][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.186175][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.193706][ T5772] bridge_slave_1: entered allmulticast mode [ 81.200712][ T5772] bridge_slave_1: entered promiscuous mode [ 81.320731][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.333685][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.343721][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.406189][ T5772] team0: Port device team_slave_0 added [ 81.425718][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.433478][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.440629][ T5768] bridge_slave_0: entered allmulticast mode [ 81.448684][ T5768] bridge_slave_0: entered promiscuous mode [ 81.480478][ T5772] team0: Port device team_slave_1 added [ 81.511691][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.519182][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.526559][ T5768] bridge_slave_1: entered allmulticast mode [ 81.534507][ T5768] bridge_slave_1: entered promiscuous mode [ 81.559845][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.567176][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.574630][ T5775] bridge_slave_0: entered allmulticast mode [ 81.582022][ T5775] bridge_slave_0: entered promiscuous mode [ 81.590147][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.597443][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.605042][ T5775] bridge_slave_1: entered allmulticast mode [ 81.612060][ T5775] bridge_slave_1: entered promiscuous mode [ 81.648774][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.655952][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.682211][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.726919][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.734041][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.761487][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.781408][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.793665][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.806301][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.841215][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.848620][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.856303][ T5780] bridge_slave_0: entered allmulticast mode [ 81.863994][ T5780] bridge_slave_0: entered promiscuous mode [ 81.891903][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.928236][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.935702][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.943373][ T5780] bridge_slave_1: entered allmulticast mode [ 81.950651][ T5780] bridge_slave_1: entered promiscuous mode [ 82.005193][ T5768] team0: Port device team_slave_0 added [ 82.027091][ T5775] team0: Port device team_slave_0 added [ 82.042251][ T5775] team0: Port device team_slave_1 added [ 82.063397][ T5768] team0: Port device team_slave_1 added [ 82.071541][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.086357][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.110875][ T5772] hsr_slave_0: entered promiscuous mode [ 82.117845][ T5772] hsr_slave_1: entered promiscuous mode [ 82.164856][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.171875][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.199482][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.238983][ T5780] team0: Port device team_slave_0 added [ 82.259576][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.266838][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.292934][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.305678][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.312735][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.338698][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.351984][ T5780] team0: Port device team_slave_1 added [ 82.395503][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.402602][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.428736][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.435532][ T5779] Bluetooth: hci0: command tx timeout [ 82.440520][ T5776] Bluetooth: hci2: command tx timeout [ 82.451058][ T5771] Bluetooth: hci1: command tx timeout [ 82.470866][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.477897][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.503871][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.534937][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.541934][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.568609][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.592535][ T5771] Bluetooth: hci3: command tx timeout [ 82.663268][ T5775] hsr_slave_0: entered promiscuous mode [ 82.669852][ T5775] hsr_slave_1: entered promiscuous mode [ 82.676425][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.686098][ T5775] Cannot create hsr debugfs directory [ 82.710392][ T5768] hsr_slave_0: entered promiscuous mode [ 82.717488][ T5768] hsr_slave_1: entered promiscuous mode [ 82.723984][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.731587][ T5768] Cannot create hsr debugfs directory [ 82.785047][ T5780] hsr_slave_0: entered promiscuous mode [ 82.791698][ T5780] hsr_slave_1: entered promiscuous mode [ 82.798212][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.806405][ T5780] Cannot create hsr debugfs directory [ 83.174164][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.186921][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.205435][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.217671][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.291921][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.308930][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.337747][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.348689][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.437726][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.468193][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.480026][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.504558][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.586230][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.600276][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.615874][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.627154][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.697584][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.746052][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.786941][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.797613][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.805031][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.841423][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.848598][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.918172][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.940589][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.976305][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.983534][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.006936][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.014150][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.033312][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.078336][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.135567][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.154768][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.162020][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.194851][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.202054][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.252951][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.260156][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.293642][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.300827][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.517535][ T5771] Bluetooth: hci0: command tx timeout [ 84.523042][ T5776] Bluetooth: hci1: command tx timeout [ 84.523101][ T5776] Bluetooth: hci2: command tx timeout [ 84.545372][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.591998][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.655019][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.674221][ T5771] Bluetooth: hci3: command tx timeout [ 84.727603][ T5772] veth0_vlan: entered promiscuous mode [ 84.765724][ T5772] veth1_vlan: entered promiscuous mode [ 84.897638][ T5775] veth0_vlan: entered promiscuous mode [ 84.958316][ T5775] veth1_vlan: entered promiscuous mode [ 84.969747][ T5772] veth0_macvtap: entered promiscuous mode [ 84.995178][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.006223][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.023557][ T5772] veth1_macvtap: entered promiscuous mode [ 85.085136][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.103281][ T5775] veth0_macvtap: entered promiscuous mode [ 85.115849][ T5775] veth1_macvtap: entered promiscuous mode [ 85.138406][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.169628][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.179131][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.189484][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.198625][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.221679][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.234534][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.247302][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.276064][ T5768] veth0_vlan: entered promiscuous mode [ 85.298002][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.310107][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.323229][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.359892][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.368830][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.378466][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387708][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403516][ T5780] veth0_vlan: entered promiscuous mode [ 85.421986][ T5768] veth1_vlan: entered promiscuous mode [ 85.472002][ T5780] veth1_vlan: entered promiscuous mode [ 85.581061][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.595176][ T5768] veth0_macvtap: entered promiscuous mode [ 85.602319][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.670137][ T5768] veth1_macvtap: entered promiscuous mode [ 85.681211][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.692435][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.702482][ T5780] veth0_macvtap: entered promiscuous mode [ 85.714606][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.725267][ T5780] veth1_macvtap: entered promiscuous mode [ 85.733940][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.762680][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.776010][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.785923][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.797376][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.809015][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.820762][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.831765][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.842398][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.853684][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.866272][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.935308][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.965999][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.975481][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.992644][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001419][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021156][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.056741][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.079193][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.091429][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.102764][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.114275][ T5856] syz.1.2[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.123350][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.138817][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.158644][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.190422][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.226335][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.251315][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.293391][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.314568][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.330614][ T5858] loop0: detected capacity change from 0 to 512 [ 86.340066][ T5858] ======================================================= [ 86.340066][ T5858] WARNING: The mand mount option has been deprecated and [ 86.340066][ T5858] and is ignored by this kernel. Remove the mand [ 86.340066][ T5858] option from the mount to silence this warning. [ 86.340066][ T5858] ======================================================= [ 86.371212][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.399423][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.421942][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.433724][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.443922][ T5858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.454013][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.473433][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508457][ T5858] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 4294967295 (level 1) [ 86.525836][ T5858] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 4294967295 (level 1) [ 86.560793][ T5858] EXT4-fs (loop0): 2 truncates cleaned up [ 86.568965][ T5858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.602291][ T5771] Bluetooth: hci0: command tx timeout [ 86.605168][ T5779] Bluetooth: hci2: command tx timeout [ 86.607783][ T5771] Bluetooth: hci1: command tx timeout [ 86.763304][ T5771] Bluetooth: hci3: command tx timeout [ 86.807792][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.843779][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.964660][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.982329][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.066543][ T5856] loop1: detected capacity change from 0 to 32768 [ 87.077373][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.092405][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.236697][ T5856] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.287344][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.370655][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.580224][ T5856] XFS (loop1): Ending clean mount [ 87.981419][ T5856] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 88.042235][ T5856] XFS (loop1): Unmount and run xfs_repair [ 88.060492][ T5856] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 88.068583][ T5856] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 88.086892][ T5856] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 88.133093][ T5856] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 88.185990][ T5856] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 88.201688][ T5856] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 88.218976][ T5856] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 88.235634][ T5856] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 88.245379][ T5856] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 88.255414][ T5856] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 88.528938][ T5856] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 88.548333][ T5856] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 88.605359][ T5852] loop1: writeback error on inode 9286, offset 0, sector 18692 [ 88.613286][ T5880] loop3: detected capacity change from 0 to 2048 [ 88.682639][ T5771] Bluetooth: hci2: command tx timeout [ 88.682658][ T5779] Bluetooth: hci0: command tx timeout [ 88.682754][ T5779] Bluetooth: hci1: command tx timeout [ 88.833065][ T5779] Bluetooth: hci3: command tx timeout [ 88.991614][ T5883] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.267206][ T28] audit: type=1800 audit(1767150572.360:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 89.299534][ T5856] syz.1.2 (5856) used greatest stack depth: 19824 bytes left [ 89.464327][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.485085][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.533855][ T5873] loop2: detected capacity change from 0 to 32768 [ 89.692245][ T5873] (syz.2.3,5873,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.746109][ T5873] (syz.2.3,5873,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.934956][ T5873] JBD2: Ignoring recovery information on journal [ 90.136389][ T5873] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.287675][ T5891] loop1: detected capacity change from 0 to 512 [ 90.351781][ T5891] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.7: iget: special inode unallocated [ 90.402998][ T5891] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.7: Bad quota inode: 3, type: 0 [ 90.464510][ T5891] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 90.523211][ T5891] EXT4-fs (loop1): mount failed [ 90.613672][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 90.631834][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.722529][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.826223][ T5891] loop1: detected capacity change from 0 to 8192 [ 90.943299][ T5852] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.968272][ T5852] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 90.995788][ T5852] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 46, changing to 9 [ 91.018341][ T5852] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 58616, setting to 1024 [ 91.034060][ T5852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.049369][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.067499][ T5852] usb 3-1: Product: syz [ 91.073598][ T5852] usb 3-1: Manufacturer: syz [ 91.078265][ T5852] usb 3-1: SerialNumber: syz [ 91.182258][ T2197] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.322747][ T5873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.382241][ T2197] usb 2-1: Using ep0 maxpacket: 8 [ 91.391731][ T2197] usb 2-1: config 0 has no interfaces? [ 91.412298][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.420032][ T2197] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.432756][ T2197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.449300][ T2197] usb 2-1: config 0 descriptor?? [ 91.561968][ T5904] loop3: detected capacity change from 0 to 32768 [ 91.624839][ T27] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 91.630074][ T5904] UFO tlock:0xffffc9000287a090 [ 91.647704][ T27] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.674102][ T2197] usb 2-1: USB disconnect, device number 2 [ 91.683140][ T27] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 91.719771][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.806612][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.823713][ T5904] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 91.823713][ T5904] program syz.3.10 not setting count and/or reply_len properly [ 91.844871][ T5904] MetaData crosses page boundary!! [ 91.850263][ T5904] lblock = 6300000010, size = -820051968 [ 91.852989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.856501][ T5904] CPU: 0 PID: 5904 Comm: syz.3.10 Not tainted syzkaller #0 [ 91.871542][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.873376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.881611][ T5904] Call Trace: [ 91.893086][ T5904] [ 91.896054][ T5904] dump_stack_lvl+0x16c/0x230 [ 91.899917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.900777][ T5904] ? __wake_up_bit+0x1e0/0x1e0 [ 91.910328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.913840][ T5904] ? show_regs_print_info+0x20/0x20 [ 91.927271][ T5904] ? load_image+0x3b0/0x3b0 [ 91.931808][ T5904] ? folio_unlock+0x118/0x2e0 [ 91.936531][ T5904] __get_metapage+0xaac/0xfa0 [ 91.941224][ T5904] dtReadFirst+0xd5/0x920 [ 91.945579][ T5904] jfs_readdir+0x8d4/0x3a90 [ 91.950103][ T5904] ? mark_lock+0x94/0x320 [ 91.954452][ T5904] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 91.960459][ T5904] ? dtInitRoot+0x670/0x670 [ 91.964999][ T5904] ? __up_read+0x280/0x670 [ 91.969425][ T5904] ? down_write+0x162/0x1f0 [ 91.973955][ T5904] ? down_read_killable+0x340/0x340 [ 91.979166][ T5904] ? end_current_label_crit_section+0x149/0x170 [ 91.985424][ T5904] ? dtInitRoot+0x670/0x670 [ 91.989947][ T5904] wrap_directory_iterator+0x92/0xd0 [ 91.995270][ T5904] iterate_dir+0x1c2/0x580 [ 91.999741][ T5904] __se_sys_getdents+0xe9/0x260 [ 92.004637][ T5904] ? __x64_sys_getdents+0x80/0x80 [ 92.009706][ T5904] ? fillonedir+0x430/0x430 [ 92.014265][ T5904] ? lockdep_hardirqs_on+0x98/0x150 [ 92.019483][ T5904] do_syscall_64+0x55/0xb0 [ 92.023911][ T5904] ? clear_bhb_loop+0x40/0x90 [ 92.028594][ T5904] ? clear_bhb_loop+0x40/0x90 [ 92.033300][ T5904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.033446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.039218][ T5904] RIP: 0033:0x7f76c8d8f749 [ 92.051835][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.071457][ T5904] RSP: 002b:00007f76c9c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 92.079896][ T5904] RAX: ffffffffffffffda RBX: 00007f76c8fe5fa0 RCX: 00007f76c8d8f749 [ 92.087906][ T5904] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000005 [ 92.095890][ T5904] RBP: 00007f76c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.103886][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.111905][ T5904] R13: 00007f76c8fe6038 R14: 00007f76c8fe5fa0 R15: 00007ffc50df3b58 [ 92.119905][ T5904] [ 92.127131][ T5904] bread failed! [ 92.130641][ T5904] jfs_readdir: unexpected rc = -5 from dtReadNext [ 92.157196][ T151] cfg80211: failed to load regulatory.db [ 92.163498][ T5892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.188847][ T27] usb 1-1: SerialNumber: syz [ 92.444584][ T5852] cdc_ncm 3-1:1.0: bind() failure [ 92.472339][ T5852] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 92.484590][ T5852] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 92.485925][ T27] rndis_wlan 1-1:253.0: RNDIS init failed, -71 [ 92.503191][ T5852] usbtest: probe of 3-1:1.1 failed with error -71 [ 92.521011][ T5909] loop3: detected capacity change from 0 to 4096 [ 92.533117][ T5852] usb 3-1: USB disconnect, device number 2 [ 92.546966][ T27] rndis_wlan: probe of 1-1:253.0 failed with error -71 [ 92.614436][ T27] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 92.637290][ T27] rndis_host: probe of 1-1:253.0 failed with error -71 [ 92.682683][ T27] usb 1-1: USB disconnect, device number 2 [ 92.829016][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 93.209304][ T5920] loop3: detected capacity change from 0 to 512 [ 93.251155][ T5920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.295312][ T5920] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.15: invalid indirect mapped block 4294967295 (level 1) [ 93.377615][ T5920] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.15: invalid indirect mapped block 4294967295 (level 1) [ 93.457545][ T5920] EXT4-fs (loop3): 2 truncates cleaned up [ 93.488843][ T5920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.862039][ T5919] loop0: detected capacity change from 0 to 32768 [ 93.921373][ T5919] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.148196][ T5919] XFS (loop0): Ending clean mount [ 94.360658][ T5922] loop1: detected capacity change from 0 to 32768 [ 94.559585][ T27] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 94.584507][ T27] XFS (loop0): Unmount and run xfs_repair [ 94.590379][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 94.671324][ T27] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 94.746627][ T27] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 94.788652][ T27] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 94.806925][ T27] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 94.818133][ T27] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 94.838850][ T27] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 94.842658][ T5922] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.17 (5922) [ 94.849561][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 94.939377][ T27] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 95.001212][ T5919] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 95.050139][ T5928] loop2: detected capacity change from 0 to 40427 [ 95.063549][ T5922] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.112912][ T5928] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 95.141084][ T5928] F2FS-fs (loop2): invalid crc value [ 95.147740][ T5919] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 95.177718][ T5919] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 95.184278][ T5922] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.199195][ T5156] loop0: writeback error on inode 9286, offset 0, sector 18692 [ 95.201308][ T5922] BTRFS info (device loop1): enabling ssd optimizations [ 95.227917][ T5928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.256552][ T5922] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 95.319829][ T5922] BTRFS error (device loop1): open_ctree failed: -22 [ 95.362438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.371145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.403669][ T5781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5781) [ 95.510827][ T5928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.526567][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.924496][ T5768] syz-executor: attempt to access beyond end of device [ 95.924496][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.949186][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 96.112327][ T5924] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 96.236405][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.453005][ T5948] loop3: detected capacity change from 0 to 512 [ 96.521355][ T5948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.590421][ T5948] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.627767][ T5948] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 96.708915][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.126414][ T5946] loop0: detected capacity change from 0 to 32768 [ 97.168093][ T5946] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 97.238882][ T5946] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.610153][ T5946] syz.0.19 (5946) used greatest stack depth: 18224 bytes left [ 97.751567][ T5969] loop2: detected capacity change from 0 to 512 [ 97.771483][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 97.827414][ T5953] loop3: detected capacity change from 0 to 32768 [ 97.854308][ T5953] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.22 (5953) [ 97.923554][ T5953] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.962240][ T5953] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 97.970953][ T5953] BTRFS info (device loop3): using free space tree [ 98.106623][ T5979] (null): rxe_set_mtu: Set mtu to 4096 [ 98.114511][ T5979] lo speed is unknown, defaulting to 1000 [ 98.124804][ T5979] lo speed is unknown, defaulting to 1000 [ 98.134149][ T5979] lo speed is unknown, defaulting to 1000 [ 98.198055][ T5953] BTRFS info (device loop3): enabling ssd optimizations [ 98.216755][ T5953] BTRFS info (device loop3): auto enabling async discard [ 98.528718][ T27] lo speed is unknown, defaulting to 1000 [ 98.537928][ T5979] infiniband syz2: set active [ 98.548642][ T5979] infiniband syz2: added lo [ 98.627175][ T5979] RDS/IB: syz2: added [ 98.637015][ T5979] smc: adding ib device syz2 with port count 1 [ 98.643647][ T5156] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.663158][ T5979] smc: ib device syz2 port 1 has pnetid [ 98.671097][ T27] lo speed is unknown, defaulting to 1000 [ 98.683153][ T5979] lo speed is unknown, defaulting to 1000 [ 98.863852][ T5156] usb 1-1: Using ep0 maxpacket: 32 [ 98.880732][ T5156] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 98.901498][ T5156] usb 1-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 98.935435][ T5156] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x3 has invalid maxpacket 1792, setting to 64 [ 98.977035][ T5156] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.997946][ T5156] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.009651][ T5156] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 99.030989][ T5156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.058137][ T5156] usb 1-1: config 0 descriptor?? [ 99.093550][ T5156] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 99.229696][ T5979] lo speed is unknown, defaulting to 1000 [ 99.236608][ T5998] loop2: detected capacity change from 0 to 512 [ 99.254748][ T5998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.319549][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.354161][ T5998] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.29: invalid indirect mapped block 4294967295 (level 1) [ 99.376332][ T5998] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.29: invalid indirect mapped block 4294967295 (level 1) [ 99.391706][ T5998] EXT4-fs (loop2): 2 truncates cleaned up [ 99.423006][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.741040][ T5979] lo speed is unknown, defaulting to 1000 [ 99.932234][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.020635][ T5979] lo speed is unknown, defaulting to 1000 [ 100.126892][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 100.146469][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.162278][ T27] usb 4-1: Product: syz [ 100.166721][ T27] usb 4-1: Manufacturer: syz [ 100.174938][ T27] usb 4-1: SerialNumber: syz [ 100.196756][ T27] usb 4-1: config 0 descriptor?? [ 100.430276][ T27] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.454053][ T5998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.29: bg 0: block 5: invalid block bitmap [ 100.521245][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'. [ 100.532568][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.677552][ T6007] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.827842][ T6011] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.130352][ T27] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 101.237936][ T6009] loop1: detected capacity change from 0 to 32768 [ 101.406907][ T151] usb 1-1: USB disconnect, device number 3 [ 101.579816][ T6019] loop0: detected capacity change from 0 to 128 [ 101.630131][ T6019] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 101.800757][ T5834] usb 4-1: USB disconnect, device number 2 [ 101.921580][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 101.961544][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.082516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.092589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.273629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 103.643611][ T6033] random: crng reseeded on system resumption [ 103.663167][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 103.754724][ T6038] loop1: detected capacity change from 0 to 128 [ 103.903859][ T6038] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.920614][ T6038] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.583909][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.742708][ T6065] capability: warning: `syz.3.49' uses 32-bit capabilities (legacy support in use) [ 104.785402][ T6067] netlink: 'syz.1.48': attribute type 21 has an invalid length. [ 104.854252][ T6065] program syz.3.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.890357][ T6070] loop1: detected capacity change from 0 to 2048 [ 104.980666][ T6071] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.034030][ T6067] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 105.133138][ T6067] Remounting filesystem read-only [ 105.138575][ T6067] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 105.218972][ T6073] loop2: detected capacity change from 0 to 1024 [ 105.273155][ T6073] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 105.350002][ T6063] loop0: detected capacity change from 0 to 32768 [ 105.419724][ T6061] JFS: block map error in dbBackSplit [ 105.443802][ T6061] ERROR: (device loop0): dbDiscardAG: -EIO [ 105.443802][ T6061] [ 105.465097][ T6061] syz.0.47: attempt to access beyond end of device [ 105.465097][ T6061] loop0: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 105.512058][ T6061] JFS: sb_issue_discard(ffff888079dce000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 105.523015][ T6061] blkno = 50400, nblocks = 400 [ 105.527837][ T6061] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 105.527837][ T6061] [ 105.538914][ T5834] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.762293][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 105.778529][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.802390][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.830648][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.844048][ T6086] syzkaller0: entered promiscuous mode [ 105.865556][ T6086] syzkaller0: entered allmulticast mode [ 105.866901][ T5834] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.896969][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.906133][ T5775] BUG: Bad page state in process syz-executor pfn:23b7d [ 105.920438][ T5834] usb 4-1: config 0 descriptor?? [ 105.934175][ T5775] page:ffffea00008edf40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x23b7d [ 105.962283][ T5775] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 105.991882][ T5775] page_type: 0xffffffff() [ 106.006283][ T5775] raw: 00fff1800000820c ffffea00007eea08 ffffc9000466f900 0000000000000000 [ 106.018239][ T5775] raw: 0000000000000004 ffff888074de53e0 00000000ffffffff 0000000000000000 [ 106.027527][ T5775] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 106.035792][ T5775] page_owner tracks the page as allocated [ 106.042029][ T5775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6061, tgid 6060 (syz.0.47), ts 105412546459, free_ts 105313837463 [ 106.060315][ T5775] post_alloc_hook+0x1cd/0x210 [ 106.066187][ T5775] get_page_from_freelist+0x195c/0x19f0 [ 106.071968][ T5775] __alloc_pages+0x1e3/0x460 [ 106.078155][ T5775] folio_alloc+0x1e/0x30 [ 106.084910][ T5775] filemap_alloc_folio+0xdf/0x470 [ 106.090143][ T5775] do_read_cache_folio+0x36c/0x7e0 [ 106.097628][ T5775] do_read_cache_page+0x32/0x250 [ 106.105019][ T5775] __get_metapage+0x31a/0xfa0 [ 106.109939][ T5775] dbAllocCtl+0xd4/0x9b0 [ 106.116580][ T5775] dbAllocAG+0x1e7/0xfe0 [ 106.121051][ T5775] dbDiscardAG+0x2ce/0x8f0 [ 106.127622][ T5775] jfs_ioc_trim+0x42f/0x660 [ 106.133789][ T5775] jfs_ioctl+0x2b9/0x3d0 [ 106.139472][ T5775] __se_sys_ioctl+0xfd/0x170 [ 106.144450][ T5775] do_syscall_64+0x55/0xb0 [ 106.148985][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.155323][ T5775] page last free stack trace: [ 106.160120][ T5775] free_unref_page_prepare+0x7ce/0x8e0 [ 106.169552][ T5775] free_unref_page_list+0xbe/0x860 [ 106.175305][ T5775] release_pages+0x1fa0/0x2220 [ 106.180289][ T5775] __folio_batch_release+0x71/0xe0 [ 106.186007][ T5775] truncate_inode_pages_range+0x358/0xf00 [ 106.191931][ T5775] blkdev_flush_mapping+0x132/0x290 [ 106.197678][ T5775] blkdev_put+0x498/0x760 [ 106.202360][ T5775] bdev_release+0x57/0x70 [ 106.206839][ T5775] deactivate_locked_super+0x97/0x100 [ 106.212718][ T5775] cleanup_mnt+0x429/0x4c0 [ 106.217257][ T5775] task_work_run+0x1ce/0x250 [ 106.221967][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 106.227582][ T5775] exit_to_user_mode_prepare+0xf6/0x180 [ 106.236592][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 106.242611][ T5775] do_syscall_64+0x61/0xb0 [ 106.247106][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.255158][ T5775] Modules linked in: [ 106.259169][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 106.266748][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.276868][ T5775] Call Trace: [ 106.280181][ T5775] [ 106.283148][ T5775] dump_stack_lvl+0x16c/0x230 [ 106.287885][ T5775] ? show_regs_print_info+0x20/0x20 [ 106.293148][ T5775] ? swiotlb_print_info+0x70/0x70 [ 106.298242][ T5775] ? dump_page+0xba7/0x14d0 [ 106.302803][ T5775] bad_page+0x14b/0x170 [ 106.307004][ T5775] free_unref_page_prepare+0x887/0x8e0 [ 106.312534][ T5775] free_unref_page_list+0xbe/0x860 [ 106.317707][ T5775] ? __folio_memcg+0x63/0x160 [ 106.322422][ T5775] ? folio_memcg+0x127/0x480 [ 106.327070][ T5775] release_pages+0x1fa0/0x2220 [ 106.331888][ T5775] ? lru_cache_disable+0x30/0x30 [ 106.336884][ T5775] ? mlock_drain_local+0x79/0x490 [ 106.341947][ T5775] ? mlock_drain_local+0x79/0x490 [ 106.347023][ T5775] ? mlock_drain_local+0x28d/0x490 [ 106.352169][ T5775] __folio_batch_release+0x71/0xe0 [ 106.357320][ T5775] truncate_inode_pages_range+0x358/0xf00 [ 106.363094][ T5775] ? mapping_evict_folio+0x510/0x510 [ 106.368443][ T5775] ? proc_nr_inodes+0x230/0x230 [ 106.373334][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 106.378583][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 106.383486][ T5775] dbUnmount+0x109/0x180 [ 106.387787][ T5775] jfs_umount+0x258/0x3c0 [ 106.392179][ T5775] jfs_put_super+0x8c/0x190 [ 106.396726][ T5775] ? jfs_free_inode+0x30/0x30 [ 106.401453][ T5775] generic_shutdown_super+0x134/0x2b0 [ 106.406887][ T5775] kill_block_super+0x44/0x90 [ 106.411608][ T5775] deactivate_locked_super+0x97/0x100 [ 106.413381][ T5834] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5 [ 106.417025][ T5775] cleanup_mnt+0x429/0x4c0 [ 106.417079][ T5775] task_work_run+0x1ce/0x250 [ 106.437564][ T5775] ? task_work_cancel+0x240/0x240 [ 106.442651][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.448162][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 106.453491][ T5775] exit_to_user_mode_prepare+0xf6/0x180 [ 106.459087][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 106.464597][ T5775] do_syscall_64+0x61/0xb0 [ 106.469049][ T5775] ? clear_bhb_loop+0x40/0x90 [ 106.473773][ T5775] ? clear_bhb_loop+0x40/0x90 [ 106.478511][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.484458][ T5775] RIP: 0033:0x7f6a59b90a77 [ 106.487842][ T5834] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 106.488889][ T5775] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 106.520463][ T5775] RSP: 002b:00007ffe5423b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.528941][ T5775] RAX: 0000000000000000 RBX: 00007f6a59c13d7d RCX: 00007f6a59b90a77 [ 106.536947][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5423b0e0 [ 106.544962][ T5775] RBP: 00007ffe5423b0e0 R08: 0000000000000000 R09: 0000000000000000 [ 106.552973][ T5775] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5423c170 [ 106.560986][ T5775] R13: 00007f6a59c13d7d R14: 0000000000019d05 R15: 00007ffe5423c1b0 [ 106.569040][ T5775] [ 106.575927][ T5775] Disabling lock debugging due to kernel taint [ 106.609610][ T2132] usb 4-1: USB disconnect, device number 3 [ 106.714588][ T6091] fido_id[6091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory