last executing test programs: 1m27.149080758s ago: executing program 4 (id=5): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000c00)={@val={0x0, 0x16}, @void, @eth={@broadcast, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x9}}, {@mpls_mc={0x8848, {[], @llc={@snap={0xaa, 0x1, '3', "342301", 0x80f3}}}}}}}, 0x1e) (async) r4 = syz_usb_connect(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) syz_usb_control_io$lan78xx(r4, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0xf, 0xef, {0xef, 0x30, "23dd1c4916929505f8e0744fa1b19b014dd15f88ae69d3625591c31c50366267e194c9f6849e198c69ecf47c57543e090150b89903b6db502eecc7fa67561127e7bc645aac854f7f3041347ad173eacefc7eb41101c055eab8e4d57912f8a5dd938cac7308ae0fa06cd30a1e1a5694f53da2acc689f85f8587553da0f9a1f52f50668adc411cdf1244f253a88575a7dfc92db60cde94909640f77e00e151e3b710dfcd72fbe572737ceea8baa1c62729cd4aafe3a1464d0a77b242a91b0f017d437ac6652e7f22cb979493446a768e46e15bf52499bb79474a5a37a0f0a9e6e0d16a8dd03b3b4ac5e7f0d1e3ea"}}, &(0x7f00000002c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "815e24631a4884a9ac2dfacd8ebe899992b6a6865bb9fb57675c85674001ef7b56"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x0, 0x31, 0x56, "9486db6d03424f738ada77a76b4812640c17a4289b7929f8bda822cd1e814d9d5e6d9b34bfc3392885f38521b8f6e391af919133e126e38464509e707fd7d2e53988743e53fb2edf88a3fb814af87e72fd5edd0edf69"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "5b0454d810236ad51822707da28a4eaf0ba326ebe00a0880cd7f8e8138292d9e35bfdca275230b8658351df0ae69f7"}}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 1m24.308405664s ago: executing program 1 (id=44): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = semget(0xffffffffffffffff, 0x8, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x1, 0xffff, 0x1800}], 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="16e28c0700000000560001", @ANYRES16=r2], 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911045000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) r5 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000340), 0x10001, 0x2) clock_gettime(0x0, &(0x7f0000000240)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x42000, 0x70) ioctl$FS_IOC_SETVERSION(r11, 0x40087602, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000440)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000100)=@multiplanar_fd={0x6, 0x2, 0x4, 0x800, 0x6, {0x77359400}, {0x5, 0x0, 0x10, 0x9, 0x8, 0x8, "3956e94f"}, 0x2, 0x4, {&(0x7f00000003c0)=[{0x7, 0x7, {r9}, 0x400}, {0x1, 0x7fffffff, {}, 0x7}]}, 0x9, 0x0, r12}) 1m23.77780855s ago: executing program 1 (id=48): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040)=0x7, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0x28, 0x5, 0x10000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000001c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)="173b67e24859579c0974952b7f7ab1c1363437a8b5c9e52a7f8edb23e68ecada6aa87c2d02defaa68ed40f7096aa557f18f2c6f280cea06493602e88c082c59bae7a8ce9e3e2272f87db6084f9eada0738d95a7767415388", 0x58}, {&(0x7f00000002c0)="39dbff639ee6ef0de35cfdfc12c5e6e2c4bd7ddb9f4ad27c7660cff9d3286b5553ce847c467442e3d15bdae1cef28d78582802a50141eb10052cbfe816e2779f499d17b43458f5aac45276006d4ca50494c977e67a50c79c51aabd8c46532951e11f5f41b5df856b3137a75647ade754052ff255a375fdfc6e30e85dcfed35ef0d4427c0575f8eec2d4255bca7cddd541f9b46a06865ed3a420ca5e681b696fd2897c8ad146b6f00bd8849eee0b23cdd98eb7a990b2ac5b769df1c263c591b45e8386407abda52ea74f79104b1dea1f5d432b8dc8e1c17", 0xd7}, {&(0x7f00000003c0)="e1a74fc940ec695077530fc34e2365995ea0a6f02b932cc09d6e0e81ab7e2ae73ac63eceaf26d3d29c8aeb9f992cde111d1e122864f67ea35cc55d95057437f68fe0cd0403eefc2e400b7b0b4408ee0ec9e84e39a60c1744bf14895a1429a5005303607dcb9a03d2bda4879baf46bd7c30f25c1ba3cfffbf43762099f558fa078c744f4b7eb9f1906baba0532026aaaa48208d1bc076acf49777260107316873da2bbaae7d1a8f9e34b234d095b2c04edc70113a4b313fcdd11aab0dc4", 0xbd}, {&(0x7f0000000480)="2bcd27dce3943034700d2747", 0xc}, {&(0x7f00000004c0)="1d337644b9e8922658db8571c4794e15bcf7de89fdf3e8ee20a0aae959cbec002691dfa5b5e7e4b41f256edc7765420f658616d69d1a91a9aa06ea6a62cecfc64f98af2b873084b7ee14f3b821d11f63f0b97db17a38d1d5e8f0f58549e88ec7833fd6cfb364dba54e835ec11fd642e2a7f7479da10488dc0d6d36300612327715f1356fa1147485a784bf246ed13789bdae2e7cae672fcd990a5b", 0x9b}, {&(0x7f0000000580)="fd0d8828828a3cdd4f94eeacc4dd61f626adfecfb9dd44f2ddabfe22e25d0fa6d9b5f8039e3a352e43776e6c0af573d0968679a41c49f87014453070ddeb68e5d88d4354a91e4726d543914336f420e19ade8037f35289d994ce56810673a1b888c0930d9819cce0775ea81aeb5eeee3bccb58aa7ac96e0ac9b285999065f730aa86bd133e8b7052f817e075431fe756391ce88361cddba4f429dcdf7dce6b64938565212de4b3f23a2cef4b6f4f579d10db6c361a65c184581b809c285f27228ea7addf9a30ee57d0bd4f81fc204a01516de3aa7b30eaf84d140a552f38130a4b3a73aca825", 0xe6}, {&(0x7f0000000680)="bb95e9fc5348914cef58bc40ffaf8d7dc4fdfa9382729137d0e75d551ea74293ef6a0819dc6e8210e4484e66513a62b12131789763778dd538ca1de2e2423b718007c480786284ddd044d9d0a33d242a71b77ae7153a7bbfa54f62f255ef0588590445fa37ff928bd9e046b526e9e22aa70036cbd1a4669f160f72930ff659d95412cda29f69f9b38f4c075de49886d208ca53ba3f7f158e66147938958ae5b6be49fdbf926c28991e61e9cded088be1964c93aa14b4991787f959959b180ce3c2fbf78b8b92d9819fb0324809c748236e9dfd72b6ba7939", 0xd8}], 0x7, &(0x7f0000000800)=[{0x100, 0x107, 0x1, "d876384b9e8b699724d645f05df96b55eb370178ffc3503018cfad6c397932a79e5619b0c089834640cf4083c27f535f2117589c8808e8c82f34456cd9f1b2b55391f52889650fcf5679177be05f8e63c5fc4994231e1d1ab51608ffa58f39b73ab9707d3012ba83e6cb177fee3ef5868a95fbf2c27a4972b7b1aad1f5769e55e771047c547ddfa1bd1fd222646007fd1efc9f130162d1f10438771854c4132cc8cb149de5c850d802d304d776f42ab14643afac93eb419312dbfd4174d4492d0f159b080b30c231069f2ae72f26e8287745b6dc730a071513dece72da8288caf64e7897bfedab1f75addb3a44"}, {0x100, 0x116, 0x86, "3ea7cb88885c619a764492d98aace8de1707314a876c051e83fdf55fdc16d9ea1cee2666a11952ac2453eafb60902bd50df98a4bb6489e0b31db7ed2ed6e37387afc30ce31ceaafd32f3c5d2a26daa4c8850c6090250dad7e239a2082496fe27273667fddc7fd96416692d3e9f4f0812022a1355d5c74dc185f3e329d938f91bbf86ad68eb913d18d78554af0279f9003576a8cc88f911e71e42ecdaa99c86e3510f3c2a7d3d75802ee0e76168b40b54b65aa890ec288aba9d03dfbac8ab931374540b9cf76c8c352313f385638e7eb73c4cb4bb5cea83a9cebbeb6bfd86b2368ef92f2d295de8ba021f"}], 0x200}, 0x0) fchdir(r1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) sendfile(r4, r2, &(0x7f0000000a80)=0x6, 0x7) connect$vsock_stream(r0, &(0x7f0000000ac0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) mount(&(0x7f0000000b00)=@sr0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='aio\x00', 0x800000, &(0x7f0000000bc0)='[&\'\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000c00)={0x0, 0x3}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000c80)={r5, @in6={{0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}}, 0x7, 0x8, 0x3, 0xf, 0x7fff}, &(0x7f0000000d40)=0x98) r6 = syz_open_dev$vim2m(&(0x7f0000000d80), 0xa615, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000dc0)={0x10000, 0x8000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000e00)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x401, @mcast1, 0x5209}, @in6={0xa, 0x4e20, 0x1, @local, 0x8}, @in6={0xa, 0x4e23, 0x1, @private2, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xa4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001040)={0x4, 0x0, [{0x60000, 0x21, &(0x7f0000000f00)=""/33}, {0x8080000, 0x3a, &(0x7f0000000f40)=""/58}, {0x200000, 0x29, &(0x7f0000000f80)=""/41}, {0xdddd0000, 0x4e, &(0x7f0000000fc0)=""/78}]}) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@ifindex=r3, 0x2f, 0x1, 0x81, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0], &(0x7f0000001200)=[0x0], 0x0}, 0x40) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x11, 0x9, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x94}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @ldst={0x0, 0x0, 0x3, 0xa, 0x1, 0x32, 0xfffffffffffffff0}]}, &(0x7f0000001380)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000013c0)=""/4096, 0x41100, 0x9, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000023c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002400)={0x1, 0xf, 0x7fffffff, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000002440)=[{0x3, 0x3, 0x6}, {0x5, 0x5, 0x0, 0x3}, {0x2, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x4, 0x1}, {0x1, 0x5, 0x4, 0xc}, {0x0, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xb, 0x7}, {0x2, 0x2, 0xd, 0x3}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@cgroup=r11, r9, 0x20, 0x4, 0x0, @void, @value=r12, @void, @void, r10}, 0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000025c0)=0x1) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r13, 0x107, 0x16, &(0x7f0000002640)={0x6, &(0x7f0000002600)=[{0x3, 0x6, 0x3, 0xb86a0000}, {0x5, 0x5, 0x1, 0x2}, {0xf, 0x5, 0x2}, {0x6, 0x2, 0x9, 0x7fff}, {0x7f, 0xb8, 0xe, 0x81}, {0x6, 0x40, 0x9, 0x3}]}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000002680), 0x8000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0x10}, {0xd, 0xb}, {0x6, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4810) 1m23.749005157s ago: executing program 4 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) 1m23.728650758s ago: executing program 1 (id=51): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0x0, 0x60}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m23.597912412s ago: executing program 1 (id=52): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) io_submit(0x0, 0x0, 0x0) 1m22.609919414s ago: executing program 1 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioprio_set$pid(0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="62ffffff18000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst={0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000040)='GPL\x00', 0x4, 0xdf, &(0x7f00000005c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x81, 0x5, 0x200, 0x20, @remote, @remote, 0x80, 0x20, 0x80000000, 0x4}}) (async) sendfile(r1, r1, 0x0, 0x23d1) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$smackfs_ipv6host(r10, 0x0, 0xc7) r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r12 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = syz_pidfd_open(r12, 0x0) fremovexattr(r13, &(0x7f00000003c0)=@known='trusted.overlay.opaque\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r11, 0xc0106438, &(0x7f00000000c0)={0x2, r14}) 1m22.609132503s ago: executing program 4 (id=61): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000009091cbdf72f01073c030b5d742c05c2a0f1a86112cf3c983d39d6109d36e9714436aec3d8"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x0, 0x1}, 0x10}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x4000000) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000001c0)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}, {@data_err_ignore}, {@sysvgroups}, {@noinit_itable}, {@oldalloc}, {@orlov}, {@data_journal}, {@jqfmt_vfsv0}, {@auto_da_alloc}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00\xf2R\xf4\x04B;\xcb\xa0Z\xa0I\xdd\x90\x99\\\x06\x9b\x9e\r\xd9m\xaa\x15}\xa8S\xaa\xb24\xb3\xe0\xa0\xa4\xc1\xc9B[kx\xd1\x9b\x98\xbf\xf2\xa5\xe1\xaf\x87\xa2t\x8c\x1b@\xbf^u\x88\xf8\xaf\xd3\x7f8\xb4@\xb3x'}}], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$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") ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000100)={0x402, 0x400, 0xff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 1m22.390074314s ago: executing program 1 (id=64): r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000019140)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000380), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) 1m19.909247886s ago: executing program 4 (id=79): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@barrier}, {@grpid}, {@errors_remount}, {@quota}, {@usrquota}, {@minixdf}, {@user_xattr}]}, 0x0, 0x60f, &(0x7f0000000c40)="$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") fsync(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e}) r2 = syz_clone(0x21001400, 0x0, 0xfffffffffffffe3b, &(0x7f0000000180), 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r5 = socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000001880)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="83040100000000001800128008000100677470"], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 1m19.631100399s ago: executing program 4 (id=83): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000480), 0x5, 0x3e2, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0001002dbd7000ffdbdf2504000eec8f3c0b00040000000d4892a1ec44bffb1dcef00b309bdb5464eca1"], 0x1c}], 0x1}, 0x4000000) 1m18.904861623s ago: executing program 4 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "794cfd2f1d6162a46c22e278a037479502ef58da0c27c9d871ccfed19b65f349", 0x1, 0x4, 0x7, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="63ec7fea0cfbe066c00000100000", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "794cfd2f1d6162a46c22e278a037479502ef58da0c27c9d871ccfed19b65f349", 0x1, 0x4, 0x7, 0x4}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="63ec7fea0cfbe066c00000100000", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1m18.816791526s ago: executing program 32 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "794cfd2f1d6162a46c22e278a037479502ef58da0c27c9d871ccfed19b65f349", 0x1, 0x4, 0x7, 0x4}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="63ec7fea0cfbe066c00000100000", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@empty, @local, 0x1, "794cfd2f1d6162a46c22e278a037479502ef58da0c27c9d871ccfed19b65f349", 0x1, 0x4, 0x7, 0x4}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="63ec7fea0cfbe066c00000100000", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1m14.927722226s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r4, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xab, @loopback, 0x53}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x10) fsetxattr$security_smack_transmute(r5, &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 1m13.898155762s ago: executing program 3 (id=126): prlimit64(0x0, 0x3, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r0 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xcf0be2279761c16b) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x800) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x3, [0x2, 0x8aa8]}, {0x80000000, 0x0, 0x6, [0x5]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x2}}, './file1\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000580)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)={0x14, 0x803d, 0x1, 0x70bc2d, 0x25dfdbff, "", [@typed={0x4, 0xcb}]}, 0x14}], 0x1}, 0x4000000) 1m12.949851279s ago: executing program 0 (id=135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2c, 0x93, 0xd, 0x6}, {0x6, 0x6, 0x2, 0x8}]}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "4e214e20000000000000000001000004"}}}}, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r2) (async) ptrace(0x11, r0) (async) ptrace$setregset(0x4205, r0, 0x406, &(0x7f0000000000)={0x0}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) (async) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 1m12.894019825s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r4, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xab, @loopback, 0x53}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x10) fsetxattr$security_smack_transmute(r5, &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 1m12.290020282s ago: executing program 2 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 1m12.125210217s ago: executing program 2 (id=143): truncate(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0x30000000) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xcb95, 0x422000) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r2, r1}, &(0x7f0000000280)=""/174, 0xae, &(0x7f00000003c0)={&(0x7f0000000340)={'sha256\x00'}, &(0x7f0000000240)="708803449262ddb5bda9215853cffafe0690f4ed536f3345070000000000000084a693afd7d8e5ffc37e1b3aebbdae8dc970f207", 0x34}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 1m12.05005152s ago: executing program 5 (id=144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r0, 0x89f1, 0xfffffffdfffffffb) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) 1m12.033278155s ago: executing program 3 (id=145): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd31800180600fe8000000000000000000000000000aafe8000000000000000000000c10000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000004030700"], 0x0) 1m12.007703546s ago: executing program 2 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@delqdisc={0x38, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x0) add_key(&(0x7f0000002c40)='logon\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000040)="3be6c7b407", 0x5, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1m11.917923666s ago: executing program 3 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000280)=0x100006) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwritev(r3, &(0x7f00000027c0)=[{&(0x7f0000000080)}, {0x0}], 0x2, 0x80000001, 0x5f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='^@--\x00', &(0x7f00000001c0)='*].\xd5+!\x00', 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) 1m11.917343837s ago: executing program 2 (id=148): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) io_submit(0x0, 0x0, 0x0) 1m11.859600793s ago: executing program 0 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000300)={0x1, 0x0, 0x80000000, 0x4da, 0x10001, 0x8000, 0xc5a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x8000000000000001, 0x6ab577c9436f6cd7) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x88020001, 0xcd8d240c47c1bde1, "670600000000000000845e3ede57135adc674d632d46da16827000", 0x400000, 0x0, 0x0, 0x0, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) mount(0x0, 0x0, 0x0, 0x2390025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000004, 0x1d30c2) ioctl$BLKTRACETEARDOWN(r7, 0xc0c0128e, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000500", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRESOCT=r10, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="0e298f3f800000000000000004000000"], 0x6c, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r9, @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8083) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090427810000000d0000000000000008000f0001000000", 0x24) 1m11.564715095s ago: executing program 5 (id=150): r0 = syz_ublk_setup_io_uring(0x19a3, &(0x7f0000000200)={0x0, 0xb532, 0x80, 0x3, 0x142}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a80)={0x7, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000000900)=""/178, 0xb2}], &(0x7f0000000a40)=[0x0, 0x9, 0x0, 0x5], 0x8}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r2 = socket$inet6(0xa, 0x80803, 0x87) getpeername(r2, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x80) syz_emit_ethernet(0xaa, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000742b0020010000000000000000000000000000fe8000000000000000000000000000aa87000000000000f8058fe9000517d0ff4e214e220064907802000000020000000400000034e540e3dd227ff71dcd02be58075273e40c004b3a977b28387a1ae7465338d45cb275b40fd4031ec1941ebfaa96d7bfcf0372b8d285ee92d104650b69fd413d0667f5c2b37bbd83be6ba638018bb23c"], 0x0) 1m11.166079692s ago: executing program 5 (id=151): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000000c0)=""/171, 0xab, 0x0, &(0x7f0000000180)=""/60, 0x3c}}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m11.16053016s ago: executing program 5 (id=152): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pptp(0x18, 0x1, 0x2) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10) (async) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2], 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r6, &(0x7f00000001a0)='1', 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c6963793000080002eb000069cc629ae30000000000", 0x68}], 0x1}, 0x0) close(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="eb607d3f5a913ac37bf222a2ad643868e7a76c1cc0deb88b93c5babee4eab0bbb3543a1dee4e5a8607356382d1593f64bbf8f64a69501249160b33c2eaad629a162d21c5cf2613aaca196016f7845a054c7db20c1a5eb2987abd08c48fea436857504fe18d6727f04a3be09d1269ef5deec3818095172f1163bd997708d83f8b727c3458fb3250b880c4f1061e3424eaddb938c46eb3ed2874bab904a1f553836b97e52d47bf3f6cbb10d7d433620a919648cb89f4dfa37bffae5ca1fe91c2a5591142f3e0092a3e24d20b1497"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002abd7000000000000000dd06d28688cbacb763b67f8abf9bb6c30000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff0000000000200000000000000000000000000000000000002f00000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m11.119165304s ago: executing program 0 (id=153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000400)={'vlan0\x00', 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x100000000) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000001d"], 0x34}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4a, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x5, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m11.050720044s ago: executing program 3 (id=154): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x84000e, &(0x7f0000000180)={[{@noload}, {@quota}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@quota}]}, 0x3, 0x456, &(0x7f0000000dc0)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBAcAAJCQ6FW0jSqtRtUBMErSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK5tHAyWns3cRzbbYwTQ/37SevO7M525svu2DM7cQLoW6PZSxKxPSJ+jYjhWnZ1gdHaP9eWzk//tXR+OolK5fU/k2q5q0vnp4uixXnb8syBNCL9NIm9TeqdP3vu5FS5PHsmz48vnHp3fP7suSdPnJo6Pnt89vTkkSOHD0088/TkU12JM4vr6p4P5/btfvnNi69OH7349o/fJEX8DXF0yWi7gw9XKl2urrd21KWTgR42hHUpRUR2uQar/X84SrFy8YbjxU962jhgQ1VyLQ4vVoCbWBK9bgHQG8UHfTb/LbbNG3303pXnahOgLO5r+VY7MhBpXmawYX7bTaMRcXTx7y+zLdY+hxjcoGoBgD72XTb+eaLZ+C+Nu+rK3ZavoYxExO0RsTMi7oiIXRFxZ0S17N0Rcc86629cJFk7/kwvdxTYDcrGf8/ma1urx3/F6C9GSnluRzX+weTYifLswdqxxewly0+0qePSC7983upY/fgv27L6i7Fg3o7LA7esPmdmamGq03gbXfk4Ys9As/iT5ZWAJCJ2R8SeDus48djX+1odu378bXRhnanyVcSjteu/GA3xF5L265Pjt0Z59uB43V3R4KefL7zWqv5/FX8XZNd/a9P7fzn+kaR+vXZ+/XVc+O2zlnPKTu//oeSNanoo3/fB1MLCmYmIoeSVWqPr90+unFvki/JZ/Af2N+//O2PlJ7E3IrKb+N6IuC8i7s/b/kBEPBgR+9vE/8PzD73TefwbK4t/Zl3XfyUxFI17midKJ7//dlWlI+uJP7v+h6upA/me6vtf0j6uauXvt29XZ3czAAAA/P+kEbE9knRsOZ2mY2O13+HfFVvT8tz8wuPH5t47PVP7jsBIDKbFk67huuehE/m0vshPNuQP5c+NvyhtqebHpufKM70OHvrcthb9P/NHqdetAzac72tB/9L/oX/p/9C/9H/oX036/5ZetAPYfM0+/z+KiEuPrN2/9a3NaBGwWRr6v2U/6CPm/9C/9H/oXzfQ/3+/uf5cNRAR81vi+l+Sb5F4qaOz1iRK0Z3/R2JTE5H+J5ohsUGJXr8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMc/AQAA//8Qj+02") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, &(0x7f00000002c0)=0x80, 0x800) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000440)) 1m11.046848571s ago: executing program 2 (id=155): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f043}) ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000000c0)={0x8, 0x5, 0x72f1, 0x2}) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f00000004c0), &(0x7f00000005c0)=@tcp}, 0x20) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m10.957822875s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r4, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xab, @loopback, 0x53}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x10) fsetxattr$security_smack_transmute(r5, &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 1m9.77567112s ago: executing program 0 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r1], 0xa4}, 0x1, 0x0, 0x0, 0x40880}, 0x40840) 1m9.759984028s ago: executing program 5 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x1016, 0x5, 0x8, 0x0, 0x7, 0x3}}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a340000001f0a070300000000000000000200000908000340000000080900010073797a30000000000c0006"], 0x70}}, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) (async) chdir(&(0x7f0000000380)='./file0\x00') mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 1m9.577926659s ago: executing program 0 (id=159): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) (async, rerun: 32) shutdown(r2, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES32=r6, @ANYRES8=r1], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (rerun: 32) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x2, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2e56, &(0x7f00000001c0), 0x0, 0x7, 0x2, 0x8, 0x8, 0x61}) (async, rerun: 64) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048890, 0x0, 0x0) (async, rerun: 64) r8 = socket(0xa, 0x3, 0x87) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000480)={@private2, 0x18, r10}) (async) clock_adjtime(0xffffffd3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) (async) pipe2(&(0x7f00000038c0)={0xffffffffffffffff}, 0x0) splice(r12, 0x0, r11, 0x0, 0xfffffffffffffff9, 0x9) (async) write$vhost_msg_v2(r12, &(0x7f0000000480)={0x2, 0x0, {&(0x7f0000000000)=""/26, 0x1a, &(0x7f0000000380)=""/218, 0x3, 0x3}}, 0x48) (async) socket(0x400000000010, 0x3, 0x0) 1m9.575951488s ago: executing program 2 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e9, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x1, 0x32}, 0x0, @in=@loopback, 0x3102, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="64002f8008000100000000000c0002000202aaaaaaaaaaaa4c0003800800040091f6000038000380080002000100000006000100000000f60b0004000202aaaaaaaaaaaa080000800000000000000100000000000620ba6278aa000008000100"], 0x80}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 1m9.485819433s ago: executing program 5 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={&(0x7f00000001c0), 0x0, &(0x7f0000002540)="9a835d3f1d04fe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cdeac8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a7a231e708ed9a6bc03bb7e66eefe30e4004c1aae8383aa387bb14e4ac6829017894e465dc682171a8a4e5276e6a5d23b48cf4bc9366fd07f49458cd473b86f6b2ce0ccc39d7db31e5494aaa38cf67201a16187b5f1149e97c541ae49e05a8b6eb30fab2062186312a9db4db12eab1af3120fb9227196b54e8fbe0d9ee48d88a380df05b75c9efadc56da57ad59ead8f3d3e5c208c0d031dfe233f9a0e8512546f090fca9d43ed026d9a8e554e913c2d16264f741abfe265e9f5caf1ca307f50ea6c95bc0622b5442f84df231070a82fd84d8f968332aee3153a22daa18c3afbfb86db03de0069e0c18c353b8f9a2045a8cad5ae660a3b23ca89d4d1ad84455c705ea025f71646f84cd6e876e901d5e151b70116b9c235ec733cdbc0437b1cf8314518d769b67f9ffdc0b9aa7cde33cf4b368d6ccb85c8209922e35205b706080dbc2cc000f9d71517ede743e6154452e7a9fe74f007d9b7ef0faed426d48cac735f92e8034de55627af12e657284b2c74ec6908f94cf7b49bdea30a713e3c6b5b84a27668b105644f4ad76e91f5feb1005a1ba60da061f266902171a2a79fe595ace68a4cd922ff7cbd399f2f44bd3e7f40868c0fdc169e8d8f53b76652343e309a7930a6daab5354474b5f257dceaa9f012e874c66324741bbdd199863c736232497a103c4f894a113b9483fe1564d14a4db6c5277f29a9999b2005d6022cc98a1a640fff7bfe189478559a401093505d681bb4466b2509072baea4728fa8675816c68899cbfd32698795807c88c018356fd2b3ac7435e3c8939d58b7fd2dc745e3beebcec2111cff9e8d2079a914ffb9f69eabb5cd0b4cb244a8e97179bfbf51980f7528a6399e396f60dc419e2dcb1350a7b204df16d014c83cf5e7029c3c1594245712abe906970f61174ce61e0e8403135ed55c8fa08a8081eaa18fcb18f0d26457de8d2574bb14a5a4109d7ba0bae28459b86b29f4387a1d794d80ba87f79f29cbd961d312c426a66a21801755f2c3ca04a023f945f352139a7fdf7f6b88f5c94412c0407b4f736a2b845e304648f4513ae06e2f6b7e0bdc7cd4245b556147f78a04f8a502517ef0091899d38f2e815b100d25d99d744494f9a2351f3a1ab9297edf9bae1e57f95db6aef48c2d40517efab288fc50d59731ae432c487986e6acb2b94b804ea61c4b97fbbc58b9749fca1e8e80feb9ba4db86565cf711aeabc550f0f2451d9bb39b33907cf8edb306303ab99876d6d6bf673988d1021411ca1c6431afddff3dcae6f09d924f64fa5ec61dcb394b57b34cc2fbc88ad67f9d1500423fb47ae0d7efebfe33fe7bd45b7d82165d4790c156ea95613ecdb64b199e862b9380ecea3e667e08ffe0047084d872fbd9a54aa91fdf5cdba4de735d09f19295615f767eef36a3b33fa6bef850c4356a34b32e7a97d668e95a583b78b15b1991ecc1065fa3e17fed0c8a80b505eca07f44b6de07df88df4562d5c7cdd37c28cc9bbc35a1e122937ebd58ddf0f4c022eefe1040fc9dc2993e3f32257be76ba62bb4a3bd30e8c691a2fc3a8fd93c73cabd332e2f41aeac721229a2786e3d3d9aec99a8d9993320fe7f976f820cf8205709c7b352e58046ade26c8b037e6f2f7eb9d7696b9d7f40177f0214e2957b0ef5472b74fe1a8867a07270706eb3b3363d72f9ec4b0b41ac2eda9669dad20ef6ffbb9f00794605227e7", &(0x7f0000003540), 0x200, r1}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x61, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/244, 0x2f, 0xf4, 0x1, 0x3e}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r4, 0x23719000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001e764be2b7fb0000e60080b8785d960001000000007efff10000400000007829000000002c9dc83f0000000000000004", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000300000000000000000500000000000000000400000c00", [0x8, 0xffffffff9673e35d]}}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1a, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xbc9c13d990f99b74}}, @exit, @generic={0x6, 0x7, 0x9, 0x8, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xae}, @ldst={0x3, 0x2, 0x2, 0x9, 0x6}], &(0x7f0000000300)='syzkaller\x00', 0xff, 0x3a, &(0x7f0000000340)=""/58, 0x41100, 0xa, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xc, 0xe, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x1, r4, r5, r6, r8, r10], &(0x7f0000000780)=[{0x0, 0x2, 0x5, 0x8}, {0x3, 0x1, 0x6, 0x8}, {0x5, 0x3, 0x0, 0x3}, {0x2, 0x2, 0xe, 0x9}, {0x3, 0x1, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={&(0x7f00000001c0), 0x0, &(0x7f0000002540)="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", &(0x7f0000003540), 0x200, r1}, 0x38) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x61, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/244, 0x2f, 0xf4, 0x1, 0x3e}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r4, 0x23719000) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001e764be2b7fb0000e60080b8785d960001000000007efff10000400000007829000000002c9dc83f0000000000000004", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000300000000000000000500000000000000000400000c00", [0x8, 0xffffffff9673e35d]}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1a, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xbc9c13d990f99b74}}, @exit, @generic={0x6, 0x7, 0x9, 0x8, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xae}, @ldst={0x3, 0x2, 0x2, 0x9, 0x6}], &(0x7f0000000300)='syzkaller\x00', 0xff, 0x3a, &(0x7f0000000340)=""/58, 0x41100, 0xa, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xc, 0xe, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x1, r4, r5, r6, r8, r10], &(0x7f0000000780)=[{0x0, 0x2, 0x5, 0x8}, {0x3, 0x1, 0x6, 0x8}, {0x5, 0x3, 0x0, 0x3}, {0x2, 0x2, 0xe, 0x9}, {0x3, 0x1, 0xb, 0x1}], 0x10, 0x5}, 0x94) (async) 0s ago: executing program 33 (id=64): r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000019140)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000380), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 29.054643][ T4701] cgroup: Unknown subsys name 'net' [ 29.184671][ T4701] cgroup: Unknown subsys name 'cpuset' [ 29.186774][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.354566][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.248421][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.248687][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.248903][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.249298][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.249433][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.249506][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.250352][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.250581][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.253121][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.254509][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.254809][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.257599][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.257603][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.257852][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.258119][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.258223][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.258686][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.258913][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.259072][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.279816][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.281777][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.284500][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.286280][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.293741][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.296437][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.552012][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.553352][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.553424][ T4723] bridge_slave_0: entered allmulticast mode [ 30.553937][ T4723] bridge_slave_0: entered promiscuous mode [ 30.562379][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.562486][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.562590][ T4723] bridge_slave_1: entered allmulticast mode [ 30.563018][ T4723] bridge_slave_1: entered promiscuous mode [ 30.589031][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.623917][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.634697][ T4723] team0: Port device team_slave_0 added [ 30.637855][ T4723] team0: Port device team_slave_1 added [ 30.680576][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.680604][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.680633][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.682823][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.682841][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.682862][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.701008][ T4723] hsr_slave_0: entered promiscuous mode [ 30.701403][ T4723] hsr_slave_1: entered promiscuous mode [ 30.746767][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746821][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.746883][ T4712] bridge_slave_0: entered allmulticast mode [ 30.747320][ T4712] bridge_slave_0: entered promiscuous mode [ 30.748010][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.748032][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.748081][ T4712] bridge_slave_1: entered allmulticast mode [ 30.748493][ T4712] bridge_slave_1: entered promiscuous mode [ 30.759456][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.780401][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.806376][ T4712] team0: Port device team_slave_0 added [ 30.812182][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.812289][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.812380][ T4720] bridge_slave_0: entered allmulticast mode [ 30.812812][ T4720] bridge_slave_0: entered promiscuous mode [ 30.815810][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.815839][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.815894][ T4720] bridge_slave_1: entered allmulticast mode [ 30.816414][ T4720] bridge_slave_1: entered promiscuous mode [ 30.821664][ T4712] team0: Port device team_slave_1 added [ 30.855488][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.856918][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.865702][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.865729][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.865744][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.866367][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.866374][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.866387][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.876469][ T4712] hsr_slave_0: entered promiscuous mode [ 30.876758][ T4712] hsr_slave_1: entered promiscuous mode [ 30.876942][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.876984][ T4712] Cannot create hsr debugfs directory [ 30.898453][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.899904][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.901282][ T4713] bridge_slave_0: entered allmulticast mode [ 30.902821][ T4713] bridge_slave_0: entered promiscuous mode [ 30.904896][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.906306][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.906427][ T4711] bridge_slave_0: entered allmulticast mode [ 30.906880][ T4711] bridge_slave_0: entered promiscuous mode [ 30.907800][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.907823][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.907873][ T4711] bridge_slave_1: entered allmulticast mode [ 30.908326][ T4711] bridge_slave_1: entered promiscuous mode [ 30.913234][ T4720] team0: Port device team_slave_0 added [ 30.913993][ T4720] team0: Port device team_slave_1 added [ 30.922219][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.922246][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.922257][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.922930][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.922937][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.922949][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.933357][ T4720] hsr_slave_0: entered promiscuous mode [ 30.933655][ T4720] hsr_slave_1: entered promiscuous mode [ 30.933824][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.933835][ T4720] Cannot create hsr debugfs directory [ 30.941933][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941959][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.942055][ T4713] bridge_slave_1: entered allmulticast mode [ 30.942507][ T4713] bridge_slave_1: entered promiscuous mode [ 30.970339][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.971284][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.976875][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.989581][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.997253][ T4713] team0: Port device team_slave_0 added [ 31.000776][ T4713] team0: Port device team_slave_1 added [ 31.009117][ T4711] team0: Port device team_slave_0 added [ 31.019461][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.020890][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.023353][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.024198][ T4711] team0: Port device team_slave_1 added [ 31.031884][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.033307][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.033336][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.041371][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.041381][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.041397][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.042248][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.042256][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.042267][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.058347][ T4711] hsr_slave_0: entered promiscuous mode [ 31.058646][ T4711] hsr_slave_1: entered promiscuous mode [ 31.059149][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.059159][ T4711] Cannot create hsr debugfs directory [ 31.084416][ T4713] hsr_slave_0: entered promiscuous mode [ 31.086118][ T4713] hsr_slave_1: entered promiscuous mode [ 31.087487][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.088654][ T4713] Cannot create hsr debugfs directory [ 31.098228][ T4723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.101054][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.101405][ T4723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.103746][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.104368][ T4723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.107245][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.109427][ T4723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.112299][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.168136][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.168196][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.168376][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.168413][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.170609][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.172323][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.172854][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.175283][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.184814][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.187197][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.189051][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.191290][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.210135][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.210180][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.210289][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.210330][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.226724][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.229115][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.229480][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.231890][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.234620][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.236784][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.238606][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.240930][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.254471][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.270006][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.274219][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.279845][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.281153][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.284160][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.285703][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.288944][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.290470][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.299142][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.299988][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.301772][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.303655][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.305787][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.307103][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.315455][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.315511][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.319252][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.336506][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336554][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.336940][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336960][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.337539][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337558][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.344313][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.345659][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.345995][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.347139][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.354347][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.356545][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.358490][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.360492][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.381540][ T4723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.399980][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.442805][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.449555][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.460032][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.462898][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.471284][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.471339][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.481733][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.488462][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.488507][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.489035][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.489053][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.490165][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.490183][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.529924][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.532001][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.545479][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.550036][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.550083][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.561917][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.561958][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.588515][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.588557][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.659658][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.669598][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.708163][ T4712] veth0_vlan: entered promiscuous mode [ 31.718966][ T4712] veth1_vlan: entered promiscuous mode [ 31.738894][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.742290][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.751701][ T4712] veth0_macvtap: entered promiscuous mode [ 31.760555][ T4712] veth1_macvtap: entered promiscuous mode [ 31.787125][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.788334][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.800721][ T4720] veth0_vlan: entered promiscuous mode [ 31.809247][ T4711] veth0_vlan: entered promiscuous mode [ 31.821125][ T4720] veth1_vlan: entered promiscuous mode [ 31.840489][ T4720] veth0_macvtap: entered promiscuous mode [ 31.846229][ T4720] veth1_macvtap: entered promiscuous mode [ 31.848030][ T4711] veth1_vlan: entered promiscuous mode [ 31.865916][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.878658][ T4713] veth0_vlan: entered promiscuous mode [ 31.884942][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.894852][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.895996][ T4713] veth1_vlan: entered promiscuous mode [ 31.897593][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.902488][ T4713] veth0_macvtap: entered promiscuous mode [ 31.910783][ T4711] veth0_macvtap: entered promiscuous mode [ 31.912487][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.920172][ T4723] veth0_vlan: entered promiscuous mode [ 31.920873][ T4711] veth1_macvtap: entered promiscuous mode [ 31.924621][ T4713] veth1_macvtap: entered promiscuous mode [ 31.929004][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.929321][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.943727][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943836][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943869][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949924][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.951787][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.956170][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.957310][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.966434][ T4723] veth1_vlan: entered promiscuous mode [ 31.987660][ T3136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.987679][ T3136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.988211][ T4712] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.993813][ T194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994162][ T194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994181][ T194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994198][ T194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994214][ T194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994238][ T194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.035082][ T3136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.035116][ T3136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.054674][ T4723] veth0_macvtap: entered promiscuous mode [ 32.057156][ T4723] veth1_macvtap: entered promiscuous mode [ 32.063521][ T3536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063633][ T3536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063705][ T3536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063785][ T3536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063914][ T3536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.064071][ T3536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.064231][ T3536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.079978][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.080011][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.082973][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.087635][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.087663][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.089505][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.122247][ T3136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.122279][ T3136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.132314][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.132350][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.143428][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.144923][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145071][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145243][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.186738][ T4898] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.187180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.187191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.216760][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.216801][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.226865][ T4906] loop1: detected capacity change from 0 to 1024 [ 32.253641][ T4716] Bluetooth: hci4: command tx timeout [ 32.334631][ T4716] Bluetooth: hci1: command tx timeout [ 32.334658][ T4714] Bluetooth: hci3: command tx timeout [ 32.334835][ T4722] Bluetooth: hci2: command tx timeout [ 32.343374][ T4716] Bluetooth: hci0: command tx timeout [ 32.356663][ T4922] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 32.449841][ T4927] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 32.542864][ T4936] FAULT_INJECTION: forcing a failure. [ 32.542864][ T4936] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.542914][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT [ 32.542930][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.542937][ T4936] Call trace: [ 32.542940][ T4936] show_stack+0x2c/0x3c (C) [ 32.542960][ T4936] __dump_stack+0x30/0x40 [ 32.542973][ T4936] dump_stack_lvl+0xd8/0x12c [ 32.542984][ T4936] dump_stack+0x1c/0x28 [ 32.542995][ T4936] should_fail_ex+0x41c/0x590 [ 32.543008][ T4936] should_fail_alloc_page+0xec/0x10c [ 32.543021][ T4936] prepare_alloc_pages+0x194/0x484 [ 32.543030][ T4936] __alloc_frozen_pages_noprof+0x180/0x648 [ 32.543039][ T4936] alloc_pages_mpol+0x1fc/0x3d0 [ 32.543048][ T4936] folio_alloc_mpol_noprof+0x4c/0x248 [ 32.543057][ T4936] shmem_alloc_folio+0xa0/0x150 [ 32.543069][ T4936] shmem_alloc_and_add_folio+0x28c/0xed8 [ 32.543081][ T4936] shmem_get_folio_gfp+0x4a8/0x1464 [ 32.543092][ T4936] shmem_fault+0x15c/0x32c [ 32.543103][ T4936] __do_fault+0xf4/0x4a8 [ 32.543116][ T4936] do_pte_missing+0x1764/0x2a28 [ 32.543132][ T4936] handle_mm_fault+0x1534/0x2bec [ 32.543144][ T4936] do_page_fault+0x4b0/0xb88 [ 32.543156][ T4936] do_translation_fault+0xc4/0x114 [ 32.543167][ T4936] do_mem_abort+0x70/0x194 [ 32.543177][ T4936] el1_abort+0x50/0x74 [ 32.543188][ T4936] el1h_64_sync_handler+0xdc/0x130 [ 32.543198][ T4936] el1h_64_sync+0x6c/0x70 [ 32.543207][ T4936] __arm64_sys_io_setup+0x120/0x2f4 (P) [ 32.543216][ T4936] invoke_syscall+0x98/0x244 [ 32.543234][ T4936] el0_svc_common+0xec/0x23c [ 32.543246][ T4936] do_el0_svc+0x4c/0x5c [ 32.543257][ T4936] el0_svc+0x64/0x260 [ 32.543266][ T4936] el0t_64_sync_handler+0x44/0x104 [ 32.543276][ T4936] el0t_64_sync+0x198/0x19c [ 32.593948][ T4940] loop3: detected capacity change from 0 to 512 [ 32.650948][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.695445][ T4945] bond1: option miimon: invalid value (18446744073709551609) [ 32.695479][ T4945] bond1: option miimon: allowed values 0 - 2147483647 [ 33.531651][ T4945] bond1 (unregistering): Released all slaves [ 33.576906][ T4963] loop3: detected capacity change from 0 to 256 [ 33.851352][ T4959] Zero length message leads to an empty skb [ 33.862665][ T4963] ======================================================= [ 33.862665][ T4963] WARNING: The mand mount option has been deprecated and [ 33.862665][ T4963] and is ignored by this kernel. Remove the mand [ 33.862665][ T4963] option from the mount to silence this warning. [ 33.862665][ T4963] ======================================================= [ 33.975438][ T4983] FAULT_INJECTION: forcing a failure. [ 33.975438][ T4983] name failslab, interval 1, probability 0, space 0, times 1 [ 33.979655][ T4983] CPU: 0 UID: 0 PID: 4983 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT [ 33.979673][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.979678][ T4983] Call trace: [ 33.979681][ T4983] show_stack+0x2c/0x3c (C) [ 33.979699][ T4983] __dump_stack+0x30/0x40 [ 33.979710][ T4983] dump_stack_lvl+0xd8/0x12c [ 33.979720][ T4983] dump_stack+0x1c/0x28 [ 33.979729][ T4983] should_fail_ex+0x41c/0x590 [ 33.979740][ T4983] should_failslab+0xc4/0x120 [ 33.979751][ T4983] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 33.979762][ T4983] __d_alloc+0x50/0x690 [ 33.979770][ T4983] d_alloc_pseudo+0x2c/0xd8 [ 33.979778][ T4983] alloc_path_pseudo+0xe8/0x1d4 [ 33.979786][ T4983] alloc_file_pseudo+0xb0/0x198 [ 33.979793][ T4983] sock_alloc_file+0xb4/0x1ac [ 33.979802][ T4983] __sys_socket+0x90/0xec [ 33.979809][ T4983] __arm64_sys_socket+0x84/0x9c [ 33.979817][ T4983] invoke_syscall+0x98/0x244 [ 33.979827][ T4983] el0_svc_common+0xec/0x23c [ 33.979836][ T4983] do_el0_svc+0x4c/0x5c [ 33.979846][ T4983] el0_svc+0x64/0x260 [ 33.979855][ T4983] el0t_64_sync_handler+0x44/0x104 [ 33.979863][ T4983] el0t_64_sync+0x198/0x19c [ 34.012539][ T4974] loop1: detected capacity change from 0 to 2053 [ 34.060833][ T4988] loop2: detected capacity change from 0 to 512 [ 34.062664][ T4988] EXT4-fs: Ignoring removed nobh option [ 34.064423][ T4988] EXT4-fs (loop2): invalid first ino: 0 [ 34.096030][ T4988] evm: overlay not supported [ 34.106844][ T4988] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 34.171348][ T4996] FAULT_INJECTION: forcing a failure. [ 34.171348][ T4996] name failslab, interval 1, probability 0, space 0, times 0 [ 34.172098][ T4996] CPU: 1 UID: 0 PID: 4996 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT [ 34.172119][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.172126][ T4996] Call trace: [ 34.172129][ T4996] show_stack+0x2c/0x3c (C) [ 34.172152][ T4996] __dump_stack+0x30/0x40 [ 34.172164][ T4996] dump_stack_lvl+0xd8/0x12c [ 34.172176][ T4996] dump_stack+0x1c/0x28 [ 34.172187][ T4996] should_fail_ex+0x41c/0x590 [ 34.172200][ T4996] should_failslab+0xc4/0x120 [ 34.172212][ T4996] __kmalloc_cache_noprof+0x94/0x5fc [ 34.172221][ T4996] crypto_larval_alloc+0x64/0x248 [ 34.172232][ T4996] crypto_alg_mod_lookup+0x164/0x3fc [ 34.172248][ T4996] crypto_alloc_tfm_node+0xdc/0x22c [ 34.172258][ T4996] crypto_alloc_aead+0x40/0x54 [ 34.172271][ T4996] esp6_init_state+0x4dc/0xebc [ 34.172281][ T4996] __xfrm_init_state+0x730/0xed0 [ 34.172290][ T4996] xfrm_init_state+0x28/0xc0 [ 34.172302][ T4996] pfkey_add+0x14c8/0x22b4 [ 34.172312][ T4996] pfkey_sendmsg+0x9f4/0xdf8 [ 34.172321][ T4996] __sock_sendmsg+0xc8/0x17c [ 34.172330][ T4996] ____sys_sendmsg+0x3d0/0x6c8 [ 34.172340][ T4996] ___sys_sendmsg+0x198/0x224 [ 34.172349][ T4996] __sys_sendmsg+0x158/0x204 [ 34.172359][ T4996] __arm64_sys_sendmsg+0x88/0x9c [ 34.172368][ T4996] invoke_syscall+0x98/0x244 [ 34.172380][ T4996] el0_svc_common+0xec/0x23c [ 34.172391][ T4996] do_el0_svc+0x4c/0x5c [ 34.172402][ T4996] el0_svc+0x64/0x260 [ 34.172415][ T4996] el0t_64_sync_handler+0x44/0x104 [ 34.172425][ T4996] el0t_64_sync+0x198/0x19c [ 34.218777][ T5000] nfs: Unknown parameter '' [ 34.320542][ T5005] loop2: detected capacity change from 0 to 2048 [ 34.347325][ T4716] Bluetooth: hci4: command tx timeout [ 34.370648][ T5007] loop0: detected capacity change from 0 to 128 [ 34.413359][ T4716] Bluetooth: hci0: command tx timeout [ 34.413397][ T4716] Bluetooth: hci2: command tx timeout [ 34.413425][ T4716] Bluetooth: hci3: command tx timeout [ 34.429146][ T5013] loop2: detected capacity change from 0 to 1024 [ 34.429562][ T5013] EXT4-fs: Ignoring removed bh option [ 34.432056][ T5013] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 34.447985][ T5013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.507010][ T5018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.36'. [ 34.508091][ T5019] loop0: detected capacity change from 0 to 128 [ 34.508448][ T5019] vfat: Bad value for 'allow_utime' [ 34.510849][ T5018] loop0: detected capacity change from 0 to 128 [ 34.511081][ T5018] vfat: Bad value for 'allow_utime' [ 34.699553][ T5026] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.35: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 34.818688][ T5026] EXT4-fs (loop2): Remounting filesystem read-only [ 34.918580][ T5031] loop3: p1 p2 p3 p4 [ 34.918580][ T5031] p1: [ 34.918695][ T5031] loop3: p1 size 67110656 extends beyond EOD, truncated [ 34.934299][ T5031] loop3: p3 size 134217728 extends beyond EOD, truncated [ 34.936036][ T5031] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 34.941503][ T5031] loop3: p5 size 67110656 extends beyond EOD, truncated [ 34.942327][ T5031] loop3: p6 size 134217728 extends beyond EOD, truncated [ 35.063504][ T5048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 35.198041][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.200483][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.211994][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.220060][ T5052] udevd[5052]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 35.221947][ T5049] udevd[5049]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.222904][ T5051] udevd[5051]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.545527][ T5066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.568240][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 35.575940][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.579660][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 35.584544][ T5049] udevd[5049]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.587783][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.681898][ T5094] can0: slcan on ptm0. [ 35.719961][ T5101] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 35.735231][ T5101] FAULT_INJECTION: forcing a failure. [ 35.735231][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 35.737851][ T5101] CPU: 1 UID: 0 PID: 5101 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT [ 35.737875][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.737882][ T5101] Call trace: [ 35.737886][ T5101] show_stack+0x2c/0x3c (C) [ 35.737910][ T5101] __dump_stack+0x30/0x40 [ 35.737926][ T5101] dump_stack_lvl+0xd8/0x12c [ 35.737939][ T5101] dump_stack+0x1c/0x28 [ 35.737950][ T5101] should_fail_ex+0x41c/0x590 [ 35.737963][ T5101] should_failslab+0xc4/0x120 [ 35.737976][ T5101] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 35.737989][ T5101] sock_alloc_inode+0x30/0x180 [ 35.738001][ T5101] alloc_inode+0x68/0x198 [ 35.738012][ T5101] sock_alloc+0x4c/0x204 [ 35.738019][ T5101] __sock_create+0x108/0x670 [ 35.738028][ T5101] __sys_socket_create+0xc0/0x11c [ 35.738036][ T5101] __sys_socket+0x44/0xec [ 35.738045][ T5101] __arm64_sys_socket+0x84/0x9c [ 35.738053][ T5101] invoke_syscall+0x98/0x244 [ 35.738065][ T5101] el0_svc_common+0xec/0x23c [ 35.738077][ T5101] do_el0_svc+0x4c/0x5c [ 35.738088][ T5101] el0_svc+0x64/0x260 [ 35.738099][ T5101] el0t_64_sync_handler+0x44/0x104 [ 35.738109][ T5101] el0t_64_sync+0x198/0x19c [ 35.751416][ T5101] socket: no more sockets [ 35.767795][ T5103] mmap: syz.4.50 (5103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.795438][ T5105] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.795475][ T5105] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.817503][ T5094] ext4: Unknown parameter 'dont_hash' [ 35.825262][ T5110] EXT4-fs: Ignoring removed bh option [ 35.826490][ T5110] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.829925][ T5095] can0 (unregistered): slcan off ptm0. [ 35.861050][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.882095][ T5115] capability: warning: `syz.2.47' uses deprecated v2 capabilities in a way that may be insecure [ 36.016736][ T4714] Bluetooth: hci1: command tx timeout [ 36.114597][ T5118] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.52: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 36.227994][ T5118] EXT4-fs (loop1): Remounting filesystem read-only [ 36.359804][ T5134] tipc: Started in network mode [ 36.359841][ T5134] tipc: Node identity 7f000001, cluster identity 4711 [ 36.363105][ T5134] tipc: New replicast peer: 127.0.0.1 [ 36.367578][ T5134] tipc: Enabled bearer , priority 10 [ 36.409118][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.410092][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.413789][ T4714] Bluetooth: hci4: command tx timeout [ 36.417290][ T5142] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.417329][ T5142] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 36.422744][ T5142] EXT4-fs (loop0): invalid journal inode [ 36.422898][ T5142] EXT4-fs (loop0): can't get journal size [ 36.425285][ T5142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.496287][ T4716] Bluetooth: hci2: command tx timeout [ 36.496329][ T4716] Bluetooth: hci0: command tx timeout [ 36.498931][ T4714] Bluetooth: hci3: command tx timeout [ 36.847563][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.854771][ T5155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'. [ 36.880902][ T5158] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.881686][ T5158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 36.881773][ T5158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.885670][ T5158] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.61: bg 0: block 361: padding at end of block bitmap is not set [ 36.885730][ T5158] loop4: lost filesystem error report for type 5 error -117 [ 36.886167][ T5158] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 36.886179][ T5158] loop4: lost filesystem error report for type 5 error -117 [ 36.886273][ T5158] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.61: attempt to clear invalid blocks 33619980 len 1 [ 36.886313][ T5158] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.886863][ T5158] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.61: invalid indirect mapped block 1811939328 (level 0) [ 36.886879][ T5158] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.886954][ T5158] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.61: invalid indirect mapped block 2185560079 (level 1) [ 36.886966][ T5158] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.889862][ T5158] EXT4-fs (loop4): 1 truncate cleaned up [ 36.890351][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.989782][ T5174] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 37.010566][ T5174] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 37.021967][ T5174] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.022109][ T5174] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.025947][ T5174] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.62: Inode bitmap for bg 0 marked uninitialized [ 37.025989][ T5174] loop3: lost filesystem error report for type 5 error -117 [ 37.029126][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.455280][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.484413][ T1091] tipc: Node number set to 2130706433 [ 37.507320][ T5192] set_capacity_and_notify: 6 callbacks suppressed [ 37.509102][ T5192] loop0: detected capacity change from 0 to 512 [ 37.510911][ T5192] EXT4-fs: Ignoring removed nobh option [ 37.521508][ T5192] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 37.669909][ T5201] netlink: 112 bytes leftover after parsing attributes in process `syz.0.68'. [ 37.806480][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.824591][ T5206] loop0: detected capacity change from 0 to 1024 [ 37.827280][ T5206] EXT4-fs: Ignoring removed bh option [ 37.828000][ T5206] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 37.845017][ T5206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.061493][ T5216] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.70: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 38.095469][ T4722] Bluetooth: hci1: command tx timeout [ 38.104074][ T5216] EXT4-fs (loop0): Remounting filesystem read-only [ 38.227407][ T5213] loop2: detected capacity change from 0 to 512 [ 38.229493][ T5213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.232166][ T5213] EXT4-fs: Ignoring removed nobh option [ 38.233717][ T5213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.235435][ T5213] EXT4-fs: Ignoring removed bh option [ 38.244424][ T5213] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 38.250987][ T5213] EXT4-fs (loop2): 1 orphan inode deleted [ 38.254047][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 38.254072][ C0] EXT4-fs (loop2): initial error at time 38: ext4_mb_generate_buddy:1317 [ 38.254106][ C0] EXT4-fs (loop2): last error at time 38: ext4_mb_generate_buddy:1317 [ 38.261233][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.393989][ T5226] loop3: detected capacity change from 0 to 8 [ 38.408368][ T5226] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 38.408400][ T5226] unable to read xattr id index table [ 38.412664][ T5226] SQUASHFS error: zlib decompression failed, data probably corrupt [ 38.412701][ T5226] SQUASHFS error: Failed to read block 0x9b: -5 [ 38.412936][ T5226] SQUASHFS error: Unable to read metadata cache entry [99] [ 38.412951][ T5226] SQUASHFS error: Unable to read inode 0x127 [ 38.493401][ T4722] Bluetooth: hci4: command tx timeout [ 38.573444][ T4716] Bluetooth: hci0: command tx timeout [ 38.573482][ T4716] Bluetooth: hci2: command tx timeout [ 38.576143][ T4722] Bluetooth: hci3: command tx timeout [ 38.689374][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.729361][ T5228] loop0: detected capacity change from 0 to 1024 [ 38.754989][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.974099][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 39.019125][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.210085][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.220205][ T5239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.78'. [ 39.520135][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.592941][ T5243] loop4: detected capacity change from 0 to 1024 [ 39.595880][ T5243] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.596441][ T5243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.596543][ T5243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.597457][ T5243] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.79: Invalid inode table block 0 in block_group 0 [ 39.597473][ T5243] loop4: lost filesystem error report for type 5 error -117 [ 39.598059][ T5243] EXT4-fs (loop4): Remounting filesystem read-only [ 39.598072][ T5243] Quota error (device loop4): write_blk: dquota write failed [ 39.598107][ T5243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.598179][ T5243] EXT4-fs (loop4): 1 truncate cleaned up [ 39.603150][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 39.603161][ C1] EXT4-fs (loop4): initial error at time 39: __ext4_get_inode_loc:4916 [ 39.603172][ C1] EXT4-fs (loop4): last error at time 39: __ext4_get_inode_loc:4916 [ 39.627459][ T5243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.646462][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.696147][ T5247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 39.714488][ T5248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 39.760936][ T5248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 39.779747][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 39.803422][ T5251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.81'. [ 39.830498][ T5252] loop3: detected capacity change from 0 to 128 [ 39.830818][ T5252] vfat: Unknown parameter '' [ 39.947950][ T5262] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 40.115940][ T5274] loop2: detected capacity change from 0 to 256 [ 40.118212][ T5274] vfat: Bad value for 'codepage' [ 40.502630][ T4722] Bluetooth: hci2: adv larger than maximum supported [ 40.502666][ T4722] Bluetooth: hci2: Malformed LE Event: 0x0d [ 40.507983][ T5245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.530102][ T3207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.597036][ T3207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.688939][ T3207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.695088][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.697984][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.699750][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.700566][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.700812][ T4714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.766588][ T3207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.126915][ T3207] bridge_slave_1: left allmulticast mode [ 41.126962][ T3207] bridge_slave_1: left promiscuous mode [ 41.129829][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.159063][ T3207] bridge_slave_0: left allmulticast mode [ 41.161275][ T3207] bridge_slave_0: left promiscuous mode [ 41.162821][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.444628][ T3207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.476485][ T3207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.564646][ T3207] bond0 (unregistering): Released all slaves [ 41.748678][ T5333] FAULT_INJECTION: forcing a failure. [ 41.748678][ T5333] name failslab, interval 1, probability 0, space 0, times 0 [ 41.748721][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.102 Tainted: G L syzkaller #0 PREEMPT [ 41.748736][ T5333] Tainted: [L]=SOFTLOCKUP [ 41.748739][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.748745][ T5333] Call trace: [ 41.748748][ T5333] show_stack+0x2c/0x3c (C) [ 41.748768][ T5333] __dump_stack+0x30/0x40 [ 41.748781][ T5333] dump_stack_lvl+0xd8/0x12c [ 41.748793][ T5333] dump_stack+0x1c/0x28 [ 41.748804][ T5333] should_fail_ex+0x41c/0x590 [ 41.748817][ T5333] should_failslab+0xc4/0x120 [ 41.748830][ T5333] __kmalloc_noprof+0x108/0x6c8 [ 41.748838][ T5333] tomoyo_encode2+0x10c/0x330 [ 41.748850][ T5333] tomoyo_encode+0x34/0x50 [ 41.748859][ T5333] tomoyo_realpath_from_path+0x488/0x4dc [ 41.748870][ T5333] tomoyo_check_open_permission+0x1c4/0x394 [ 41.748880][ T5333] tomoyo_file_open+0x78/0xcc [ 41.748891][ T5333] security_file_open+0xbc/0x258 [ 41.748901][ T5333] do_dentry_open+0x2a8/0xfc0 [ 41.748913][ T5333] vfs_open+0x44/0x2dc [ 41.748923][ T5333] path_openat+0x1084/0x18f4 [ 41.748933][ T5333] do_file_open+0x1c8/0x2e8 [ 41.748943][ T5333] do_sys_openat2+0x114/0x1e8 [ 41.748954][ T5333] do_sys_open+0xb0/0xe0 [ 41.748965][ T5333] __arm64_sys_openat+0xa8/0xc4 [ 41.748976][ T5333] invoke_syscall+0x98/0x244 [ 41.748988][ T5333] el0_svc_common+0xec/0x23c [ 41.749000][ T5333] do_el0_svc+0x4c/0x5c [ 41.749011][ T5333] el0_svc+0x64/0x260 [ 41.749022][ T5333] el0t_64_sync_handler+0x44/0x104 [ 41.749032][ T5333] el0t_64_sync+0x198/0x19c [ 41.749046][ T5333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 41.983211][ T3207] hsr_slave_0: left promiscuous mode [ 41.987436][ T3207] hsr_slave_1: left promiscuous mode [ 41.987816][ T3207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.987833][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.994667][ T3207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.994699][ T3207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.023691][ T3207] veth1_macvtap: left promiscuous mode [ 42.023749][ T3207] veth0_macvtap: left promiscuous mode [ 42.023801][ T3207] veth1_vlan: left promiscuous mode [ 42.023894][ T3207] veth0_vlan: left promiscuous mode [ 42.489942][ T3207] team0 (unregistering): Port device team_slave_1 removed [ 42.507960][ T3207] team0 (unregistering): Port device team_slave_0 removed [ 42.571159][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.649261][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.649306][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.649398][ T5298] bridge_slave_0: entered allmulticast mode [ 42.649832][ T5298] bridge_slave_0: entered promiscuous mode [ 42.650569][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.650597][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.650663][ T5298] bridge_slave_1: entered allmulticast mode [ 42.651051][ T5298] bridge_slave_1: entered promiscuous mode [ 42.676096][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.680369][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.702667][ T5298] team0: Port device team_slave_0 added [ 42.707989][ T5298] team0: Port device team_slave_1 added [ 42.733752][ T4714] Bluetooth: hci4: command tx timeout [ 42.736209][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.736890][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.736911][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.739615][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.739627][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.739645][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.762394][ T5298] hsr_slave_0: entered promiscuous mode [ 42.762742][ T5298] hsr_slave_1: entered promiscuous mode [ 42.901725][ T5298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.909161][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.910364][ T5298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.959441][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.959900][ T5298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.968517][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.971346][ T5298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.981689][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.033871][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.033929][ T5298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.034038][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.034083][ T5298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.093907][ T5399] loop0: detected capacity change from 0 to 8 [ 43.107798][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.128111][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.187373][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.408707][ T5431] netlink: 204 bytes leftover after parsing attributes in process `syz.0.113'. [ 43.411915][ T5431] vxcan3: entered promiscuous mode [ 43.422954][ T5431] vxcan3: entered allmulticast mode [ 43.482197][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.547007][ T5452] loop0: detected capacity change from 0 to 256 [ 43.547453][ T5452] vfat: Deprecated parameter 'posix' [ 43.547481][ T5452] FAT-fs: "posix" option is obsolete, not supported now [ 43.559422][ T5455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 43.572450][ T3136] Bluetooth: hci5: Frame reassembly failed (-84) [ 43.622719][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.661187][ T5298] veth0_vlan: entered promiscuous mode [ 43.665909][ T5298] veth1_vlan: entered promiscuous mode [ 43.679059][ T5298] veth0_macvtap: entered promiscuous mode [ 43.683431][ T5298] veth1_macvtap: entered promiscuous mode [ 43.692231][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.698135][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.730301][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.730610][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.730631][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.765149][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.765208][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.777349][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.777385][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.786136][ T3536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.975854][ T5492] loop5: detected capacity change from 0 to 1024 [ 43.976313][ T5492] EXT4-fs: Ignoring removed bh option [ 43.981501][ T5492] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.014813][ T5492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.049316][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.231066][ T5510] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.539020][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 44.553273][ T5523] bond1: Invalid ad_actor_system MAC address. [ 44.553297][ T5523] bond1: option ad_actor_system: invalid value (1) [ 44.558957][ T5523] bond1 (unregistering): Released all slaves [ 44.892607][ T4722] Bluetooth: hci4: command tx timeout [ 44.926014][ T5298] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 44.931446][ T5298] EXT4-fs (loop5): Remounting filesystem read-only [ 44.937878][ T5298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.169662][ T5537] netlink: 8372 bytes leftover after parsing attributes in process `syz.5.123'. [ 45.613260][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.964508][ T5561] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 46.491264][ T5576] netlink: 124 bytes leftover after parsing attributes in process `syz.5.134'. [ 46.491304][ T5576] netlink: 44 bytes leftover after parsing attributes in process `syz.5.134'. [ 46.523358][ T30] audit: type=1326 audit(46.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5578 comm="syz.0.135" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d782e8 code=0x0 [ 46.923189][ T4714] Bluetooth: hci4: command tx timeout [ 46.992150][ T5599] syzkaller1: entered promiscuous mode [ 46.992185][ T5599] syzkaller1: entered allmulticast mode [ 47.076151][ T5605] loop5: detected capacity change from 0 to 512 [ 47.079099][ T5605] EXT4-fs: Ignoring removed i_version option [ 47.116478][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 47.119590][ T5610] ipvlan1: entered promiscuous mode [ 47.124437][ T5605] EXT4-fs (loop5): 1 orphan inode deleted [ 47.124925][ T5605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.135025][ T5610] ipvlan1: left promiscuous mode [ 47.152293][ T5298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.175287][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 47.182345][ T5616] ipvlan1: entered promiscuous mode [ 47.191904][ T5616] ipvlan1: left promiscuous mode [ 47.202340][ T5619] loop5: detected capacity change from 0 to 512 [ 47.513668][ T5644] loop2: detected capacity change from 0 to 1024 [ 47.514066][ T5644] EXT4-fs: Ignoring removed bh option [ 47.576271][ T5644] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.589472][ T5644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.880200][ T5651] No control pipe specified [ 48.099782][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 48.099854][ T5651] bridge_slave_1: left allmulticast mode [ 48.099884][ T5651] bridge_slave_1: left promiscuous mode [ 48.099992][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.188337][ T5651] bridge_slave_0: left allmulticast mode [ 48.188371][ T5651] bridge_slave_0: left promiscuous mode [ 48.188478][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.386796][ T4720] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /39/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 48.392273][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.152'. [ 48.397691][ T4720] EXT4-fs (loop2): Remounting filesystem read-only [ 48.402832][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.439845][ T5672] loop3: detected capacity change from 0 to 512 [ 48.564237][ T5665] psci: CPU1 killed (polled 0 ms) [ 49.457320][ T4714] Bluetooth: hci4: command tx timeout [ 49.484694][ T5676] loop2: detected capacity change from 0 to 128 [ 49.508619][ T5676] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.528883][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 49.808672][ T5676] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.942137][ T5695] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 57.373150][ C0] sched: DL replenish lagged too much [ 66.433409][ T1586] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.446050][ T1586] ieee802154 phy1 wpan1: encryption failed: -22 [ 92.677127][ T24] cfg80211: failed to load regulatory.db [ 127.495004][ T1586] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.508018][ T1586] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.893770][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x2 nice=0 stuck for 37s! [ 150.893861][ C0] Showing busy workqueues and worker pools: [ 150.893871][ C0] workqueue events: flags=0x100 [ 150.893911][ C0] pwq 2: cpus=0 node=0 flags=0x2 nice=0 active=23 refcnt=24 [ 150.893930][ C0] in-flight: 10:reg_todo for 37s [ 150.893952][ C0] pending: 6*ovs_dp_masks_rebalance, 6*nsim_dev_hwstats_traffic_work, 4*psi_avgs_work, vmstat_shepherd, free_obj_work, delayed_vfree_work, psi_avgs_work, key_garbage_collector, drm_fb_helper_damage_work [ 150.894042][ C0] workqueue events_unbound: flags=0x2 [ 150.894051][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=28 refcnt=29 [ 150.894067][ C0] in-flight: 3650:cfg80211_wiphy_work for 40s cfg80211_wiphy_work ,194:cfg80211_wiphy_work for 100s cfg80211_wiphy_work ,12:cfg80211_wiphy_work for 50s cfg80211_wiphy_work ,3136:cfg80211_wiphy_work for 67s cfg80211_wiphy_work ,3207:cfg80211_wiphy_work for 77s cfg80211_wiphy_work ,1174:cfg80211_wiphy_work for 90s cfg80211_wiphy_work ,3536:cfg80211_wiphy_work for 77s cfg80211_wiphy_work ,58:cfg80211_wiphy_work for 95s cfg80211_wiphy_work ,40:cfg80211_wiphy_work for 58s cfg80211_wiphy_work ,14:cfg80211_wiphy_work for 98s cfg80211_wiphy_work [ 150.894304][ C0] pending: toggle_allocation_gate, 6*nsim_dev_trap_report_work, flush_memcg_stats_dwork [ 150.894340][ C0] workqueue events_power_efficient: flags=0x82 [ 150.894349][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=11 refcnt=12 [ 150.894364][ C0] in-flight: 3834:neigh_periodic_work for 24s ,3978:reg_check_chans_work for 8s ,49:neigh_managed_work for 8s ,2939:gc_worker for 24s [ 150.894420][ C0] pending: neigh_periodic_work, crda_timeout_work, fb_flashcursor, check_lifetime, wg_ratelimiter_gc_entries, 2*neigh_managed_work