last executing test programs: 51.735535244s ago: executing program 0 (id=105): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0x3, 0x0, "0000f124da00000000000000000000000000000100000000000000f8ffffff00", 0x51424752}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x40000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x2aee}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x880}, 0x0) 51.698067647s ago: executing program 0 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x4}]}}}]}, 0x3c}}, 0x4000000) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a400, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x61, 0x64, 0x36, 0x38, 0x63, 0x65, 0x33], 0x2d, [0x62, 0x64, 0x63, 0x35], 0x2d, [0x38, 0x30, 0x35, 0x62], 0x2d, [0x38, 0x62, 0x66, 0x36], 0x2d, [0x61, 0x0, 0x69, 0x33, 0x61, 0x33, 0x37, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x39, 0x31, 0x36, 0x64, 0x61], 0x2d, [0x39, 0x61, 0x741d93b6600d7bfa, 0x30], 0x2d, [0x64, 0x37, 0x34, 0x31], 0x2d, [0x50, 0x36, 0x39, 0x33], 0x2d, [0x34, 0x30, 0x31, 0x63, 0x64, 0x30, 0x32, 0x34]}}}]}}, 0x0, 0x0, &(0x7f00000003c0)="f7be2f23b1de4b02db2ffe61d763e19bb451a19f138c69") ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000400)=[0x0, 0x0]}) 51.568348919s ago: executing program 0 (id=107): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000005c0)=0x104) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000600)={0xfffffffffffffff7, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @fwd={0x6}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x0, 0x61, 0x5f]}}, 0x0, 0x45}, 0x28) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x2}, &(0x7f0000000740)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000780)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f00000007c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x1000, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0xff, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x5, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804100, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0x8000000, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x8, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x10, 0x5, 0x20, 0x1002, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0x7, 0x8000000, 0x4, 0xfffffffb, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) epoll_create1(0x80000) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000c00)={&(0x7f0000000c40)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="671723d7c6012c", 0x10}, {&(0x7f0000000d00)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x454}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 50.699679855s ago: executing program 0 (id=121): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000002400)={&(0x7f0000002380)=""/76, 0x4c}) r1 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x82040) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000002300)=""/107, 0x6b, 0x9) setns(r2, 0x8000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlinkprop={0x34, 0x6c, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x41b, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'erspan0\x00'}]}, 0x34}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000002400)={&(0x7f0000002380)=""/76, 0x4c}) (async) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x82040) (async) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000240)) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r2, &(0x7f00000001c0)='27', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) (async) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) (async) pread64(r3, &(0x7f0000002300)=""/107, 0x6b, 0x9) (async) setns(r2, 0x8000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlinkprop={0x34, 0x6c, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x41b, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'erspan0\x00'}]}, 0x34}}, 0x0) (async) 50.572502794s ago: executing program 0 (id=122): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) timer_create(0x3, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000000380), 0x318, 0xfc0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e9, &(0x7f0000002600)="$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") 49.294602838s ago: executing program 2 (id=150): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x40000, 0x2000008}]}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0x11, 0x1, 0xffff}, {0x10005, 0x1, 0x7}, {0xc, 0x3, 0x400010}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}]}}, &(0x7f0000000940)=""/4088, 0x82, 0xff8, 0x8}, 0x28) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f0000001940)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./file1\x00', 0x143042, 0x58) fallocate(r4, 0x0, 0x9, 0x10001) (async) copy_file_range(r4, 0x0, r4, &(0x7f0000001f40)=0xae8, 0x863, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000001f80), 0x12) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000340)=ANY=[], 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x40000cf, 0x0) 49.17840349s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000540)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x1, 0x6, 0x8, 0x20, 0xfffffffffffffffc}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1000025}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x2, 0x0, 0x8, 0x5, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80402, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000005c0)={0x0, 0x0, 0x1, r4}, 0xc) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000600)={{0xa, 0x3, 0xe, @rand_addr, 0x1}, {0xa, 0xfffe, 0xfffffffc}, 0x0, {[0x3, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x3]}}, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYRESDEC=r1], 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000018c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20}}, 0xe4) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000019c0), 0x4) sendmsg$key(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x70bd26, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x10, 0xc, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x10, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write$UHID_INPUT(r1, &(0x7f00000006c0)={0x8, {"61f0d50bafdbf8cb038b939ff2156ad8d769299a3302fc7595d4740a6f5e7f0c8823fc423d45e513847f0f0d54d14ed08b91ae763fffdeb220923be3e9cfc69024ea4f3e0d12ebaf2ca219cb3ccc067bfaa1d98d7e6b92b0b0320ae0f89283e130addde9fb8e7bcbe40219e105abae991a286fd5b99c3fe8bbf5d1385c8ee94c37c52ca69f4803adfb1234b012b4af39d9369d73108cf73edf99d591174597a7eb74565745e2cbd3c9fe1762a36784bd8341517624d984528d2386211f21f097b2d28987ef91b46dd3dd07e707d983cd81e2772deae6ca320da252c7cd93c9387b29b89e44d04b521e7220631aaeba7a279960986288920cf22db0192089fc1d96c31f8ce7c69e27a7b375fc8e4b5815352d6f4c56e900386ecc79678c09183e2cef364c50b9ad9330856fe555fd820aac32f231468acc2e29071217f77fff425c3678b80102557f29e589aea706acd6dcee94af726f4a70eaeff262fd0c690cd4cf64b0697d36a22ffd019effa89d3703099f950356096452631fd413e76620d8e139fbae4a354a4ab7b599f1f45140c4185d7eadba35e2c4fcb8a3aa355972f2093f31db362c920179378fa18d3a830422dad70f7f1d8fc997c4c91dad9308edcc2a1729a09e9b3c25f200e9643a815811a1cb2b40a40a182e74edd2aa6b1f5c07c6d9cea77636edd05787a47d7b84cbe0cd9f7930f6ce4342ebff7cc02f805fbde9b925c6bc19504cb3370c53527874e4998d8f2a0f9d84c47390077a62418b80aa883eb6e1a15d70c95f46cf4a0949959324d96d3bc589c9b63c8ae3fd76b13f78f0c53a9a4e0b4f7c71cbb4c9fca79066aa6663a393522a0ac2d08f470dc7b2fa448b6b3a4dfb7d8fe47767e44176fe6a98b266f2cb77a30870fd7eb5255b004cdcdbe9698ee3617173a562b7f2b1875878fa8cfc55dd859b9f68b884752a13576a91986a6184ddc8f46fb0b15414cc97be9c6de7dcc40b5a2f21246f6b31e10bd5658b4a0192e279ca75cc47ae305ca2e3b4698859900e5d4f8fd3b0724784b741142fee9f1c4cde86a181e44555f97bd666c5e656d0c2616ecc3c2467f8213712814503c0cc5aa48e66007eb2c1b1330e93a9194a3cd66dd359fceb054bfe6c881f4497e37a8bac7b698a47e42403ae946e09e8ee43af3896f20f07c5320234d8f425bf5a38a92cd0eb445e250f12d8da7858468d7bbc699dfac7d160c0c71d4d70058a4a46c727990e29a57d3b36fe502e8ba4a91974e51bee90a61030ac4bba5160f92251e6895d6e7f8861584d329267a8179395f57968f3a5a414292a3f597b4f0b263b673443a5158e6164bfc2cad9db0954517740c500d8bd8524797d013bd30f16dac5aa5ad8be5c7374d0770f2b6eef9c65b2b68db1dcec208f6a57502eeab3d31146a84f43e014748aa40265fb4a11b39cd5ef89bcfbf4d64f952a560d9257e7d0075103fc07c02989d2f946919ed5cc579124c23cfa086c7fecc85dae3144566f2fd75637947e4317edca98c9c44eb012ef787e25d5aaa3ebeadc7d3ce53fd6be9a37dc146e93d2a600a1ad08ebf3039c23a8a8911ac5bee2f8cbfda1347296d92ff375f04d4046445955ac7780a30f0fb9582e13706b30fee6bf3d070f2c0119e3d42bea389aefa6c4d124288d2683eb072313406cf53aa1d03df7cd01f623e31166441dbca14ca48fd4a6bd1ee35e50462905d3ed2256135e044e36142905d2e15bb82de51a33848e1130672e9e86b9e236a7d88ee4b773c0ad53f994fcd2fed6255cef69ce9ea7e8e352dc2b409158ace51107c8553f87e10e94fe65ac969164c95f396e4f08a3e654c7c4f46f1cf32b3772286b72f10a95a85ed1dca067afd15b998e83a839c822cf7dc6368ad564cd7e662ae806c5c7ce2edfc7b7646afdf1761a00091b009d67c04243223b0f982009031939d58cf4dd1322f20babc05d41b20fa910cd866f16065fa6ba7eae6d46034d72db538b44b1e274f00f641d9bbb34c1b95b558f34ad7b2e46f0fd70b1517ac63af2fecdf2da9cc549e7e85e2c18d80e589f92044d79abb650138f72df4cae610cef1c6213c1dc45ab4769292677e0382f786a5e8c12af32dadabd437ab7fc4948d3f64ae0cf4963906051f06d4340a42761ef3c04a55314fb112891c8773f1902937df7c8e7415ea2e8517cf98def8b269629b9ff4aace86f07bafe0dd12aca38f6f4748220e88f9ad40a49e19d850f3184dfe7c282a5d3cdc1780519665e0c757aa438a32072fe677a0a9c1b0d1cc2463e5c916aca342a29d86a003fed7a3315f5e06b95c8bdcdd59b0a0c16ea23060ad9625f5fed24a4c1c7d803518203ef09b17c4d723873b590eb10eede449d3be1f11e6a790f49ab393fbf770d143a5a9763ff417a102ab71385c6bc0be82e8f34cec4a4cd9387a5b13deb8481d5c169291d5d75fd19764ceac2aa68a1d3c29eaf4c3561bb686e54c54f5778e37ea6f4a99aa968444b4fb64107dbd6264ee3e782e3c39c0fb1f471f1b6e43cf7905681111c9c900c429d2016f1340ba32fbc5cd5a4e021879c8dff7c8547a1c22292c27849ec3d180399e2fc990c8cdf698957af522a780293504fbe395bc42c18455d9d153c52a76fd59e68c99477dc3fc34e7644184b2186734f29a70b6248011e248a9c7de373795e3290d66ffc65094cb4a165fd8352e99082c144b7fd374e5d4b727dcb6df4074cf681612f88d5ac1c9173b2ea456f42b53aec1bc075bb5cabc723e7b7e639a7ee10629daabc68832e3b63b3639ca83a536eda4f945fdc15ec47c80a5bb982e0b67ab05dfd49c534e46a7af7a3cc8b04781d07697118aea520357a02d87a129ddd5f632a6df23417405f4ffe2add15bf7a95a73f778d28a1141ed980b0b576ab773e59d9141055d09fae20a321e90ab8f8ed34a56314575191c84bf206f3e364e23947e5ae6d19a35bc13be3a7794fc73673bcb9dd8644dbb2d22ba59d0a484bf6e0b00f29c8076cbd6cbf8d5141f8fb84d1af905b5dee1b58c5e2f33ce13263e515387a2404f0388c44bab4557c2e1f61ce394ad47ccd8fd384aa95d980a33a792a56cc8e999bbc5e8ed051648df099da19b7f96649ee34b9920c17eb8e65e2401db4f6b7dc82d81ff2057f7821b16dd217e9cd9ee9a9e3b64430431ff9656608280ae55bab4a001bf7212b69baa7a785774289604ecbc923ee1cf6451605ffb9090818574f5d4be00126986d52895b49169e23a17a076f72d8c24e3fa4ed40778d1a6dfb8375573049ec9e257e49fd50287c445e96e6173ac9cc7d181f028004e3afdf0e05e71af041158154c15b51b8a8889e5e91ebbf97045ce44cecc59e7e777a989004d527c235b6ef42acbc3cbde797944c21595eedce895c1e5e83961c9bc2e49bfe8daa772e69c215c37ec062619b7f1be72782fa048ea7f16d80c7015d6846d7b3e557e683d7d50ddc13f4893864b191bbb2e01afca40da40cfdc63843e34c704389b1822fd625620c15d83169c5c05900dda0fca98e8363eb9a109f62ee58c903f3f69757aa2ec771e3f5e8ca6dc1e392f9a74c8e74ec995ec2f39d06d8711135fbe75b96a0073bb458ba39a625c88e12ac081304e8dd7fa6f9776cabb348df0afd35aad58b26ebe8df41af52ddafcdd898619ff9544857a85fff780186798d24cbca81b4c0704aa4247b9e0c4c21f8bdab074f6a44eefc675f38b11cd2f59193a92b1ee70286c161ab3f3425b7f225b9a5ea469cb566a4b858337b16c1aca5a1f2f90d0e71ab4528167c83514026f8f3501e73c3216fb5f82760f9a94749ec348a824436e836204035b63bbd1745cd1c8f9829112974df55280ad439478e7a99286f4dd989f64e9c078197e8d33ea95f5ee17664231306956ffaee69e3e9c4493869e5b75de400920afbdfd9adc2d49792c77a41ec83ae6bab5d203f96fc5b7e4f57351cdfd87a89f89d0d55003fbb0069b47a67ad8c95a19699d8ed9cdca410ebcbfb198361fe3113cc8f5579523289edb47ada19aa20514ee76ab937395a17d9b359c025bd02ff4fe476ba8be6c858edefb99eaa05864fa3de84a625a37055098b097503b14085c3a84f4f40746f98021c03e135422bafa223cd4f93b3759a11d533323adbe5eeb6a95cf75a1f428bb92cc2d98b8aca48a91b5f33314f2cdf0d406089457631114ae0088147a6dbd8f42186a01a3422e5dfb32eb655a849a24452cddf016b219c92e5f16cce93afd4f7153ed635a854d232241c5acc6f3d360ad510df2638d68555d15c89e9ffd0eccb336e745e4e51805a0c59471f8575baef794a5217f960c15f359584f128b70d5f6953d92983e4774f30e0f0a2718244b1ece4518d1098ab79c8029eadf5dd81b1e774899ce74c9941b32f7dad4355267f840b2408e11c044737b1d87b1acc54bf2541cdadbe1bc4f3edeb4f2c9d1cc34048865aa5e6badf0add84a96eb3b61d5e1c90f15383573afd2f540398207e6dceadf18f08212a0af05175aafe608b0efcb0cf877b928344ed2eaae271e7430e563be08349d62eefc34728ab54290cd7e75daba47741dd914afbfddb77d939850312088926db96cd2514d8e5a87b61ee8c8aee8346a52479cf0efbb2187335a1cd0524af827bd06b4eb6755d80c4628e557e99324edc31fee54e7ba3d3d5345a6f0f6956aa7f8f863795ca718ceca20553188b74c6f64f88cb346fdd126bc1df7dac43ddcf7820ecf8e718b32f4bd0e0262850076494a508a56832e687723e15eb979fd26d9d795794208cdc4082dbe8edfac6f7a8b64cc861677748d4d6991bacf44221a5274813610042ec8fe79d8678bab033e63b875179e2ca208613c4a1e85935145351b46b068d84ce55caa96b2149870b3a287379f25b0aade4597865c25671f4457d91d22964e836c9394030fd0fd98a89d025d2cd47ed4e4fc57e1563f0d3ae55b8c7a03a994b3e4fe6723ca107f43ecc518b38f0f2636b981e1672c4c0bd285f2c94da222c0555d25bfeeece90deb03a4cc47a87adeaa6acaca470cfb507dea880ee7cdfeed0c349afad287cf6b0838bcc656f3a654b2019d58ee65721f88ce0e792e26dbda03d71c240b9f5bb837985244a52101541e5236d82dbb6360777403b19fbda01f21be5585f0949590cfd20bf1dd364ee67ab62b63dca62384cddf10878abfdf7eb68708ce4f98500ce6ca58a9f984442f0e55d112b4e725c0b3e447fe6011a7b807815639576895de2d1fba0ebf61f360b3211abf028ef2d6d90ec562dbab1a33385c8b1ae378a03231fb2614284c015b414d3e5fd807983697f7043b02faf51f15c0106e2dd31f3e22632adf3c5d08e9de35ecd5440e99396fc60f65c7b8a669d62cc242c1323934838bae2718109cd0e763d15695429ae142886683b88c1af593ed0b9838bce7a597f1f86113877ddc9479c8335b13a857fd65f21998a83124af49b7bc41b7146a53f32046162f06970b9b0a6640ebe196b05f4569098098673c1a986fbd759506956547239ff4a55a5c5f119b3ce19b2b0b67db04655692e5ff49804bb90e3edac13d4419143e06dd4fed4316b61a5c8dd9ee4c576977f5cf61f302ef25176c36470d2ea878c694c6108eb5379810e282f506f75f88016ab134cb4ec94de23b5251646391e8e2129eb075c61cc5a2ccc25c946fb74a484020143fb706b753b29b74fbaf79529127a717770c6a8cb3666073578e618fa53545cf2ae07387689719fd125d3704ed7951381bb4489ee6995878db64bb59ae6f104d7b07d46676403399df8ac3b08", 0x1000}}, 0x1006) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000001700)=0xa, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000001780)={0x7, 0x0, 0xfffffffb}, 0x10) 49.068170659s ago: executing program 2 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000019000100000000000200000080200040fd04080500", @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x58042, 0x26) sendfile(r2, r2, 0x0, 0x18800) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r2) 49.053916274s ago: executing program 2 (id=155): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x27e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0x90, "", [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0x3ffd, 0x0, 0x1, {0x22, 0x147}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x5, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x10, 0x3}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x2, 0xb2, 0x40, 0x6}, 0x244, &(0x7f0000000b00)={0x5, 0xf, 0x244, 0x5, [@generic={0xa2, 0x10, 0x1, "0c570a8ddfa42bd3b681921c52126c564c0db1748390596cf0eb3d5b19dc2a711c62ba2c934616b2653b16618f060470d3dbc5e0c4760feaf553df9effe7c797d7eac1a3238a634e29a7d93a03716ab1cb9a7310a1144d9a3925c3840936994b97dce57874e80526a7d270cdef5801ed04d3cd5a44bd3823e785e89b6ebcfed2f6d06e841210e8a7c164d2ea3d2956deabc2877dd5ea368ff395183c445d37"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf0, 0x5, 0xb}, @generic={0xc2, 0x10, 0xa, "9c9865ae1dfe7fb5a853eadf0c9382c5e6c9fab6d2640a03d63e8ecd3b8b447cb98c8b5f1b0d7286dec8263ed2f6ce05fa0060ebcbbef2a96af52b74989c17786e40c33ca6f5b6ae1496507c0617dd49ff4ae04ff7a912a02e8f74bafedc7da79c1876033b6a5b79c1e5d6c471be36ec25bf961a812d3618a347a3aba5a1daa9502d1bc0120d0d5aa69474c84c895e189bc560c8f5b8e813e58d730907d20b765da2f16e26376b2f08167a268ba7e09c3bff86e49034d93ab6ee2c0f1b87a9"}, @generic={0xca, 0x10, 0xa, "5148a84d1307b1a7429bb0053dc2da9ff27d9dfde80c677e963f8561a961c8b3f419f557c0a8dbc98222ada57f5037e263ffae25a2154d8b0f94ad5ad4f1d83ddaca586ca9ce9f64e99e2a9d6be1033d51954e49a20647e43fe63324928637f8779eaab269a5d9fbd2284bf6b53d5292196adcd02e10c55c66872e496fa2c06dacd5980e3f6ee25a9e81d740721ba7b7b4ae085f16b5d4455e34208e6eb14b5e0e9852c5e6f8f51ff1b61a8a14780478eacb6ac8ead0c8c8c3cbcaea6ad002bf526ab5b3faf7b3"}]}, 0x2, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000f80)={0x24, &(0x7f0000000e40)={0x40, 0x24, 0x56, {0x56, 0x4, "e4dce297ec3ad3b2dc647a17092eefdd11fe756983bfc563d50e380e133e2759dedab6fabad179bf46d1efcb835a7f4299abe4961fb784b52ce5954b6ce1d59feaecdf35d8dbfcbd8490e7b14e62d5f329b67949"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000f00)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0x33711ea0c6f0fae1}, @main=@item_012={0x1, 0x0, 0x8, "f1"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000f40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7f, 0x1, {0x22, 0x745}}}}, &(0x7f00000011c0)={0x2c, &(0x7f0000000fc0)={0x20, 0x11, 0xee, "12626de5f0e813abebfb6ae1e626df7b672a1f0e80ad994d52742029fbf736e7865e709b5d5f0798e86ba9389a2b282fd760d3bc4f354c261f01713d71d97d4179a521ea8b56b2f2a99ae19fcec3c42cb5b628c2ac2a4796294c960e2cc18ff11d2d7d66ad5ffec3ffc5fdc2f842d58c30d2bd40d1fdd916a790c05a893405b1d7ed46c0f3d8ef04b34fd034618f4256dfe4034450b15ae1d3ff80b45f4be7ed39d153de497217cf478f2209fc32e4184cabe5cda831f955dfa6bdf855927bcc6be4bcfc16ba64dcfc7fd19715854d1b1727811aefc0bacd39208af7083a7b9117adf2c6d83a226c3b98588f18de"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000140)={0x20, 0x1, 0x12, "afcbe44fcec96063995056f0963c4d0048f6"}, &(0x7f0000001180)={0x20, 0x3, 0x1, 0x1}}) 48.44939617s ago: executing program 2 (id=164): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="a0a74d2ec081cb9e218d33dd71819454c324d4ea51609e8f54fc472ac2d45bb4f30e83c7f7842f6959279371b98959b10f98e6619045ea680165a4eb7a0069ed6264ae3fef4d89d1ffe0ff42985c064c0205c659d2e1af335c254e8dd0b26a2212f3354d7b647fde02d199ab4ca654c6a41d62a81beae1fc45a1986a7b2af095f297c6d410ea1f92eb57a1473c4ec167d08426ff2dd32285eb439632036f32eaebed21285fdb40b8bebf84456fc19ff64e9589ec92dc4a55b2c705e1cf", 0xbd}, {&(0x7f0000000180)="0f4b86e35fa41365742e01e865205205c4c4a7b892959d1d219d94faf81b0207bae505ae1a52d9c6c4b17420486b300cad447ab3659a0a6ba6bfca7177780c65", 0x40}, {&(0x7f0000000300)="b9d861dda8376d507a5411aed368754310223491fa4715884c586e3bed1d200acef2240c806b64c76c80036c4d4d4ded478b94163b9fe8b081926cacf4ffa48b9c29a277afd80b5b0700915cfa285ba021a3a2d10af6e61af449275c33ecfd31c10f53dfdc9ec6646c7077057b9f2896c0c98ce6b69f0023999c184f499ffd6d6598bb57", 0x84}, {&(0x7f0000000200)="4fdeab15dff9cd9313ddab4b40f356177df421e08563ef6d67db83900ba7e542193aa6bf1d02dfe03eb5105d5c1adebc928119f37c002a24019af35ea2e96984dba20f273da20bc873d728e61ca4fc1d", 0x50}], 0x4, 0xb, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r2, &(0x7f00000009c0)="3180", 0x2) (async) mmap(0x0, 0x0, 0x3, 0x30, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0xfffffffd) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010601000000faffffffffffffff0000000000000000000000001000032073797a6b616c6c65723000001800192008000100767266000c0002"], 0x48}}, 0x0) (async) r4 = syz_open_dev$media(&(0x7f0000000000), 0xffddfffe, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000440)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0xfffffffffffffddb, 0x0, 0xffffffffffffffff, 0xfffffffffffffd66, 0x0, 0x0, 0x34, 0x0, 0x0}) (async) sendmmsg(r3, &(0x7f0000000740), 0x4000000000001f2, 0xfc) (async) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000800)={0x5f6f}, 0x30, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xe) (async, rerun: 64) r6 = landlock_create_ruleset(&(0x7f0000000840)={0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x0) (rerun: 64) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000880), 0x0, 0x2) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="54000000020601020000000000000000f4000000050004000100000005000100070008000500010007000000050005000a000000140007800800114000000000080012400000ffff0c000300686173683a697000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x20) (rerun: 32) 48.347938866s ago: executing program 2 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) sendto(0xffffffffffffffff, &(0x7f0000000000)="3e19e41e108e444f2acb4b047918a8a1a96727671d5fe0189991cf3d58a97e3abf4c238a683c466b5bf7e6c3450b2622c13ab7355d3888f13431ba82ea2a749c5371ffcdb14129598766aa2574fee9900ec3bf3178e9f1fb32c28c13afd469e1feceee534be07f6d3f5f77de490f38e87f9955fdd98708704ee6f1f35dbc6ce5c4765278d427af967d8c1cf9b3f169dc8f59fbf57bb6a5a1f4745cba37378ab94212b930f5c18493cc95e6d35a630f7d3b1a1f68c71f8d6eb16d991d40bff533e82b5de9a0511c5dec8bbd03ade9fb5958e42ee168", 0xd5, 0x40000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000580)={0x0}) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x80000106}, 0x1c) 46.649036041s ago: executing program 1 (id=177): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 46.580682194s ago: executing program 1 (id=178): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='A\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000002a80)='A\x00', 0x200) 46.560593864s ago: executing program 1 (id=179): unshare(0x28000600) (async, rerun: 64) r0 = socket(0x2000000000000021, 0x2, 0x2) (rerun: 64) shutdown(r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113f00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x73}}, @fwd={0x10}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000001580)=""/75, 0x78, 0x4b, 0x0, 0x2}, 0x28) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x128) write(r3, &(0x7f0000001700)='3', 0x4e) symlinkat(&(0x7f0000001740)='./proc\x00', r3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='.\x00', 0x0, 0x4018, r1}, 0x18) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7009, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x3, 0x7c, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001880)=[0x1, r3, r4, 0xffffffffffffffff, r5, r6], 0x0, 0x10, 0x7ff}, 0x94) (rerun: 32) 46.423106161s ago: executing program 1 (id=182): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1208002, &(0x7f0000000480)={[{@acl}, {@jqfmt_vfsold}, {@nodelalloc}, {@quota}, {@dioread_nolock}, {@user_xattr}, {@user_xattr}, {@noauto_da_alloc}]}, 0x1, 0x5e4, &(0x7f0000000bc0)="$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") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e21, @private=0xa010100}}) r2 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f0000000500)=""/74, 0x4a) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x2, &(0x7f0000000580)=[&(0x7f00000005c0)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000000640)=[{}, {}], 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r6 = syz_io_uring_setup(0x7c14, &(0x7f0000000a00)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000b40)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) shutdown(r3, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lseek(r0, 0x5, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000980)={r3, 0x2}) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100000000000000000010000a"], 0x100}}, 0x0) syz_extract_tcp_res(&(0x7f0000000680)={0x41424344, 0x41424344}, 0x3, 0x5) syz_emit_ethernet(0x249, &(0x7f00000006c0)={@multicast, @remote, @val={@void, {0x8100, 0x3}}, {@ipv6={0x86dd, @tcp={0xf, 0x6, "1c1239", 0x20f, 0x6, 0x1, @mcast2, @mcast2, {[@fragment={0x2f, 0x0, 0x3, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x0, 0x13, '\x00', [@generic={0x2, 0x7f, "2cf815eb97a3074c289163b144b9c1345b02740579a008e43170304f727c46e0e3fb022737e0834ff41073a6a790362d7d7a6f41ee4d65d93127066c2d7f020dbb251a0344f937b7cd6221064b720b2249711d5de8adaf5dc73dfd558668002769e16964b7456d2e9fcd99222c24771a41978441ad04e8487ab6e0f313ac06"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x6, 0x5, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x32, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @srh={0x0, 0x4, 0x4, 0x2, 0xfd, 0x70, 0x7, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x28}]}, @dstopts={0x29, 0x8, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x4, 0xd7e, 0x80000000, 0x1, 0x8, 0x480000000000000]}}, @ra={0x5, 0x2, 0x200}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x32}, @dstopts={0x2f, 0x3, '\x00', [@pad1, @ra, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1]}, @fragment={0x0, 0x0, 0x5e, 0x1, 0x0, 0x12, 0x66}], {{0x4e24, 0x4e24, 0x41424344, r11, 0x1, 0x0, 0xf, 0x10, 0xa9, 0x0, 0x8, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x11, 0xf989, "043fc3a4989f303aad11176365"}, @timestamp={0x8, 0xa, 0x8, 0x2}, @mss={0x2, 0x4, 0x6}]}}, {"7d9b4643bde05b8668f7a9fe4230cca9bf3c05"}}}}}}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 45.551469195s ago: executing program 1 (id=186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) (async) r4 = openat$cuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000004c0)={0x28}, 0x28) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xec, r3, 0xe701ac47a3d23ecd, 0x0, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}}, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x10, 0xb0f, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async) set_mempolicy(0x6005, &(0x7f00000001c0)=0xfffffffffffffffd, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x64008000) 40.935455905s ago: executing program 0 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000280)={0x3e, 0x17, 0x2, {0x35, './sys/bus/usb/devices/usb2/power/autosuspend_delay_ms'}}, 0x3e) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x81, 0x797, &(0x7f0000000940)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x180) (async) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001140)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f0000005180)="$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") (async) syz_mount_image$ext4(&(0x7f0000005d40)='ext4\x00', &(0x7f0000005d80)='./bus\x00', 0xe, &(0x7f0000005dc0)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000005e00)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") syz_mount_image$fuse(0x0, &(0x7f0000006280)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000062c0)='./bus\x00', &(0x7f0000006300), 0x8, &(0x7f0000006340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000006380)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f00000063c0)='./file1\x00', 0x42, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f00000003c0)='7', 0x1) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000c00000/0x2000)=nil, &(0x7f0000c01000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e59000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e43000/0x2000)=nil, &(0x7f0000d12000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000480)="81", 0x1}, 0x68) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/4113, 0x1011}], 0x1}, 0x4453d}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000003880)=""/67, 0x43}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000003980)=""/95, 0x5f}, {&(0x7f0000003a00)=""/129, 0x81}, {&(0x7f0000003ac0)=""/156, 0x9c}, {&(0x7f0000003bc0)=""/239, 0xef}, {&(0x7f0000003cc0)=""/179, 0xb3}, {&(0x7f0000003d80)=""/216, 0xd8}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x9}, 0x8}], 0x3, 0x40002000, 0x0) 40.868212762s ago: executing program 1 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f7570000000000800024000000000180003000400bd"], 0xe8}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000a, 0x20010, r1, 0x35c30000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f0000000340), 0xfc, 0x56f, &(0x7f0000000380)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000980)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000ac0), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f0000000b00), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) mq_open(&(0x7f0000000b80)='\x02\x00\xf0\xdc', 0xa167ad740cb9a351, 0x3c, 0x0) (async) pwrite64(r4, &(0x7f0000000bc0)='2', 0xfdef, 0x10c6b) r8 = syz_open_procfs(0x0, &(0x7f0000000c00)='clear_refs\x00') (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000c40)={0x0, 0x6}, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="01000000000000000000070000", @ANYBLOB="0c0099000400000019000000140004006e696376663000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000080)='\x00\x00', 0x0, 0x8ce2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 40.844290562s ago: executing program 32 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000280)={0x3e, 0x17, 0x2, {0x35, './sys/bus/usb/devices/usb2/power/autosuspend_delay_ms'}}, 0x3e) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x81, 0x797, &(0x7f0000000940)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x180) (async) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001140)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f0000005180)="$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") (async) syz_mount_image$ext4(&(0x7f0000005d40)='ext4\x00', &(0x7f0000005d80)='./bus\x00', 0xe, &(0x7f0000005dc0)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000005e00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000006280)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000062c0)='./bus\x00', &(0x7f0000006300), 0x8, &(0x7f0000006340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000006380)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f00000063c0)='./file1\x00', 0x42, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f00000003c0)='7', 0x1) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000c00000/0x2000)=nil, &(0x7f0000c01000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e59000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e43000/0x2000)=nil, &(0x7f0000d12000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000480)="81", 0x1}, 0x68) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/4113, 0x1011}], 0x1}, 0x4453d}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000003880)=""/67, 0x43}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000003980)=""/95, 0x5f}, {&(0x7f0000003a00)=""/129, 0x81}, {&(0x7f0000003ac0)=""/156, 0x9c}, {&(0x7f0000003bc0)=""/239, 0xef}, {&(0x7f0000003cc0)=""/179, 0xb3}, {&(0x7f0000003d80)=""/216, 0xd8}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x9}, 0x8}], 0x3, 0x40002000, 0x0) 40.799699973s ago: executing program 33 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f7570000000000800024000000000180003000400bd"], 0xe8}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000a, 0x20010, r1, 0x35c30000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f0000000340), 0xfc, 0x56f, &(0x7f0000000380)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000980)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000ac0), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f0000000b00), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) mq_open(&(0x7f0000000b80)='\x02\x00\xf0\xdc', 0xa167ad740cb9a351, 0x3c, 0x0) (async) pwrite64(r4, &(0x7f0000000bc0)='2', 0xfdef, 0x10c6b) r8 = syz_open_procfs(0x0, &(0x7f0000000c00)='clear_refs\x00') (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000c40)={0x0, 0x6}, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="01000000000000000000070000", @ANYBLOB="0c0099000400000019000000140004006e696376663000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000080)='\x00\x00', 0x0, 0x8ce2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 33.354935957s ago: executing program 34 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) sendto(0xffffffffffffffff, &(0x7f0000000000)="3e19e41e108e444f2acb4b047918a8a1a96727671d5fe0189991cf3d58a97e3abf4c238a683c466b5bf7e6c3450b2622c13ab7355d3888f13431ba82ea2a749c5371ffcdb14129598766aa2574fee9900ec3bf3178e9f1fb32c28c13afd469e1feceee534be07f6d3f5f77de490f38e87f9955fdd98708704ee6f1f35dbc6ce5c4765278d427af967d8c1cf9b3f169dc8f59fbf57bb6a5a1f4745cba37378ab94212b930f5c18493cc95e6d35a630f7d3b1a1f68c71f8d6eb16d991d40bff533e82b5de9a0511c5dec8bbd03ade9fb5958e42ee168", 0xd5, 0x40000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000580)={0x0}) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x80000106}, 0x1c) 31.690520662s ago: executing program 6 (id=299): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2a, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x19, 0xfffffff5, 0x9, 0x7fffffff, r0}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r4, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}]}]}, 0x34}}, 0x20000080) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r6, 0x13, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4400c020}, 0x40800) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r12, r9, 0x25, 0x0, @val=@tcx={@void, @value=r12}}, 0x1c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0xfff, 0x3, {{0x35, 0x4, 0x2, 0x2, 0xd4, 0xfffc, 0x74d, 0x3, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x1b, 0x4b, [@private=0xa010100, @local, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x89, 0x12, "0f5225b5a6a22476ac910bfab1d06268"}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x4, "19d5"}, @ssrr={0x89, 0x1f, 0x87, [@multicast2, @broadcast, @multicast2, @private=0xa010102, @remote, @multicast1, @remote]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x6}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0xad, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@local, 0x3}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@local, 0x26}, {@empty, 0x80000001}, {@remote, 0x4}]}, @rr={0x7, 0x17, 0x73, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0xbf, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x3d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f00000001c0)={0x9, {0x7, 0x0, 0x7f1, 0x4bb}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000013c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f00000011c0)={0x188, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x74, 0x5, "befbc304f2fb5a43c451be64e4c77c78fc7cfd77e1489185ccbeef6fa040b944e11f2b86c1dafde8cfb6513c301b9dfa66d9f5f1b3029c2de40517ef3e3d6d28c439268847e4e2d012858c6785bfc99e143a054d8c6765a2a098ea7316914ce3fa46544176b983e896c062ad40759310"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40400d4}, 0x40) 31.641838611s ago: executing program 6 (id=301): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x8, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000000180)={0x6, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./proc\x00', 0x20c0008, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write$binfmt_register(r5, &(0x7f0000002180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '{\\', 0x3a, 'multiq\x00', 0x3a, './proc', 0x3a, [0x4f]}, 0x30) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000900fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/uevent_seqnum', 0x4000, 0x80) recvmmsg$unix(r7, &(0x7f0000002040)=[{{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001140)=""/93, 0x5d}, {&(0x7f00000011c0)=""/39, 0x27}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/198, 0xc6}], 0x4, &(0x7f00000013c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/238, 0xee}, {&(0x7f00000015c0)=""/3, 0x3}, {&(0x7f0000001600)=""/14, 0xe}, {&(0x7f0000001640)=""/76, 0x4c}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/225, 0xe1}], 0x2, &(0x7f0000001940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f0000001b80)=""/67, 0x43}, {&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/189, 0xbd}, {&(0x7f0000001d00)=""/246, 0xf6}, {&(0x7f0000001e00)=""/21, 0x15}, {&(0x7f0000001e40)=""/102, 0x66}, {&(0x7f0000001ec0)=""/109, 0x6d}], 0x8, &(0x7f0000001fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4, 0x40010001, &(0x7f0000002140)={0x77359400}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000480)={0x6, 0x1, 0x9572, 0x6, 0xff}) write(r5, &(0x7f0000000000)='7', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r8) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3dc82abd7000fbdbdf250400fc00140001800d0001007564703a73797a58d161ac"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) open$dir(0x0, 0x20080, 0xf0) r10 = openat$cgroup(r5, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r10, 0x80047213, &(0x7f0000000500)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000002c0)={0x0, 0x0}, 0x10) 31.532490008s ago: executing program 6 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a0001000000000000f8ff0081008000000000df00000000140002"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, r2, 0x0, 0x20fffe82) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, 0x3e, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@empty=0x4000d00}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 30.686316168s ago: executing program 6 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="260000006e7329d8ddc5d70300e2ff0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000540)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000006c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c40)='./sys\x00', &(0x7f0000000c80)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000d00)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000d40)='serial8250', 0xa) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="68020000000501040000000000000000020000075402010001000000f9ffffff020a400004000100"], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) ioctl$SIOCSIFHWADDR(r5, 0x8923, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000e40)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000e80)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) 29.764836536s ago: executing program 6 (id=317): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80, 0x80000) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x1) accept4(r0, 0x0, 0x0, 0x0) 29.439110365s ago: executing program 6 (id=318): set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 29.412644933s ago: executing program 35 (id=318): set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 12.844125052s ago: executing program 8 (id=603): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000340)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x14) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000380)={0x0, 0xffffffffffffff2d, 0x2, 0x1}) r3 = memfd_create(&(0x7f0000000200)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000300)={r3, 0x0, 0x0, 0x8000}) 12.734771642s ago: executing program 8 (id=606): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\x92\x1f\xed\xec\x98\x13\t'}]}, 0x13) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f0000000240)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42, 0x12) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) fcntl$setflags(r0, 0x2, 0x1) 12.671873789s ago: executing program 8 (id=607): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x1) (async) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_USERNS(r1, 0x8008b70d, 0xf8ffffffffff0f00) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0xd, r3, 0x20}, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10}, 0x40) 12.651342122s ago: executing program 8 (id=608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./sys_mnt\x00', 0x1008480, &(0x7f0000000180), 0x4, 0x4f0, &(0x7f0000000700)="$eJzs3U9vVF8ZAOD3Tju0vzIwoCzUqCCiaAjTP0BDcCFsNIaQGIkrF1DboWk6wzSdFmllUZbuTSRxpR/BnQsTVi7cudOdG1yYoBINNXEx5t65tKXtdKq0Hek8T3J77znnMu85A+ecuQeGE0DfuhARaxFxIiIeRkQ5z0/yI263j/S+t2+eTa+/eTadRKt1/29JVp7mxZZfkzqZv+ZwRHzv2xE/THbGba6szk/VatXFPD26VF8Yba6sXp0r5DkTk+OTYzev3ZjYf2MG9y4+X//V62/N3f3+b379hVe/X/v6j9NqlX5yKivb2o6D1G56MUrbqnn3MIL1yGD+54ePT9rbPhURF7P+X46Bbp0IAPjotVrlaJW3pgGA4y59/i9FUqjkawGlKBQqlfYa3rkYKdQazaUr5cby45nI1rDORLHwaK5WHcvXCs9EMUnT49n1ZnpiW/paRJyNiJ8OfZKlK9ON2kwvP/gAQB87uW3+/+dQe/4HAI654V5XAAA4cuZ/AOg/5n8A6D//xfzv24EAcEx4/geA/mP+B4D+03X+f3409QAAjsR3791Lj9Z6/v9fzzxZWf5G6cnVmWpzvlJfnq5MNxYXKrONxmytWplutbq9Xq3RWBi/vpFsrqw+qDeWHy89mKtPzVYfVIuH3B4AoLuz51/+MYmItVufZEds2cvBXA3HW6HXFQB6ZqDXFQB6xvd5oH/t4xnfMgAcc7ts0fuejv9E6IXNX+Fjdfmz1v+hX1n/h/71v63/f/PA6wEcPev/0L9arcSe/wDQZ6zxAx/09/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp0rZkRQq2V7ga+nPQqUScSoizkQxeTRXq45FxOmI+MNQcShNj/e60gDAByr8Jcn3/7pcvlTaXnoi+ddQdo6IH/38/s+eTi0tLY6n+X/fyF96kedPnOhFAwCArW7vzGrP0/l5y4P82zfPpt8dR1nF13fam4umcdfzo10yGIPZeTiKETHyjyRPt6WfVwYOIP7a84j4zGb7n26JUMrWQNo7n26Pn8Y+dQjxN9//7fEL78UvZGXpuZi9F58+gLpAv3l5pz1O5n0v7WJ5/yvEhey8e/8fzkaoD/du/FvfMf4VNsa/gR3xk6zPX9hI712T19d/+50dma1yu+x5xOcGd4ufbMRPOoy/l/bZxj99/osXO5W1fhFxOXaP31bPhtnRpfrCaHNl9epcfWq2Olt9PDExOT45dvPajYnRbI26/fN3u8X4660rpzvFT9s/0iH+cJf2f2Wf7f/lvx/+4Et7xP/al/P4723GX4hze8RPb/3qPuNPjdzuuH13Gn+mQ/u7/f5f2Wf8V39endnnrQDAEWiurM5P1WrVxS4X6WfNbve4+P+7KI9EdLsn1rrf46LfLno9MgGHbbPT97omAAAAAAAAAAAAAABAJ82V1fmhONyvE/W6jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxf/wkAAP//6drI2g==") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x404, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c000b553f5274dac3ad98b60dc8f19401a283e958b53f8271222955a0086050590dd7109e334ca3fc336427b04561f1fd4b9656e6c2319db77b26"]) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c2000002ffffffffffff0800451c001400e400007c06907864010101e0000001fdfc4e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01000490780508"], 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 12.487038426s ago: executing program 8 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0xce}, @exit], &(0x7f00000003c0)='GPL\x00', 0x8, 0x6c, &(0x7f0000000400)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/202, 0xca) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000580)="e94ed03f8d6845553fe8729c4665ec07904b4ad6d14f902e641186ed82509a68448b37d5942ad9cadec77f3c6984deb87e8663b3eee916740e6f6891bd803238791488009ca46cc56b6dff2d04997cec9bf32fff7512007b83fa35f3ea6e89d81d13a6ace8b6da57d9dc9d71055aa3b2182ee8f7bc269c83dba33206b5e8b83f7b2a56afcfb6914dd1bf21be929423d49ecd92b7dd67d2339ff9100dd7821c5f1b3563fb7114d5377e9ecd9f09c4e6b58b6d3f12d8567e0b727c3ad9fabfa782ef7183cfb8d38cb22e5f25cc32e0", 0xce}, {&(0x7f0000000680)="0c8e30f7be9e97f3dfddb243130097d51f3f1fbbc7baaf99859a7b44f8c520744b83f3b7916fbbaaa04ce15e0be18851689bba109a81072156a00f5156387f2a30ec5c0ad9eda5ee9ae1e07664f840cecbf6449f792ae4eb69f148addaec0fc252163db3b61a006d540204d388c41c9c23b5", 0x72}, {&(0x7f0000000700)="b98a508253118ebd6c509dce63bd7bb44e6bc7ee96d40e035740dd1fd072e0462c68a4be2398303d4cc35126f720b45ff5f8b52e15c168583812e87fa7e5d776dc9c4a75a3cd74429df359752f3d4cce06852db872de41257f00931586a5181d8b870643f961ecca9038b559347658b4914c69092cf585031826f38d8093743bc933775fa7e5101b0ef61bda8aa74cb5f5ef221ff72aa626ae2d52d36ddcdc3dca74ba2d7fbabdf81d6b66f4b1fdc4589aeb3d5b5c5c3101e8c04939518c2648fa3c0071d978df9948", 0xc9}], 0x3, 0x0, 0xffffff64, 0x6) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@index_on}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x145400, 0x64) 10.965361748s ago: executing program 8 (id=638): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8228, 0x2214}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpuacct'}]}, 0x9) 10.862200609s ago: executing program 36 (id=638): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8228, 0x2214}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpuacct'}]}, 0x9) 5.069712639s ago: executing program 5 (id=699): getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r0, 0xd1, "bddf6c969dca2ac262333ca033df52b7411c3234dcccd09ce08eb6b10c9d0141d90e466eecab612421db729f9cc95148d575ed79d35103a813123d13e01adab9deded4b77c567cff2a0cc357f64a8fff217f7b84a8ec5d94951bff0d127b2ba9b5af6ff8227ddf65993641479155e17dc6c8a936050e8458b6cb237aa0ec9287bd0dd3542d161a9f86436d5e8d02a9cc9753b159d7d3b68a897b1a282a1804140f871e9d1aa927ff8c77e5eaa694f4647364281672540b7270df4ccaeb36638cc597d4a492aa0ad426765f8998283fa54b"}, &(0x7f0000000280)=0xd9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fd3f00000000000009011c008500000011000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4.215074136s ago: executing program 5 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1484a8, &(0x7f0000000140)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x83) 4.0899697s ago: executing program 4 (id=715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x10160, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) r7 = syz_io_uring_setup(0x800f00, &(0x7f0000000300)={0x0, 0x3, 0x810, 0x0, 0x40053}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000740), 0x0, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000103d00001000000002000000010000000000a268aed93994a07932060000"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r11, 0xc008644e, &(0x7f0000000800)={0x1}) syz_emit_ethernet(0x6e, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800383a00fe8000000000000000000000000000bbfe8000000000000000000000000000a10100907817000000603707000000330000000000000000000000ffffe0000001fe8800000000000000000000000000012b00000000000000"], 0x0) sendmsg$rds(r6, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000980), 0x1, 0x0) rseq(&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x8277ba97fbbb0af0, &(0x7f0000000a40)="0bbb268dd6ffa80800030000000000000000210d000061052ddaecaaa8fa017242ba9380d4c2454c40fe000000d5679a6bd254b00dc1b23d6d80865774d79c8fa82cf4bc6f9c807bb7fc1bc84aec5eedf8d59a7380c844e21be7de57a337f978f62bb1b4bc0ef501aa1b598ec3756dcf561482", 0x73) 3.878371938s ago: executing program 5 (id=718): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100001003abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80210000000000001400030076657468315f766c616e00000000000008000400d4"], 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000002c0)) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200008, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000640)="$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") r2 = mmap$IORING_OFF_SQES(0x0, 0x2, 0xb, 0x1012, 0xffffffffffffffff, 0x10000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x20, 0x0, &(0x7f0000000a00)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000a40)=@IORING_OP_FUTEX_WAIT={0x33, 0x8, 0x0, 0xb5, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) 3.630217537s ago: executing program 5 (id=722): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x100, 0x7, 0xc000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x800, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x7ff, 0x2, 0x5, 0x7, 0x3}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={r3, 0x486b}, &(0x7f0000000340)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='(', 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x34, 0x13, 0x400, 0x5, 0x25dfdbf6, "", [@typed={0x7, 0x3, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x14, 0x3fff, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x8, 0x161, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x80}, 0x0) 3.39714827s ago: executing program 5 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000400), 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x11d, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/285], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000ac0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x4}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x207) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', @multicast}) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) write(r7, &(0x7f0000000b00)='0', 0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) 3.193214507s ago: executing program 4 (id=730): r0 = io_uring_setup(0x6ed6, &(0x7f0000000080)={0x0, 0xbf54, 0x1, 0x400000, 0x270}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) unshare(0x22020400) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x2) (async) setns(0xc9, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x20004000) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000100)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8b}, [@ldst={0x6}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0xfd96, &(0x7f00000004c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0xfffffffffffffd56, 0x10, &(0x7f0000000600), 0x1dd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060005000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.103810718s ago: executing program 3 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x5c, 0x2e, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff1, 0x4}, {0x9, 0xfff2}, {0xb, 0xa}}, [{0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x3859}, {0x8, 0xb, 0x5}, {0x8}]}, 0x5c}}, 0x800) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1c9d02, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) truncate(&(0x7f0000000200)='./file0/file0\x00', 0xffff) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)=0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0/file0\x00', 0xe, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r3, 0x0, 0x0, @void}, 0x10) (async, rerun: 32) ioctl$FICLONE(r2, 0x40049409, r3) (async, rerun: 32) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000400)={0x841, 0x8, 0x18}, 0x18) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x411480}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x62}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x400}}, './file0/file1\x00'}) setsockopt(r3, 0x6, 0x4, &(0x7f0000000600)="822bf1c50a08d41d5f4402c6d60bef1a4aa98948a8201fd146ff8f07bb8911ed2528738ef38b", 0x26) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) openat2(r3, &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)={0x9be158dc93f58493, 0x82, 0x28}, 0x18) (async) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x200448d0) (async) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x55) getpeername$unix(r9, &(0x7f0000000800)=@abs, &(0x7f0000000880)=0x6e) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000008c0)={0x9, 0x3, 0x2, 0x0, 0xf}) mount$9p_fd(0x0, &(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940), 0x10000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@ignoreqv}, {@version_L}, {@fscache}, {@debug={'debug', 0x3d, 0x4}}, {@mmap}, {@privport}, {@access_user}, {@posixacl}, {@fscache}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '/dev/autofs\x00'}}, {@appraise_type}]}}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "281ad85bf91c1b9359c1a5660b4f6d31"}, @NL80211_ATTR_PMKID={0x14, 0x55, "0c6e8c4257a91fb4f20d987502a19c92"}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x200000d1) (async) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000bc0), 0x4) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r9, 0xc0207511, &(0x7f0000000c00)={0x0, 0xffff, 0x0, 0x0, r4}) capset(&(0x7f0000000c80)={0x20080522, r11}, &(0x7f0000000cc0)={0x10000, 0x6, 0xc2f, 0x2, 0x8, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r2, 0x0, 0x72, 0xfc, &(0x7f0000000d00)="16e9511e0ba68d8f7bbbaa5854799daf3142e89abe2e60bf68459aca12b173eff64e48430dc13b35e91b4e00f6e1f12dd903fdc3120872c71301ca4813c609ea09b4b62804161fc528b663c3a7b60d85458e0ab3d6c0f94261bf7eab42e4eca4ef19d15aaa827bffa21e8a8e3b9a72b5361c", &(0x7f0000000d80)=""/252, 0x40, 0x0, 0xe1, 0x14, &(0x7f0000000e80)="8f3cb220ffbd072493b744bef8f4ca5955a317bc375be44b967dee7e693ce026cb5cf4778b5a381a338e256b0d4c0c1ffabcfabff2cef3cf26f7c2996830ef704bdaa3a760c24e34652912588224bb5b387b0581c1ee0531235993dff01f9244d38958911d41520ec92692caf60f7550b49ba4d93110d064ab68bdd82576b1854d474dc69d9b7c375fc5453efc8440296ebaeac163f43b9235f4152ea1b30399f48a7dc8d168f142c8a228df17fe47dd5057b22e2ceb94e003cf2697d312b096d34f6a41650bb014bbdc6f9bcb4b4eddbcd46ae1c0cdaed807ca825be269d2625d", &(0x7f0000000f80)="6f5e21914d593700ba7f5092e339fcc9197bcf74", 0x0, 0x0, 0x9}, 0x50) 3.0054736s ago: executing program 3 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2.919984988s ago: executing program 3 (id=737): unshare(0x6a060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000c80)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000dc0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0x0, 0x0}) r5 = syz_io_uring_setup(0x80, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000a40)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000000ac0), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000b00)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000b40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r10) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf250400000005000a0003000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, r9, 0x801, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) fchdir(r12) r13 = landlock_create_ruleset(&(0x7f0000000840)={0x7bea, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r13, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x101240, 0x10a) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='nfs\x00', 0x882, &(0x7f0000000680)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\x01\x0e\xd9\v\xda\xbfS\x16Ka\x03\x9a\xe4;\x86\xbf\xb6&\x96 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = fsopen(&(0x7f0000001480)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000018c0)='source\x00', &(0x7f0000001900)='127.0.0.1:/export\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001940)='addr\x00', &(0x7f0000001980)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000019c0)='mountproto\x00', &(0x7f0000001a00)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) splice(r3, &(0x7f00000001c0)=0xffffffffffffffef, r5, 0x0, 0x808, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async) r7 = socket(0x2, 0x80805, 0x0) getresuid(&(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='.\x00', 0x0, 0x10) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r9, r11, r12) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r7, {r8, r12}}, './proc/net/netfilter/nfnetlink_queue\x00'}) (async) openat(r10, &(0x7f0000003c00)='./file0\x00', 0x40, 0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000013c0)={@rand_addr, 0x0}, &(0x7f0000001400)=0x14) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000004000000000000000200000018460000010000000000000000000000df64e0fff0ffffff852000000420000001b5500000000000388a0100100000008520000002000000852000000500000085100000010000001861000001000000000000004b0000009500003139d1c800"], &(0x7f0000001680)='GPL\x00', 0x33, 0x7f, &(0x7f00000016c0)=""/127, 0x41100, 0x1b, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000001740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x5, 0xd, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000017c0)=[{0x5, 0x1, 0xd, 0x2}, {0x4, 0x5, 0x4, 0x6}, {0x4, 0x1, 0xb, 0x2}, {0x5, 0x4, 0x9}], 0x10, 0x1}, 0x94) read(r14, &(0x7f0000001480), 0x1000) lseek(r14, 0x5, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x1c, &(0x7f0000000280)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x4, 0x2, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x3, 0x0, 0x0, 0x5, 0x101}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x0, 0x3, 0x1, 0x9, 0x5, 0x6, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @ldst={0x2, 0x0, 0x6, 0x6, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000380)='GPL\x00', 0x7, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x4, '\x00', r13, 0x0, r14, 0x8, &(0x7f00000014c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x8, 0x7, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.731629825s ago: executing program 3 (id=741): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x1, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xff, 0x7}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000001880)={0x2020}, 0x2020) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x2, &(0x7f0000000a40)=[{0x20}, {0x6, 0x0, 0x0, 0x4}]}) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) close(0x3) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmmsg(r3, &(0x7f0000005800), 0x0, 0x4005) 2.724932179s ago: executing program 9 (id=742): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x11, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x40000, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 2.524498607s ago: executing program 4 (id=743): epoll_create1(0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) (async) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, 0x0, &(0x7f0000000340)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380), 0x0, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000d4) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000d4) 2.506848607s ago: executing program 9 (id=744): prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x8, 0x88}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000440)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000480)='c', 0x1a000, 0x40000b5, &(0x7f00000004c0)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getrlimit(0xa, &(0x7f0000000280)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000300)="34000000070000000000000340", 0xd) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x8, &(0x7f0000000040)) r5 = fsopen(&(0x7f0000000080)='ext2\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028005000a00000000000600080020000000"], 0x40}}, 0x20040844) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='resuid', &(0x7f0000000140)='%t\x00', 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x100000000) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) setxattr$security_capability(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), &(0x7f0000000640)=@v3={0x3000000, [{0x9, 0xc}, {0xfdb, 0x10001}]}, 0x18, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.45323237s ago: executing program 7 (id=745): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x10001, 0x80005, 0xfffffffc, 0x2}, {0x2, 0x0, 0xffffffff, 0x6}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x9}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'pim6reg1\x00', 0x2}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f0000000480)={{0x8, 0x8, &(0x7f0000000440)=[{0xd5, 0x0, 0x5}, {0xff, 0x0, 0x5b}, {0xfb, 0x0, 0xffff}, {0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x400000a}, {0xb4, 0x0, 0x7}, {0xf9, 0x0, 0x4}, {0x8, 0x0, 0x2}]}, 0x7, 0x6a, 0x8, 0x1, 0x0, 0x10003, 0x8000000004, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r3, 0xc010644a, &(0x7f0000000540)={r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000580)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000005c0)={0x1, r5, 0x1, 0x9, 0x2, 0xfffffffb, 0x3000, 0x400, 0x58}) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000400)=r3, 0x12) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x2bc1b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf25170000000c00061002000000020000050c5bbee2004ef2b6d713459a7a2414b1ebb295198b05756b726df574ce98d659e1d44742dae52803000000d0b5dfce892d9b929c9997ae07fb19ab121600000000"], 0x84}}, 0x4040084) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x10000, 0x4, 0x4, 0x1ff}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000840)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0xc, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000980)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1000}, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0xffffffffffffffff, 0x7}}, 0x48) 1.248611507s ago: executing program 9 (id=746): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x5) accept$inet(r0, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x4000010) socket$inet_sctp(0x2, 0x1, 0x84) (async) listen(r0, 0x5) (async) accept$inet(r0, 0x0, 0x0) (async) shutdown(r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x4000010) (async) 1.030457926s ago: executing program 7 (id=747): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) ioprio_get$pid(0x2, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/100, 0x64) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1f00, 0x101, 0x2, 0x2}) 991.804839ms ago: executing program 7 (id=748): setns(0xc9, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @private=0xa010102}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "9f0188ea598a5fb948b0b4887ab5d74bd948a4f56f9f366cb60398f3f6bfd935", 0x0, 0x7f, 0xffff}, 0x3c) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xffffff7e, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x358b49a4, 0x0, {{0x7, 0x4, 0x3, 0xd, 0x1c, 0x66, 0x0, 0xf, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0xc, [@local]}]}}}}}) recvfrom$packet(r2, &(0x7f0000000080)=""/23, 0x17, 0x100, &(0x7f0000000140)={0x11, 0x15, r3, 0x1, 0x8d, 0x6, @random="5932f243ec3f"}, 0x14) 676.695071ms ago: executing program 4 (id=749): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8001, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x181842) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x200002e6) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x2010000, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000440)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) 549.288643ms ago: executing program 3 (id=750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x28, 0x5, 0x0) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000280)='espintcp', 0x8) shutdown(r3, 0x0) recvmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="0800080006000600"], 0xfce) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r5, 0x15, 0x1, 0xcb, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) 463.527942ms ago: executing program 5 (id=751): r0 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000940)={0xe, {"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", 0x1040}}, 0x1006) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001980)=r2) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x902}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010060, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r7, &(0x7f0000000000)='3', 0x4e) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000000380)) sendmsg$AUDIT_SET(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080000}, 0x4004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @multicast}) 459.248342ms ago: executing program 4 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/174, 0xae}], 0x2}, 0x10000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/tomoyo/query\x00', 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x4, r1, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1f, 0x14, &(0x7f0000001c80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001d80)={r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000480)={0x6, 0x7, {0xffffffffffffffff, @struct={0x1, 0x900000}, 0x0, 0x8, 0x5, 0x5, 0xffffffffffffff00, 0xa86, 0x440, @struct={0x9, 0x1}, 0x4, 0x7f, [0xf, 0x3, 0x7, 0x9, 0x9, 0x200]}, {0x0, @usage=0xa, 0x0, 0xe25, 0x5, 0xff, 0x5, 0x200, 0x43, @struct={0xd6, 0x200}, 0x0, 0x0, [0x3ff, 0x5, 0xe000000000, 0x30, 0x8000000000000001, 0x8]}, {0x4934, @usage=0xfffffffffffff78e, 0x0, 0x56, 0x3, 0x0, 0x26, 0x3ff, 0x400, @usage=0xdcf, 0x6, 0x3, [0x7f, 0x5, 0x1, 0x6, 0x2, 0xe9]}, {0x401, 0xc, 0x6}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mount(0x0, &(0x7f0000000880)='./sys_sec\x00', &(0x7f00000008c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000940)=""/9, 0xfffffd87) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000009c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1002, 0x28011, r6, 0xffffffffffffc000) write$tun(r4, &(0x7f0000001ac0)=ANY=[], 0xffe) r7 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x0, 0x1a) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @auto="89621f3bfb8dc83c9ced9aff3740d1ae"}}) 456.36227ms ago: executing program 9 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x77}}}}, [@NL80211_ATTR_IE={0xd2, 0x2a, [@measure_req={0x26, 0xcc, {0x5, 0x9, 0x9, "5cf7acbf373bf15b321392aa903b112591d168ffbee011c22cb13d9058bde77876c2ba6c2db9a4e6ae517daa0446e54d0d1261d0913914157dec37d4a2ea88578e050016ad3f0853464516473f41ebca44cd4bca46138e720fb9ff2a853aec825db0433ca6fa31cc291f87407ae1b23af187f247a56ecf38784db950b25aae0e80086a32924963a829045f235c0942e92fdab4c6ec62730ce91fb4682eaa084e387f1ef1bedf0b9c0d8859f45545f701cd22226eeb1ae55a64faf6b250b6ffeeabc35a1cd5d36877e2"}}]}]}, 0xfc}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)="306663353a313232373a4c180577b4d218b867666d", 0x15) mount(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0, 0x0, &(0x7f0000001880)='u\x83rq\b\x00\x00\x00\x01\xb5\xe0\xdf\xc6\xd5\xd1F\x88\xadOY^\xa9\xcf\x8b\xff\xf9r\xf6\x95\xb2\x91\xdd$4\xd6\xf7F\x95\x85\xf6\xaa+\x9f\xb5\xf6BG\x8fl\x14-\xb2\x93\x9fx+1\xec\xd5\xd9\x9a/\xf2\x85\a\xfd\xa9cR\xac\xd2Z\xfa\xa7\xce\xc6\xf7Y\a\\\x05N\xd2\x94\x98\xcfi\xc6y\xb5\xea\x9d\x95i\xa2\xf1\xfe\xeb\x02\x0f\xdc\x98\xf8\xd7Tz\xd5\f\xcf\x033\xff\xdf\xa9Ti\xee!\x99MU\xb9ur \b\x00\x00\x00(\xe5_\\\xf5\xdb(\xd1L\xbbgM\xb3\x143x\"\x160\xaf\xda\x11{<\xe1\xc0\xd3\x9c\x89\x1b\xb6\xe4.\xab\x13\xc4\xfc\xab\xc7\x84W\x8apxm\f\x12\x03BaY\xf3\xa8BSRV\xd0\xf2g\xf4\xbc\x7fkN\xd9\xb4K3\xcd\xc49\xa9\xd1GB\xbe\x9ctf\xae\xc4)\xc0\xd3\xbc6\x15\xbe\xe3\xc2f\x15\x1e\xf0E:=/\x06\x95\xbd\x0e\xf8\xd6\xff\x87a\x1a\xb6\xecI&&c\xd3\x8aI\x80Q\x99o\x9dg\xca\xa3\xe05z4\xd3\x03\xcc\x05y\xec\xfc\xba\x8c\bA\xdb\xd9\xefn\bb\xf9C\xbb\x19\rQR\x0e\x1a\xd8m\x8d\x83\x8f\x9b\xf5\x8a\xe9\xa4\n\xc9W\x93\x8ak\xb0\xdc8\xa2Q\x1b\xdcr\xd3Lwtf(x\x93\x89M\xaf\xb5\xdf\x02I\"\x0f\xed\x94v\x88\xf1\x15\xfcNr\xf7*x^\x1a\xe1\x97,LN\xba\x05W{rO`j\x9em\x1aw\xd8:\x82\xf0M\x1f\nQ\xcbG\xcb\xb0\x9e\x15\xb1\xcdqy\b\xe8\x1a\x93\xe1U\xb3\xc3p{N\xd8D\x1fY\xed\x19\xafq\xd2\x05\x15\xa9\x92\x85!(\x9fn\xe6\xac\xb2\x1e\xa9\xfa\xad]\xd5\x13\xa0\x9c\xcc\xf6\x98\xe3\xa7$\xc9\xb7K\xee\n\v\xcazd&\xa8\xfd\x94\xa9\x83\xf2\xae\xf1\x06{\xf4X\x9a\x98\xbe?a?\xaa\x04z9Y\\\xcb\x8b\xb3\xf75\x13\xa0]L?\xc8\xe1\x1c\xb0\xec\xd15\x06I\xcc\x95\xa3\x9b\xaaH\xb6#\x10\xe5}\xb5\t\x009\xc3\xd7X8z\xd0JR\xc2\x1f\xc8\xf2MUI\xe4\xdak\x1b\xa6\xc5\x03\x1e@=C~c\xc2\n\xe5;\xae\xf9\xa7\'H\xff\xb2\x811{\xcd\xfe\xeb\xa5\x88\xa4\xe6J\a\x90>\x88\xa4I\xc1\xe7D\xd3\xe7\x14\x9d`\x80\x03\x8f\x01l\x8e\x8cr@\xd3)\xc6\xfc\nK]\xc88(\xf7\xce\xc0\xaf\xf0\a\xf50\xe4C_7o\xc4\xbe\xb4K\xdf]e\xf9\xa4<\xe8\x01-\xc1\xd2O\x85\xcffR\xa2\xd1\x14{\xdf\x0f\xd6\xb1\x19\xc2\x92\x03p\xc7\x1c\xa3~d\xa1\xe4XW\xc5:\xf9T;\xe0\x17\x1b\x1ee\x8c$]\xf4\x9d\x11\xca\x19_\x9f\x0e\x86\xb9\xd5\x1b\x10') syz_genetlink_get_family_id$smc(&(0x7f0000000140), r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x8c, &(0x7f0000000440)=""/140, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb6b1}, 0x94) 344.291781ms ago: executing program 7 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='comm', 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0xe, 0x6, 0x804, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000400)="dc8aa6898875", 0x0}, 0x20) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000480)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x1, 0x8cbd}, 0xb, 0x7, 0x8, 0x6, 0x20, 'syz0\x00', "6b6a665def8b7fe2902660959418ad2f08372f35d001fe7e5e420ecc4e05176b", "82f954d2f4f105e1b35f4172e1cfd197efc15f13e3e764464d7d7c670d5d7326", [{0x6, 0x6, {0x1, 0x5}}, {0x2e8, 0x3ff, {0x0, 0x9}}, {0x0, 0x7, {0x0, 0x8}}, {0x4, 0x5, {0x0, 0x8}}, {0x40, 0x3, {0x0, 0x120000}}, {0x2, 0x9, {0x2, 0x80000000}}, {0x6, 0x2, {0x3, 0x5}}, {0x7, 0x6, {0x2, 0x8}}, {0x7, 0x9, {0x3, 0x6}}, {0xf2fe, 0x200, {0x0, 0x2}}, {0x7, 0xb1b4, {0x1, 0x81}}, {0x7, 0x40, {0x1, 0x2}}, {0x7, 0xa, {0x2, 0x8}}, {0x5, 0x6, {0x2, 0xc}}, {0xfe01, 0x4, {0x2, 0x4}}, {0x2, 0x5, {0x0, 0x7}}, {0x8, 0x4, {0x0, 0xe698}}, {0xea, 0x5492, {0x3, 0x828}}, {0x1f27, 0x9, {0x3, 0xfffffffe}}, {0xfff, 0x10, {0x1, 0x2}}, {0x1, 0x1, {0x1, 0x7fff}}, {0x7fff, 0x7fff, {0x0, 0x8}}, {0x53, 0xb73f, {0x2, 0x7}}, {0x4, 0x1000, {0x3, 0x7}}, {0x8, 0x9, {0x0, 0x1}}, {0xe, 0x80, {0x2, 0x8}}, {0x5, 0x6, {0x0, 0x5}}, {0x2, 0x0, {0x2, 0x9}}, {0x8, 0x800, {0x3}}, {0x800, 0xcee, {0x0, 0x8}}, {0x6, 0x1, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0x2}}, {0x3eb, 0x2, {0x0, 0x6}}, {0xfd72, 0x1, {0x0, 0xc0c0}}, {0x2, 0x5, {0x0, 0x3}}, {0x7, 0x5, {0x1, 0x6}}, {0xfff8, 0x8e80, {0x1, 0x9}}, {0x7fff, 0x6, {0x0, 0x4}}, {0x7ff, 0xb15, {0x2, 0x2}}, {0x3, 0x5, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x4, 0x0, 0x0, 0xffff, 0x16, 'syz1\x00', "6c6942e35f8a387513113070384c6dc5a45656efa665d30a89e298392a41f339", "30cc3231b1cbd5558be8edb25c39a5699fc9a93eb328681d7937e7d3f0c06306", [{0x3, 0x2, {0x1, 0xa4c}}, {0xfff, 0x1, {0x0, 0x461}}, {0xfffd, 0x9e4a, {0x3, 0xa}}, {0xf520, 0xf, {0x0, 0x3}}, {0x46, 0xfffe, {0x1, 0x66}}, {0xef6, 0x6, {0x3, 0x3}}, {0x5, 0x9d, {0x2, 0x1}}, {0x1, 0x2, {0x2, 0x5a}}, {0x1, 0x11}, {0x1014, 0x4, {0x3}}, {0x2, 0x97, {0x2, 0x2b92}}, {0xfff8, 0xc000, {0x3, 0x7}}, {0x0, 0x585, {0x1, 0x2}}, {0x247f, 0xff, {0x2, 0xffffff86}}, {0x2, 0x80, {0x3, 0x6}}, {0x9, 0x1, {0x2, 0x74b}}, {0x3800, 0x7fff, {0x1, 0x6}}, {0x6582, 0x3a52, {0x3, 0xb9}}, {0x4, 0x3f, {0x3, 0xdcb1}}, {0xe, 0xff8a, {0x3, 0xc}}, {0x9d8d, 0x2, {0x3, 0xed}}, {0xb, 0x2, {0x0, 0x7}}, {0x1, 0x3, {0x1, 0x200}}, {0x6, 0x100, {0x2, 0x2}}, {0x4, 0x763b, {0x3, 0xbb1}}, {0x2, 0x4, {0x0, 0x8}}, {0x3, 0x0, {0x1, 0x7fffffff}}, {0xd, 0xf5b}, {0x7, 0x9, {0xe344b418c9f53f5e, 0xdd4}}, {0x6233, 0xff7f, {0x0, 0x8f}}, {0xff, 0x1, {0x0, 0x8}}, {0x1, 0x2, {0x3, 0x9}}, {0x4, 0x10, {0x0, 0x1000}}, {0xc, 0x3, {0x2, 0x5}}, {0x0, 0x7, {0x0, 0xe7}}, {0xa, 0x6, {0x1, 0x7}}, {0x1f9d, 0x5, {0x1, 0x90000000}}, {0x8, 0x81, {0x3, 0x8001}}, {0x3, 0x1, {0x2, 0xb}}, {0x7, 0xfffb, {0x1, 0x12c0000}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffffa}, 0x8, 0x9, 0x1, 0x8, 0xb, 'syz0\x00', "8c2bdaa8b5a88ec8c3238b9eab404378e2532eb373f36863e9e0783a11009ca8", "c23af23ab3dbb299b6c70e4bffad3c5aac760a68aa270cf80bcc84aeaf919003", [{0x1, 0x1, {0x2, 0x9}}, {0x10, 0x3, {0x3, 0x3}}, {0x400, 0xfffd}, {0x4, 0x2, {0x0, 0x9}}, {0x1000, 0x3, {0x2, 0x1}}, {0x6, 0x1ff, {0x2}}, {0xc, 0x2, {0x3, 0x1}}, {0x3, 0x200, {0x2, 0xa66c}}, {0x933, 0x7f, {0x2, 0x10000}}, {0x77, 0xb, {0x3, 0x3}}, {0x0, 0x4, {0x3, 0x4}}, {0x3, 0x66, {0x1, 0xe}}, {0x800, 0x90bf, {0x0, 0x80}}, {0xfff, 0x10, {0x3, 0xffffb74f}}, {0x48, 0x8, {0x2, 0x7fff}}, {0x20, 0x81, {0x1, 0xffff0000}}, {0x9b, 0x4, {0x2, 0xfffffffd}}, {0x9, 0xcea7, {0x1, 0xfffffffb}}, {0x3, 0x251, {0x1, 0x1}}, {0x8, 0x0, {0x3, 0x7ff}}, {0x2, 0x4, {0x1, 0x6}}, {0xff, 0x2, {0x1, 0xfc}}, {0x3, 0x3ff, {0x2, 0x2}}, {0x4, 0xf80, {0x2, 0x2429}}, {0x28b7, 0xb09, {0x3, 0x18}}, {0x2, 0x5, {0x0, 0xa29a}}, {0x8, 0x4, {0x0, 0x4}}, {0x1, 0x47d6, {0x0, 0xfd6d}}, {0x7f, 0xfff8, {0x3, 0x80}}, {0x54cf, 0x621, {0x2, 0x2}}, {0xe6, 0x1, {0x2, 0x7ff}}, {0x4, 0xd, {0x1, 0x1}}, {0x3, 0x3bb3, {0x2, 0x6}}, {0x101, 0x5, {0x2, 0x7ff}}, {0x401, 0x5205, {0x3, 0xffff87e8}}, {0x8000, 0x7, {0x0, 0x4}}, {0x50b2, 0x4bb, {0x1, 0x8}}, {0x2, 0xfffd, {0x0, 0x6}}, {0x1000, 0x6, {0x3}}, {0x4, 0x6, {0x1, 0x138d}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xfe, 0x9, 0x7fff, 0xc, 0x19, 'syz1\x00', "3b4e5e9d4031f375b198bd8cec2827ceb61ff926f28f8b64f639bc62ffeb0f4c", "d584921deaafa805a5f563f5204abf89bdec86100051fc689b1f6368e95a1bf9", [{0xa5a, 0x7f, {0x1, 0x4}}, {0x2, 0x7f, {0x3, 0x4}}, {0xffff, 0x6, {0x2, 0x2}}, {0x4040, 0x7f, {0x3, 0x4}}, {0x3, 0x43, {0x3, 0x3c}}, {0x2, 0x2, {0x2}}, {0x9, 0x40, {0x0, 0xc}}, {0x6, 0x81, {0x3, 0x4}}, {0x4, 0x1, {0x0, 0x8}}, {0x8001, 0x9, {0x0, 0xfffffff7}}, {0x9, 0x40, {0x2, 0xd7}}, {0x8, 0x5, {0x1, 0x5}}, {0xfffd, 0x4, {0x1, 0xb}}, {0xa1, 0x7, {0x3, 0x5}}, {0xf, 0x0, {0x2, 0xa}}, {0xfff, 0x52b, {0x1, 0xffffffff}}, {0x2, 0x4, {0x0, 0x2}}, {0x4, 0x3, {0x3, 0x1}}, {0x683, 0x51, {0x2, 0x3}}, {0x5, 0x8, {0x0, 0x4}}, {0x400, 0xf, {0x0, 0x2}}, {0x3, 0x9, {0x2, 0xfffffff0}}, {0x7, 0x8, {0x1}}, {0x5, 0x40, {0x0, 0xcafd}}, {0x582, 0xe3f, {0x2, 0x6}}, {0x7, 0x6, {0x3}}, {0x200, 0x8, {0x3, 0x2}}, {0x8000, 0x1, {0x1, 0x1}}, {0x3, 0x9d3, {0x2}}, {0x8564, 0xff, {0x0, 0x3}}, {0x4, 0x9, {0x3, 0x2}}, {0x40, 0x1, {0x1, 0xb0fd}}, {0xff, 0xec, {0x1, 0x9}}, {0x3, 0x101, {0x0, 0x3}}, {0x6, 0x8000, {0x1, 0x7fff}}, {0x80, 0xb7, {0x0, 0xc82a}}, {0x7fff, 0xff, {0x2, 0x54}}, {0x8, 0x8000, {0x2, 0x9}}, {0xfff7, 0x3, {0x1, 0x3}}, {0x97, 0x46c1, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0x9, 0x2, 0x7f, 0x1e, 'syz0\x00', "cde2b824ed1bb7dd302fcc5748f0907fd8edf0fd60f626133620fbff068c7509", "f49de808732280a47a39a86d8d7b624fd2671038e82399745d00f23a48331c47", [{0x0, 0x6, {0x0, 0x7}}, {0xfff, 0x3, {0x0, 0x1}}, {0xffff, 0x8, {0x2, 0xfffffffc}}, {0x1, 0x0, {0x0, 0x100}}, {0x20, 0x5, {0x0, 0x8}}, {0x3, 0xffff, {0x0, 0x8001}}, {0x2, 0x5}, {0x5, 0x3, {0x1, 0xfffffffd}}, {0xd, 0x8076, {0x3, 0x100}}, {0x1, 0x8170, {0x2, 0x2}}, {0x30, 0x7, {0x1, 0x7fff}}, {0x5, 0x8000, {0x2, 0x1}}, {0x13, 0x4, {0x0, 0x3}}, {0x1, 0x8, {0x2, 0x1}}, {0xd0a1, 0xc, {0x1, 0x8}}, {0x2, 0x5, {0x2, 0x167}}, {0x2, 0x6, {0x0, 0x8}}, {0x7a69, 0xa, {0x0, 0x7}}, {0x7, 0x31, {0x0, 0x1}}, {0x8, 0xf, {0x3, 0x2}}, {0x1, 0x0, {0x0, 0x149}}, {0xf95, 0x1, {0x3, 0x9}}, {0x1000, 0x3, {0x2, 0x7fff}}, {0x6, 0xc7, {0x1, 0xed15}}, {0x200, 0xf}, {0x2, 0xe, {0x0, 0x7}}, {0x2, 0x200, {0x2, 0x8000}}, {0xda0, 0x6, {0x2, 0x8}}, {0x4, 0x6d60, {0x3, 0x7}}, {0x38c9, 0x9e, {0x2, 0x6}}, {0x9, 0x8, {0x1, 0x9f}}, {0x6, 0x7, {0x0, 0x8}}, {0x3, 0x4, {0x1, 0xd4}}, {0x35, 0xfff3, {0x1, 0xffffffff}}, {0x6, 0x3, {0x3, 0x5}}, {0x7, 0x401, {0x1, 0x3}}, {0x0, 0x5, {0x3, 0x3}}, {0x0, 0x8, {0x0, 0xff}}, {0x5, 0xb63a, {0x3, 0xffff3fe7}}, {0x0, 0x8, {0x0, 0x8}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40004}, 0x4048800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 340.58299ms ago: executing program 9 (id=755): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/55, 0x37) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40010) (async) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) (async) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) (async) sendto$inet6(r4, &(0x7f0000000000)="9cbfed1235a6", 0x6, 0x4090, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0xfffffffa}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000140)={0x0, 0x4fb, 0x4, 0x65, 0x8, 0x1, 0x7f}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 148.912009ms ago: executing program 7 (id=756): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071181a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet(0x2, 0x1, 0x6e0b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000ac0)='cpu.pressure\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a60000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x19}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x0, 0x90040) mmap$usbfs(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x30, r3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x4, 0x2}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0xb, 0x5}, {0x5}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x4}, @fwd={0xb}]}, {0x0, [0x2e, 0x61, 0x5f, 0x2e, 0x61, 0x0]}}, &(0x7f0000000800)=""/96, 0x7c, 0x60, 0x1, 0x6}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rpc\x00') r8 = openat(r7, &(0x7f0000000640)='auth.unix.ip/channel\x00', 0x80882, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000680)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @broadcast}]}]}}}]}, 0x50}}, 0x0) r10 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r11, 0x16, 0x0, @void}, 0x10) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MARK_BUFS(r11, 0x40206417, &(0x7f0000000480)={0x69, 0xfffffff7, 0x9, 0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68}, 0x94) 115.77312ms ago: executing program 9 (id=757): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x28, 0xe4, 0x0, 0x7c, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0xfdfc, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x4, 0x0, 0x8}}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000040)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000004cc0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff000000000000000073797a30000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000000000000000000000600ff0901a10185107508950609018102090191028511750895130901810209019102c0"], 0x13c) read(r2, 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000004e00)=ANY=[@ANYBLOB="0c000000070010ff02"], 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000c0000060015000400000014001680100008800c0003800500", @ANYRESDEC=r3], 0x38}}, 0x8800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000f00000028002e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000d000200000008000c006400000004001601"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x200000c1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x178, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x14a, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x3, 0x6, 0x0, {0xffffffff, 0x6, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x2}, 0x808, 0x858b, 0x6}}, @random_vendor={0xdd, 0x6f, "57cce0f8a5fe2ae6d12f715be679931110675198d75fee2a0692232888ca96bddbdd039d03d56ef8360bddb9ca8129ae78027561f748cff014484cdf53254bd33ecba539722a70fb1e0296dde7e63f62fa386148eb8c70b85736cf870d70a990144ce62b34d99760ba87070d3ea40c"}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0x9c, 0x1dc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x4}}, @challenge={0x10, 0x1, 0x6a}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0xff}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x4, 0x1, @device_b, 0x5, 0x67e3, 0x1}}, @chsw_timing={0x68, 0x4, {0x9, 0x1}}, @tim={0x5, 0x1b, {0x0, 0xcc, 0x7, "1c312eb228fbe7104513573b7377652d8c026d1b115aa7b2"}}, @erp={0x2a, 0x1}, @random={0xcf, 0x56, "72a2422616a6dd295dbb0029e2323da79575eed22a96686391e9096695c7c27f9b3f9612a5ce9a7d9a6cd2fb850d9a2818b882c418094d2b072e5e139a423fe8f280cb07f06549734c95700fbd0bd681d9b4273c9a6e"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x857}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002a80)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000002b00)="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", 0x2000, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={0x90, 0x0, 0x7fffe, {0x9, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r8, r9, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000100)=@rnullb={'/dev/syzrnull', 0x0}, r8, &(0x7f0000004c80)) 52.556848ms ago: executing program 4 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200080, 0x0) getdents64(r1, &(0x7f00000003c0)=""/1000, 0x3e8) write$rnull_attr(r1, &(0x7f00000007c0)='512', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x404c2, 0x0) close(r2) socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x1004014, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='(\x00']) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xe79c8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) listns(&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x4000000, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)=[0x0], 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 0s ago: executing program 7 (id=759): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="25eb719891aaef84274674363886327b0631ca564b18415babe228aed8362d7a2f090a78f574c53515c83542a3106d9fcae8bab35faa16a4fe112b55eb25c586de35889eea2119fc20d8227113313a0d56d6cec57eb06ce9dcb04fab4f0948f5cfc9095ce599fc77f3e62958333bbd358a37dd4756dae364d5aa49188205e3386f1a84057a575798e54c309eca35a6f4c425258da3ef79daf1b9ef4783e50ebb72a366857ae705dd4f34f5d330a376406c3ba5d4f9bb4b1e2674e2032bb2836664298828a6b8054c424e045967c7049364ea5c0fc8889fb5fe32beea02630c", 0xdf}, {&(0x7f0000000140)="7617c2b0a6dace0ab2a02ab869c9e0b8c6b896f094bdaca361f07d13b91d374e5f6006536472648319497e9b2365e1cf51b931db3ee355f6a67d3a287f25cd5fb6195e334d4c8c9ef0dd8e9b7b5bcd3265828b5d89afb944", 0x58}], 0x2, 0xd) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0x6381}, 0x4) ioctl$sock_ifreq(r1, 0x5e, &(0x7f0000000280)={'ipvlan0\x00', @ifru_addrs=@qipcrtr={0x2a, 0x0, 0x3fff}}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000002c0)={0x0, 0xa32, 0x8}) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x82, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000480)={{r2, &(0x7f0000000340)='!#&\x00', 0x4000, &(0x7f0000000380)={@_ha_fsid={[0x7, 0x8]}, {0x97, 0x4, 0x3, 0x3a}}, 0x291, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)}, 0x0, &(0x7f0000000440)}) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e24, 0x4, @mcast1, 0xffffffff}, {0xa, 0x4e21, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7fffffff}, 0x0, {[0x0, 0x3df, 0x2, 0x2, 0xc1, 0x1000, 0x5, 0x800]}}, 0x5c) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3016000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x118, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008804) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000006c0)) (async) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r7) (async) listen(r2, 0x1) (async) recvmsg$unix(r1, &(0x7f0000001cc0)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/194, 0xc2}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/46, 0x2e}, {&(0x7f0000001b00)=""/176, 0xb0}], 0x6, &(0x7f0000001c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r15, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x30}}, 0x20000000) (async) pidfd_send_signal(r8, 0x15, &(0x7f0000001e00)={0x29, 0x5, 0xffffffff}, 0x0) (async) setsockopt$inet_sctp_SCTP_REUSE_PORT(r8, 0x84, 0x24, &(0x7f0000001e80)=0x7, 0x4) (async) r16 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001ec0), 0x1, 0x0) fcntl$setsig(r16, 0xa, 0x12) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000001fc0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001f80)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r13, &(0x7f0000002000)={0x12, 0x10, 0xfa00, {&(0x7f0000001f40), r17, r11}}, 0x18) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r13, 0xc4089434, &(0x7f0000002040)={0x0, 0x8, 0x1, [0x6, 0x8, 0x2, 0xfffffffffffffffe, 0x8000], [0x7, 0x2, 0x8, 0x9, 0x8, 0xd8b, 0x3, 0x8, 0x4, 0x6, 0x8, 0x8000000000000000, 0x6, 0xfff, 0x5, 0xffffffffffffb202, 0x0, 0x4, 0x400, 0x80000000000000, 0xffffffff, 0x4, 0x2, 0x4, 0xe4f0, 0x9, 0x80000000, 0x8, 0x4, 0x3, 0x4, 0x5, 0xfffffffffffffff8, 0x0, 0x6, 0x8, 0x5f0, 0x5, 0x7c, 0x5c0, 0x0, 0xa08, 0x9, 0x7, 0x200, 0x7, 0x4, 0xfffffffffffeffff, 0x3, 0x4, 0x9, 0x16, 0xfffffffffffffffe, 0x7, 0xf7, 0x3, 0x0, 0x7, 0x8, 0x4, 0x7, 0xff, 0x6, 0x7, 0x9, 0x100000001, 0x10001, 0x6, 0x6, 0xd, 0xf034, 0xe36e, 0x2, 0x9c3, 0x3, 0x7fffffff, 0xfffffffffffffff8, 0x1, 0x7, 0x40000, 0x78, 0xfffffffffffffff7, 0x200, 0x85, 0x2, 0xb, 0x14c, 0x6, 0x1000, 0x2, 0x1, 0x9, 0x0, 0x1, 0x16bd31a5, 0x639f, 0x9, 0x2, 0x100000000, 0xd, 0x8, 0x2, 0x401, 0x5, 0xffffffffffffff00, 0xb6e, 0x8, 0x4, 0x5, 0x1, 0x2, 0x2, 0x6, 0x3, 0x7fffffffffffffff, 0x3, 0x3, 0xffffffffffffffff, 0x4d3, 0x0, 0xc]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000002480)={{r13}, {@val={r18}, @max}}) (async) pread64$ublk_ch(r11, &(0x7f00000024c0)=@buf_max_buf, 0x1000, 0x4) (async) sendmsg$inet(r15, &(0x7f00000037c0)={&(0x7f00000034c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003500)="be1a416d55453ed545dcc8768c255716e519dafe34f802b9ccb9d02c091030285c6f1d736d5a4935c4ed5e952cb40dbb6ec2a0f297d9d3f1a74b3713f9961f1224b83eaa05ac17edd30d225d1094dbe5b78cc62cb0a4cbf621b55329a931cd0add786732638df48986451b3075e3d2e271ab94533e44c1d7930afba3694e026c133ca0b642e30da4c6cdddc40ef4862b800be82b011c8e081a0550e3168be8e56c5db65e6fa047c7dee2f67601d6ac430547ac85baacf4918dd14d39fc8b3f81c844395eae833d74facb631b184c44e4661c7406548115335667981393b9a74e3b3bb23f61040e48620d3c1a09f3b25d06efbe5dfd88dc", 0xf7}, {&(0x7f0000003600)="0b048336", 0x4}], 0x2, &(0x7f0000003680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x84, [@multicast2, @loopback, @local, @rand_addr=0x64010101]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x27, 0x4, [@remote, @private=0xa010101, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @private=0xa010102, @empty]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @generic={0x44, 0x7, "e75b71e698"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x138}, 0x800) (async) io_uring_register$IORING_REGISTER_FILES(r14, 0x2, &(0x7f0000003800)=[r12, r11, r2, r10, r11, r9, r6], 0x7) kernel console output (not intermixed with test programs): ous mode [ 51.091096][ T4896] tipc: Node number set to 2886997162 [ 51.099943][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.107309][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.107338][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.107404][ T6005] bridge_slave_1: entered allmulticast mode [ 51.107844][ T6005] bridge_slave_1: entered promiscuous mode [ 51.177062][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.177941][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.184270][ T6005] team0: Port device team_slave_0 added [ 51.206943][ T6005] team0: Port device team_slave_1 added [ 51.290486][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.290499][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.291025][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.291562][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.291569][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.291582][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.410178][ T6005] hsr_slave_0: entered promiscuous mode [ 51.418332][ T6005] hsr_slave_1: entered promiscuous mode [ 51.418628][ T6005] debugfs: 'hsr0' already exists in 'hsr' [ 51.418640][ T6005] Cannot create hsr debugfs directory [ 51.488477][ T6000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.491375][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.491799][ T6000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.504033][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.506357][ T5364] IPVS: stop unused estimator thread 0... [ 51.510132][ T6000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.520222][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.527392][ T6000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.662469][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.692454][ T6145] tipc: Enabling of bearer rejected, failed to enable media [ 51.930711][ T5364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.139459][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.142486][ T6194] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 52.142912][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.282347][ T5364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.332620][ T6206] bond2: option all_slaves_active: invalid value (8) [ 52.340204][ T6206] bond2 (unregistering): Released all slaves [ 52.446671][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.477075][ T5364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.488619][ T6005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.508085][ T6005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.511236][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.513394][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.513427][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.524074][ T6005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.538426][ T6005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.562746][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.562776][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.567160][ T6005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.569874][ T6005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.570436][ T6005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.572822][ T6005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.599293][ T5364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.697765][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.697813][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.697833][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.697881][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.697916][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.697927][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.697954][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.697988][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.697998][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698024][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698057][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698067][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698093][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698126][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698136][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698161][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698194][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698203][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698228][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698261][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698270][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698294][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698327][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698336][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698361][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698394][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698403][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698427][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698460][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698469][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698494][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698527][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698536][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698560][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698593][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698602][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698627][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698660][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698670][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698694][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698733][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698745][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698774][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698810][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698820][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698844][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698877][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698886][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698911][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.698944][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.698953][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.698977][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699010][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699019][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699043][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699077][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699086][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699110][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699144][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699153][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699177][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699210][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699219][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699244][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699277][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699286][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699311][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699344][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699353][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699378][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699410][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699419][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699444][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699476][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699527][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699552][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699585][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699594][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699619][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699651][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699660][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699685][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699729][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699741][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699765][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699798][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699808][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699832][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699865][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699874][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699898][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699932][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.699941][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.699965][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.699999][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.700008][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.700033][ T6237] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20945000 [ 52.700066][ T6237] Memory failure: 0x216bf1: Sending SIGBUS to syz.3.255:6237 due to hardware memory corruption [ 52.700075][ T6237] Memory failure: 0x216bf1: recovery action for already poisoned page: Failed [ 52.771492][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.771509][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.803460][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.815669][ T4719] Bluetooth: hci0: command tx timeout [ 52.854051][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.885809][ T4719] Bluetooth: hci2: command tx timeout [ 52.931389][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.931418][ T5357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.931935][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.931956][ T5357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.969102][ T6005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.030817][ T5364] bridge_slave_1: left allmulticast mode [ 53.030838][ T5364] bridge_slave_1: left promiscuous mode [ 53.030922][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.040104][ T5364] bridge_slave_0: left allmulticast mode [ 53.040120][ T5364] bridge_slave_0: left promiscuous mode [ 53.040192][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.171817][ T6225] netlink: 116 bytes leftover after parsing attributes in process `syz.3.255'. [ 53.300921][ T5364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.338388][ T5364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.366548][ T5364] bond0 (unregistering): Released all slaves [ 53.382485][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.687879][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.750437][ T5364] hsr_slave_0: left promiscuous mode [ 53.752258][ T5364] hsr_slave_1: left promiscuous mode [ 53.752561][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.752572][ T5364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.754087][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.754098][ T5364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.777618][ T5364] veth1_macvtap: left promiscuous mode [ 53.777650][ T5364] veth0_macvtap: left promiscuous mode [ 53.777799][ T5364] veth1_vlan: left promiscuous mode [ 53.777833][ T5364] veth0_vlan: left promiscuous mode [ 54.268974][ T5364] team0 (unregistering): Port device team_slave_1 removed [ 54.291648][ T5364] team0 (unregistering): Port device team_slave_0 removed [ 54.444042][ T6325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.263'. [ 54.486205][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.502581][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.531386][ T6325] process 'syz.4.263' launched '/dev/fd/4' with NULL argv: empty string added [ 54.535235][ T6330] netlink: 9 bytes leftover after parsing attributes in process `syz.3.264'. [ 54.550828][ T6330] gretap0: entered promiscuous mode [ 54.651998][ T6330] netlink: 5 bytes leftover after parsing attributes in process `syz.3.264'. [ 54.660532][ T6005] veth0_vlan: entered promiscuous mode [ 54.662475][ T6005] veth1_vlan: entered promiscuous mode [ 54.684908][ T6330] 0Єо{X№¦: renamed from gretap0 [ 54.685797][ T6330] 0Єо{X№¦: left promiscuous mode [ 54.685808][ T6330] 0Єо{X№¦: entered allmulticast mode [ 54.686516][ T6330] A link change request failed with some changes committed already. Interface 30Єо{X№¦ may have been left with an inconsistent configuration, please check. [ 54.690131][ T6000] veth0_vlan: entered promiscuous mode [ 54.724544][ T6005] veth0_macvtap: entered promiscuous mode [ 54.737532][ T6000] veth1_vlan: entered promiscuous mode [ 54.766193][ T6005] veth1_macvtap: entered promiscuous mode [ 54.774348][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.783187][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.789608][ T6000] veth0_macvtap: entered promiscuous mode [ 54.793989][ T6000] veth1_macvtap: entered promiscuous mode [ 54.816385][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.816441][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.816457][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.816472][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.838946][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.853455][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.894764][ T4719] Bluetooth: hci0: command tx timeout [ 54.898142][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 54.903843][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.903858][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.914772][ T1184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914832][ T1184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914853][ T1184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914869][ T1184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.936810][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.936824][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.972394][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.972412][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.977814][ T4719] Bluetooth: hci2: command tx timeout [ 54.988930][ T5364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.988945][ T5364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.065208][ T6362] binder: BINDER_SET_CONTEXT_MGR already set [ 55.065220][ T6362] binder: 6361:6362 ioctl 4018620d 20000100 returned -16 [ 55.071747][ T6362] binder: 6361:6362 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 00000000000000fc != 0000000000000000 [ 55.088075][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.448944][ T6373] syzkaller0: entered promiscuous mode [ 55.448961][ T6373] syzkaller0: entered allmulticast mode [ 55.560873][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.570739][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.582789][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 55.680845][ T6397] erspan0: entered promiscuous mode [ 55.682403][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 55.739020][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 55.974976][ T6418] loop5: detected capacity change from 0 to 512 [ 55.986734][ T6418] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.270: inode has both inline data and extents flags [ 55.986759][ T6418] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.987312][ T6418] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.270: couldn't read orphan inode 15 (err -117) [ 55.987334][ T6418] loop5: lost filesystem error report for type 5 error -117 [ 55.991495][ T6418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.025761][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.064482][ T6423] loop5: detected capacity change from 0 to 4096 [ 56.069079][ T6423] EXT4-fs: Ignoring removed orlov option [ 56.072225][ T6423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.072241][ T6423] EXT4-fs (loop5): Test dummy encryption mode enabled [ 56.072249][ T6423] EXT4-fs (loop5): DAX unsupported by block device. [ 56.082504][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.083458][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.083780][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.084180][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.086559][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.221621][ T4990] bridge0: port 3(syz_tun) entered disabled state [ 56.228205][ T6455] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.228222][ T6455] overlayfs: failed to set xattr on upper [ 56.228228][ T6455] overlayfs: ...falling back to redirect_dir=nofollow. [ 56.228233][ T6455] overlayfs: ...falling back to uuid=null. [ 56.232066][ T6452] No control pipe specified [ 56.240994][ T4990] syz_tun (unregistering): left allmulticast mode [ 56.241014][ T4990] syz_tun (unregistering): left promiscuous mode [ 56.241046][ T4990] bridge0: port 3(syz_tun) entered disabled state [ 56.250978][ T6455] sctp: [Deprecated]: syz.5.275 (pid 6455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.250978][ T6455] Use struct sctp_sack_info instead [ 56.284069][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 56.306896][ T6461] bond0: option arp_interval: invalid value (sHQ=) [ 56.306914][ T6461] bond0: option arp_interval: allowed values 0 - 2147483647 [ 56.327558][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.333793][ T6471] |2ц;: entered promiscuous mode [ 56.334150][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.351409][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.354375][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.367289][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.367357][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.367445][ T6424] bridge_slave_0: entered allmulticast mode [ 56.367533][ T6477] ip_tables: iptables: counters copy to user failed while replacing table [ 56.367981][ T6424] bridge_slave_0: entered promiscuous mode [ 56.368442][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.369968][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.370024][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.370106][ T6424] bridge_slave_1: entered allmulticast mode [ 56.370621][ T6424] bridge_slave_1: entered promiscuous mode [ 56.382358][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.385641][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.409696][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.419083][ T5364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.432070][ T14] IPVS: starting estimator thread 0... [ 56.465116][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.465440][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.465661][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.465911][ T6471] netlink: 'syz.5.278': attribute type 2 has an invalid length. [ 56.474245][ T6424] team0: Port device team_slave_0 added [ 56.485208][ T6424] team0: Port device team_slave_1 added [ 56.491415][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.491427][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.491445][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.491955][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.491962][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.491977][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.525261][ T6483] IPVS: using max 61 ests per chain, 146400 per kthread [ 56.531671][ T6424] hsr_slave_0: entered promiscuous mode [ 56.531981][ T6424] hsr_slave_1: entered promiscuous mode [ 56.532191][ T6424] debugfs: 'hsr0' already exists in 'hsr' [ 56.532201][ T6424] Cannot create hsr debugfs directory [ 56.546019][ T6485] loop3: detected capacity change from 0 to 512 [ 56.555958][ T5364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.600213][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.284'. [ 56.620629][ T6499] loop6: detected capacity change from 0 to 1024 [ 56.620973][ T6499] EXT4-fs: Ignoring removed bh option [ 56.620999][ T6499] EXT4-fs: Ignoring removed bh option [ 56.633753][ T6499] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.637348][ T5364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.655817][ T6499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.689748][ T6424] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.690823][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.691204][ T6424] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.692063][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.692458][ T6424] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.693329][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.693694][ T6424] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.696879][ T6424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.700546][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.284'. [ 56.719834][ T6499] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.722401][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.730533][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.746257][ T6005] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /3/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 56.747475][ T6005] EXT4-fs (loop6): Remounting filesystem read-only [ 56.749760][ T6005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.777996][ T5364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.798436][ T6514] loop6: detected capacity change from 0 to 512 [ 56.804265][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.812328][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.816481][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.816517][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.828852][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.828892][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.921251][ T5364] bridge_slave_1: left allmulticast mode [ 56.921273][ T5364] bridge_slave_1: left promiscuous mode [ 56.921351][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.932245][ T5364] bridge_slave_0: left allmulticast mode [ 56.932260][ T5364] bridge_slave_0: left promiscuous mode [ 56.932336][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.974909][ T4719] Bluetooth: hci0: command tx timeout [ 57.006955][ T5364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.021247][ T5364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.022893][ T6530] loop6: detected capacity change from 0 to 512 [ 57.029290][ T6530] EXT4-fs: Ignoring removed oldalloc option [ 57.030748][ T6530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.031602][ T6530] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 57.031615][ T6530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 57.031724][ T6530] EXT4-fs (loop6): orphan cleanup on readonly fs [ 57.031755][ T6530] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 57.031796][ T6530] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.031808][ T6530] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 57.034738][ T6530] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.291: bg 0: block 40: padding at end of block bitmap is not set [ 57.034770][ T6530] loop6: lost filesystem error report for type 5 error -117 [ 57.037986][ T6530] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 57.038008][ T6530] loop6: lost filesystem error report for type 5 error -117 [ 57.044782][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 57.044797][ C0] EXT4-fs (loop6): initial error at time 57: ext4_validate_block_bitmap:445 [ 57.044815][ C0] EXT4-fs (loop6): last error at time 57: ext4_mb_clear_bb:6680 [ 57.045937][ T4719] Bluetooth: hci2: command tx timeout [ 57.050355][ T6530] EXT4-fs (loop6): 1 truncate cleaned up [ 57.050830][ T6530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.053018][ T5364] bond0 (unregistering): Released all slaves [ 57.088686][ T6530] Bluetooth: MGMT ver 1.23 [ 57.092545][ T6530] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.291: iget: bad i_size value: 360287970189639690 [ 57.102992][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.291'. [ 57.159175][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.180290][ T6005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.243971][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 57.309585][ T5364] hsr_slave_0: left promiscuous mode [ 57.309977][ T5364] hsr_slave_1: left promiscuous mode [ 57.310250][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.310263][ T5364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.313841][ T6562] loop6: detected capacity change from 0 to 4096 [ 57.314190][ T6562] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.314199][ T6562] EXT4-fs: Ignoring removed nobh option [ 57.319278][ T5364] veth1_macvtap: left promiscuous mode [ 57.319305][ T5364] veth0_macvtap: left promiscuous mode [ 57.319352][ T5364] veth1_vlan: left promiscuous mode [ 57.319385][ T5364] veth0_vlan: left promiscuous mode [ 57.321324][ T6562] EXT4-fs (loop6): Test dummy encryption mode enabled [ 57.339992][ T6562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.388320][ T6005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.416295][ T6566] loop6: detected capacity change from 0 to 512 [ 57.438758][ T6566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.442697][ T6566] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.294: verity file corrupted; can't find descriptor [ 57.443896][ T6566] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 57.457385][ T6005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.462501][ T5364] team0 (unregistering): Port device team_slave_1 removed [ 57.478031][ T5364] team0 (unregistering): Port device team_slave_0 removed [ 57.560555][ T6424] veth0_vlan: entered promiscuous mode [ 57.572059][ T6424] veth1_vlan: entered promiscuous mode [ 57.600653][ T6424] veth0_macvtap: entered promiscuous mode [ 57.604300][ T6424] veth1_macvtap: entered promiscuous mode [ 57.612206][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.623849][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.630531][ T5358] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.630603][ T5358] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.664863][ T5358] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.665640][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.679102][ T5358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.679117][ T5358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.703415][ T5358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.703432][ T5358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.763331][ T6603] loop7: detected capacity change from 0 to 512 [ 57.779252][ T6603] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 57.779277][ T6603] EXT4-fs (loop7): group descriptors corrupted! [ 57.779575][ T6599] FAULT_INJECTION: forcing a failure. [ 57.779575][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 57.779595][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.6.301 Not tainted syzkaller #0 PREEMPT [ 57.779607][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.779614][ T6599] Call trace: [ 57.779617][ T6599] show_stack+0x2c/0x3c (C) [ 57.779638][ T6599] __dump_stack+0x30/0x40 [ 57.779650][ T6599] dump_stack_lvl+0xd8/0x12c [ 57.779662][ T6599] dump_stack+0x1c/0x28 [ 57.779673][ T6599] should_fail_ex+0x418/0x58c [ 57.779687][ T6599] should_failslab+0xc4/0x120 [ 57.779700][ T6599] __kmalloc_noprof+0x108/0x6c8 [ 57.779717][ T6599] security_sk_alloc+0x60/0x35c [ 57.779730][ T6599] sk_prot_alloc+0xe0/0x1e8 [ 57.779740][ T6599] sk_alloc+0x44/0x320 [ 57.779749][ T6599] __netlink_create+0x78/0x23c [ 57.779760][ T6599] netlink_create+0x3b4/0x610 [ 57.779772][ T6599] __sock_create+0x31c/0x670 [ 57.779782][ T6599] __sys_socket_create+0xc0/0x11c [ 57.779793][ T6599] __sys_socket+0x44/0xec [ 57.779803][ T6599] __arm64_sys_socket+0x84/0x9c [ 57.779813][ T6599] invoke_syscall+0x98/0x244 [ 57.779825][ T6599] el0_svc_common+0xec/0x23c [ 57.779837][ T6599] do_el0_svc+0x4c/0x5c [ 57.779848][ T6599] el0_svc+0x60/0x1d8 [ 57.779862][ T6599] el0t_64_sync_handler+0x44/0x104 [ 57.779874][ T6599] el0t_64_sync+0x198/0x19c [ 57.847183][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 57.863892][ T6616] loop5: detected capacity change from 0 to 8 [ 57.928379][ T6631] openvswitch: netlink: Missing valid actions attribute. [ 57.928398][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.069784][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 58.167243][ T4719] Bluetooth: hci5: command tx timeout [ 58.232670][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 58.305151][ T6672] 9pnet_fd: Insufficient options for proto=fd [ 58.361089][ T6677] netlink: 244 bytes leftover after parsing attributes in process `syz.3.311'. [ 58.380474][ T6677] 9p: Bad value for 'wfdno' [ 58.408940][ T6680] vlan2: entered allmulticast mode [ 58.408961][ T6680] erspan0: entered allmulticast mode [ 58.452235][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.452398][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.827795][ T6717] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.903667][ T6717] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.314: corrupted in-inode xattr: e_value size too large [ 58.903701][ T6717] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.904625][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 58.904644][ C1] EXT4-fs (loop6): initial error at time 58: ext4_iget_extra_inode:5210: inode 15 [ 58.904665][ C1] EXT4-fs (loop6): last error at time 58: ext4_iget_extra_inode:5210: inode 15 [ 58.929145][ T6717] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.314: couldn't read orphan inode 15 (err -117) [ 58.929836][ T6717] loop6: lost filesystem error report for type 5 error -117 [ 58.938373][ T6717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.987876][ T6717] printk: console [ttyS0] disabled [ 59.617884][ T6005] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 59.619194][ T6005] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 59.918375][ T6005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.953682][ T5361] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.018275][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.019096][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.019367][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.019887][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.020126][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.031559][ T6737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.038414][ T6735] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 60.038465][ T6735] overlayfs: failed to verify index dir 'upper' xattr [ 60.038471][ T6735] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 60.051467][ T6735] overlayfs: failed to set xattr on upper [ 60.051478][ T6735] overlayfs: ...falling back to redirect_dir=nofollow. [ 60.051482][ T6735] overlayfs: ...falling back to index=off. [ 60.051486][ T6735] overlayfs: ...falling back to uuid=null. [ 60.051490][ T6735] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 60.068906][ T5361] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.216174][ T5361] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.244992][ T4720] Bluetooth: hci5: command tx timeout [ 60.252303][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.252434][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.252591][ T6738] bridge_slave_0: entered allmulticast mode [ 60.253282][ T6738] bridge_slave_0: entered promiscuous mode [ 60.256034][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.256092][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.256157][ T6738] bridge_slave_1: entered allmulticast mode [ 60.256666][ T6738] bridge_slave_1: entered promiscuous mode [ 60.265230][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.266905][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.274087][ T6738] team0: Port device team_slave_0 added [ 60.275823][ T6738] team0: Port device team_slave_1 added [ 60.282035][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.282047][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.282059][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.282742][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.282752][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.282766][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.302372][ T6738] hsr_slave_0: entered promiscuous mode [ 60.302739][ T6738] hsr_slave_1: entered promiscuous mode [ 60.302985][ T6738] debugfs: 'hsr0' already exists in 'hsr' [ 60.302996][ T6738] Cannot create hsr debugfs directory [ 60.319643][ T5361] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.367372][ T6738] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 60.368699][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.369135][ T6738] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 60.370077][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.370406][ T6738] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 60.371308][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.372109][ T6738] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 60.372949][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.395290][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.395328][ T6738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.395408][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.395435][ T6738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.417130][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.422839][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.423282][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.441031][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.455597][ T5361] bridge_slave_1: left allmulticast mode [ 60.455618][ T5361] bridge_slave_1: left promiscuous mode [ 60.455705][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.456795][ T5361] bridge_slave_0: left allmulticast mode [ 60.456808][ T5361] bridge_slave_0: left promiscuous mode [ 60.457364][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.524161][ T5361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.547100][ T5361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.558685][ T5361] bond0 (unregistering): Released all slaves [ 60.561464][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.561518][ T5358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.565939][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.565961][ T5358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.793088][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 60.896955][ T6424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.911251][ T5361] hsr_slave_0: left promiscuous mode [ 60.918047][ T5361] hsr_slave_1: left promiscuous mode [ 60.918591][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.918605][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.919039][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.919054][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.935233][ T5361] veth1_macvtap: left promiscuous mode [ 60.935265][ T5361] veth0_macvtap: left promiscuous mode [ 60.935339][ T5361] veth1_vlan: left promiscuous mode [ 60.935375][ T5361] veth0_vlan: left promiscuous mode [ 61.070526][ T5361] team0 (unregistering): Port device team_slave_1 removed [ 61.076667][ T5361] team0 (unregistering): Port device team_slave_0 removed [ 61.135959][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 61.138397][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.194242][ T30] audit: type=1326 audit(61.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.194277][ T30] audit: type=1326 audit(61.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.197918][ T30] audit: type=1326 audit(61.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.197937][ T30] audit: type=1326 audit(61.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.197952][ T30] audit: type=1326 audit(61.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.198498][ T30] audit: type=1326 audit(61.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.198515][ T30] audit: type=1326 audit(61.190:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.198529][ T30] audit: type=1326 audit(61.190:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.206848][ T30] audit: type=1326 audit(61.200:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.5.329" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff88d788e8 code=0x7ffc0000 [ 61.218592][ T6834] __nla_validate_parse: 1 callbacks suppressed [ 61.218605][ T6834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.329'. [ 61.263904][ T6834] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 61.273492][ T6834] bond1 (unregistering): Released all slaves [ 61.357509][ T6738] veth0_vlan: entered promiscuous mode [ 61.362069][ T6738] veth1_vlan: entered promiscuous mode [ 61.380265][ T6738] veth0_macvtap: entered promiscuous mode [ 61.381861][ T6738] veth1_macvtap: entered promiscuous mode [ 61.389772][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.391349][ T6854] set_capacity_and_notify: 2 callbacks suppressed [ 61.391360][ T6854] loop7: detected capacity change from 0 to 2048 [ 61.393012][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.408917][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.408956][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.408980][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.425068][ T1184] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.462520][ T6854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.472389][ T5361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.472404][ T5361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.479080][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.479092][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.482323][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 61.482430][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.335'. [ 61.509286][ T6863] loop3: detected capacity change from 0 to 4096 [ 61.563196][ T6424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.565732][ T6863] loop3: detected capacity change from 0 to 4096 [ 61.632512][ T6882] FAULT_INJECTION: forcing a failure. [ 61.632512][ T6882] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.632535][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.5.339 Tainted: G L syzkaller #0 PREEMPT [ 61.632547][ T6882] Tainted: [L]=SOFTLOCKUP [ 61.632551][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.632557][ T6882] Call trace: [ 61.632560][ T6882] show_stack+0x2c/0x3c (C) [ 61.632579][ T6882] __dump_stack+0x30/0x40 [ 61.632592][ T6882] dump_stack_lvl+0xd8/0x12c [ 61.632603][ T6882] dump_stack+0x1c/0x28 [ 61.632615][ T6882] should_fail_ex+0x418/0x58c [ 61.632628][ T6882] should_fail_alloc_page+0xec/0x10c [ 61.632642][ T6882] prepare_alloc_pages+0x194/0x484 [ 61.632651][ T6882] __alloc_frozen_pages_noprof+0x180/0x578 [ 61.632661][ T6882] alloc_pages_mpol+0x1fc/0x3d0 [ 61.632671][ T6882] alloc_frozen_pages_noprof+0xc4/0x10c [ 61.632681][ T6882] alloc_pages_noprof+0x30/0x148 [ 61.632690][ T6882] __pte_alloc+0x40/0x1c4 [ 61.632701][ T6882] walk_pgd_range+0xa8c/0x1850 [ 61.632713][ T6882] __walk_page_range+0x150/0x60c [ 61.632733][ T6882] walk_page_range_vma_unsafe+0x2c0/0x368 [ 61.632746][ T6882] madvise_vma_behavior+0x2904/0x339c [ 61.632759][ T6882] madvise_walk_vmas+0x7e0/0x9bc [ 61.632771][ T6882] madvise_do_behavior+0x5f0/0x7c0 [ 61.632783][ T6882] do_madvise+0x28c/0x2f0 [ 61.632794][ T6882] __arm64_sys_madvise+0xac/0xc8 [ 61.632806][ T6882] invoke_syscall+0x98/0x244 [ 61.632818][ T6882] el0_svc_common+0xec/0x23c [ 61.632831][ T6882] do_el0_svc+0x4c/0x5c [ 61.632842][ T6882] el0_svc+0x60/0x1d8 [ 61.632856][ T6882] el0t_64_sync_handler+0x44/0x104 [ 61.632868][ T6882] el0t_64_sync+0x198/0x19c [ 61.655353][ T6882] loop5: detected capacity change from 0 to 1024 [ 61.688983][ T6882] EXT4-fs (loop5): failed to initialize system zone (-117) [ 61.689070][ T6882] EXT4-fs (loop5): mount failed [ 61.793474][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 61.840281][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 61.885490][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 61.916145][ T12] IPVS: starting estimator thread 0... [ 61.987232][ T6932] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 62.004945][ T6930] IPVS: using max 61 ests per chain, 146400 per kthread [ 62.085323][ T4720] Bluetooth: hci2: command tx timeout [ 62.147010][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 62.205275][ T6973] loop7: detected capacity change from 0 to 512 [ 62.205632][ T6973] EXT4-fs: Ignoring removed nobh option [ 62.226693][ T6973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.233964][ T6973] EXT4-fs error (device loop7): ext4_resize_begin:60: comm syz.7.353: resize_inode disabled but reserved GDT blocks non-zero [ 62.268643][ T6424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.325025][ T4720] Bluetooth: hci5: command tx timeout [ 62.328248][ T6986] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.333853][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.355'. [ 62.557367][ T7016] loop8: detected capacity change from 0 to 512 [ 62.564414][ T7016] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.571977][ T7016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 62.572026][ T7016] System zones: 1-12 [ 62.572119][ T7016] EXT4-fs (loop8): orphan cleanup on readonly fs [ 62.572480][ T7016] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.365: invalid indirect mapped block 12 (level 1) [ 62.572496][ T7016] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.574405][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 62.574628][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 62.574639][ C0] EXT4-fs (loop8): initial error at time 62: ext4_free_branches:1023: inode 11 [ 62.574658][ C0] EXT4-fs (loop8): last error at time 62: ext4_free_branches:1023: inode 11 [ 62.593469][ T7016] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.365: invalid indirect mapped block 2 (level 2) [ 62.593497][ T7016] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.600984][ T7016] EXT4-fs (loop8): 1 truncate cleaned up [ 62.601444][ T7016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 62.612858][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 62.700474][ T7024] overlayfs: failed to clone upperpath [ 62.701834][ T7024] validate_nla: 26 callbacks suppressed [ 62.701844][ T7024] netlink: 'syz.7.367': attribute type 10 has an invalid length. [ 62.702021][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.702192][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.707799][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.707841][ T7024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.707933][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.707964][ T7024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.709368][ T7024] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.748929][ T7027] FAULT_INJECTION: forcing a failure. [ 62.748929][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 62.748949][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.5.368 Tainted: G L syzkaller #0 PREEMPT [ 62.748960][ T7027] Tainted: [L]=SOFTLOCKUP [ 62.748963][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.748968][ T7027] Call trace: [ 62.748971][ T7027] show_stack+0x2c/0x3c (C) [ 62.748988][ T7027] __dump_stack+0x30/0x40 [ 62.748998][ T7027] dump_stack_lvl+0xd8/0x12c [ 62.749008][ T7027] dump_stack+0x1c/0x28 [ 62.749017][ T7027] should_fail_ex+0x418/0x58c [ 62.749028][ T7027] should_failslab+0xc4/0x120 [ 62.749040][ T7027] __kvmalloc_node_noprof+0x160/0x7fc [ 62.749048][ T7027] groups_alloc+0x4c/0xf4 [ 62.749056][ T7027] __arm64_sys_setgroups+0xcc/0x454 [ 62.749064][ T7027] invoke_syscall+0x98/0x244 [ 62.749074][ T7027] el0_svc_common+0xec/0x23c [ 62.749084][ T7027] do_el0_svc+0x4c/0x5c [ 62.749093][ T7027] el0_svc+0x60/0x1d8 [ 62.749104][ T7027] el0t_64_sync_handler+0x44/0x104 [ 62.749114][ T7027] el0t_64_sync+0x198/0x19c [ 62.823271][ T7030] netlink: 'syz.8.366': attribute type 3 has an invalid length. [ 62.823689][ T7030] netlink: 'syz.8.366': attribute type 3 has an invalid length. [ 62.986237][ T7028] FAULT_INJECTION: forcing a failure. [ 62.986237][ T7028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.986257][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.5.368 Tainted: G L syzkaller #0 PREEMPT [ 62.986269][ T7028] Tainted: [L]=SOFTLOCKUP [ 62.986272][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.986276][ T7028] Call trace: [ 62.986279][ T7028] show_stack+0x2c/0x3c (C) [ 62.986296][ T7028] __dump_stack+0x30/0x40 [ 62.986306][ T7028] dump_stack_lvl+0xd8/0x12c [ 62.986316][ T7028] dump_stack+0x1c/0x28 [ 62.986325][ T7028] should_fail_ex+0x418/0x58c [ 62.986337][ T7028] should_fail+0x14/0x24 [ 62.986346][ T7028] should_fail_usercopy+0x20/0x30 [ 62.986353][ T7028] _inline_copy_from_user+0x3c/0x174 [ 62.986364][ T7028] copy_msghdr_from_user+0xb8/0x194 [ 62.986374][ T7028] ___sys_sendmsg+0x14c/0x224 [ 62.986383][ T7028] __sys_sendmsg+0x158/0x204 [ 62.986392][ T7028] __arm64_sys_sendmsg+0x88/0x9c [ 62.986402][ T7028] invoke_syscall+0x98/0x244 [ 62.986412][ T7028] el0_svc_common+0xec/0x23c [ 62.986421][ T7028] do_el0_svc+0x4c/0x5c [ 62.986430][ T7028] el0_svc+0x60/0x1d8 [ 62.986442][ T7028] el0t_64_sync_handler+0x44/0x104 [ 62.986452][ T7028] el0t_64_sync+0x198/0x19c [ 63.041509][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.7.371'. [ 63.335995][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.336147][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.392083][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.392241][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.548487][ T7069] loop8: detected capacity change from 0 to 512 [ 63.552584][ T7069] EXT4-fs (loop8): Test dummy encryption mode enabled [ 63.562447][ T7069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.579683][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 63.599842][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.684227][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.379'. [ 63.812832][ T7091] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 63.973574][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 64.103785][ T7112] FAULT_INJECTION: forcing a failure. [ 64.103785][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 64.103809][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT [ 64.103822][ T7112] Tainted: [L]=SOFTLOCKUP [ 64.103826][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.103831][ T7112] Call trace: [ 64.103834][ T7112] show_stack+0x2c/0x3c (C) [ 64.103852][ T7112] __dump_stack+0x30/0x40 [ 64.103863][ T7112] dump_stack_lvl+0xd8/0x12c [ 64.103873][ T7112] dump_stack+0x1c/0x28 [ 64.103882][ T7112] should_fail_ex+0x418/0x58c [ 64.103894][ T7112] should_failslab+0xc4/0x120 [ 64.103905][ T7112] kmem_cache_alloc_noprof+0x94/0x5d4 [ 64.103913][ T7112] security_file_alloc+0x3c/0x300 [ 64.103923][ T7112] init_file+0x90/0x28c [ 64.103930][ T7112] alloc_empty_file+0x80/0x1cc [ 64.103938][ T7112] path_openat+0x78/0x18f0 [ 64.103947][ T7112] do_file_open+0x1c8/0x2e8 [ 64.103955][ T7112] do_sys_openat2+0x114/0x1e8 [ 64.103965][ T7112] do_sys_open+0xb0/0xe0 [ 64.103974][ T7112] __arm64_sys_openat+0xa8/0xc4 [ 64.103984][ T7112] invoke_syscall+0x98/0x244 [ 64.103994][ T7112] el0_svc_common+0xec/0x23c [ 64.104004][ T7112] do_el0_svc+0x4c/0x5c [ 64.104013][ T7112] el0_svc+0x60/0x1d8 [ 64.104024][ T7112] el0t_64_sync_handler+0x44/0x104 [ 64.104034][ T7112] el0t_64_sync+0x198/0x19c [ 64.107776][ T7112] FAULT_INJECTION: forcing a failure. [ 64.107776][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 64.107790][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT [ 64.107800][ T7112] Tainted: [L]=SOFTLOCKUP [ 64.107803][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.107808][ T7112] Call trace: [ 64.107810][ T7112] show_stack+0x2c/0x3c (C) [ 64.107823][ T7112] __dump_stack+0x30/0x40 [ 64.107833][ T7112] dump_stack_lvl+0xd8/0x12c [ 64.107842][ T7112] dump_stack+0x1c/0x28 [ 64.107851][ T7112] should_fail_ex+0x418/0x58c [ 64.107862][ T7112] should_failslab+0xc4/0x120 [ 64.107873][ T7112] kmem_cache_alloc_noprof+0x94/0x5d4 [ 64.107880][ T7112] security_file_alloc+0x3c/0x300 [ 64.107889][ T7112] init_file+0x90/0x28c [ 64.107896][ T7112] alloc_empty_file+0x80/0x1cc [ 64.107904][ T7112] path_openat+0x78/0x18f0 [ 64.107913][ T7112] do_file_open+0x1c8/0x2e8 [ 64.107921][ T7112] do_sys_openat2+0x114/0x1e8 [ 64.107931][ T7112] do_sys_open+0xb0/0xe0 [ 64.107940][ T7112] __arm64_sys_openat+0xa8/0xc4 [ 64.107949][ T7112] invoke_syscall+0x98/0x244 [ 64.107959][ T7112] el0_svc_common+0xec/0x23c [ 64.107969][ T7112] do_el0_svc+0x4c/0x5c [ 64.107978][ T7112] el0_svc+0x60/0x1d8 [ 64.107988][ T7112] el0t_64_sync_handler+0x44/0x104 [ 64.107998][ T7112] el0t_64_sync+0x198/0x19c [ 64.149847][ T7116] loop3: detected capacity change from 0 to 256 [ 64.164833][ T4720] Bluetooth: hci2: command tx timeout [ 64.201269][ T7118] loop3: detected capacity change from 0 to 256 [ 64.404803][ T4720] Bluetooth: hci5: command tx timeout [ 64.487340][ T55] cfg80211: failed to load regulatory.db [ 64.488302][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488347][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.037242][ T7037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.095575][ T7145] loop8: detected capacity change from 0 to 512 [ 66.108216][ T7145] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.390: attempt to clear invalid blocks 2 len 1 [ 66.108238][ T7145] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.108511][ T7145] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 66.109366][ T7145] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.390: invalid indirect mapped block 1819239214 (level 0) [ 66.109384][ T7145] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.109775][ T7145] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.390: invalid indirect mapped block 1819239214 (level 1) [ 66.109795][ T7145] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.110521][ T7145] EXT4-fs (loop8): 1 truncate cleaned up [ 66.110982][ T7145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.185484][ T7168] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 66.198361][ T7168] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 66.217752][ T7174] No control pipe specified [ 66.247738][ T4720] Bluetooth: hci2: command tx timeout [ 66.300121][ T7150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.308075][ T7150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 66.308113][ T7150] System zones: 1-12 [ 66.310118][ T7150] EXT4-fs (loop5): 1 truncate cleaned up [ 66.310731][ T7150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.330163][ T7150] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.703158][ T7235] __nla_validate_parse: 6 callbacks suppressed [ 66.703177][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.406'. [ 66.898257][ T7267] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.910195][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.412'. [ 66.963263][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.012988][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.043515][ T7281] set_capacity_and_notify: 1 callbacks suppressed [ 67.043529][ T7281] loop8: detected capacity change from 0 to 512 [ 67.083034][ T7281] EXT4-fs warning (device loop8): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 67.096052][ T7285] loop5: detected capacity change from 0 to 512 [ 67.108447][ T7285] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.127653][ T7285] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.416: Invalid block bitmap block 0 in block_group 0 [ 67.127677][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.127906][ T7285] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 67.127918][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.128036][ T7285] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.416: attempt to clear invalid blocks 983261 len 1 [ 67.128051][ T7285] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.128245][ T7285] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.416: Invalid inode table block 0 in block_group 0 [ 67.128257][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.134446][ T7285] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 67.134467][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.134973][ C0] EXT4-fs (loop5): error count since last fsck: 5 [ 67.134990][ C0] EXT4-fs (loop5): initial error at time 67: ext4_read_block_bitmap_nowait:487 [ 67.135004][ C0] EXT4-fs (loop5): last error at time 67: ext4_reserve_inode_write:6522 [ 67.146802][ T7285] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 67.146823][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.147012][ T7285] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.416: Invalid inode table block 0 in block_group 0 [ 67.147026][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.147142][ T7285] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 67.147151][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.147257][ T7285] EXT4-fs error (device loop5): ext4_truncate:4721: inode #11: comm syz.5.416: mark_inode_dirty error [ 67.147268][ T7285] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.147380][ T7285] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 67.147388][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.147498][ T7285] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.416: Invalid inode table block 0 in block_group 0 [ 67.147509][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 67.147648][ T7285] EXT4-fs (loop5): 1 truncate cleaned up [ 67.148366][ T7285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.166998][ T7285] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.416: Invalid inode bitmap blk 0 in block_group 0 [ 67.167489][ T7285] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.416: Invalid inode table block 0 in block_group 0 [ 67.167953][ T7285] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.416: Invalid inode table block 0 in block_group 0 [ 67.260743][ T7287] sctp: [Deprecated]: syz.7.415 (pid 7287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.260743][ T7287] Use struct sctp_sack_info instead [ 67.342148][ T7312] lo speed is unknown, defaulting to 1000 [ 67.342447][ T7312] lo speed is unknown, defaulting to 1000 [ 67.348623][ T7312] lo speed is unknown, defaulting to 1000 [ 67.356663][ T7312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.367979][ T7312] infiniband Syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 67.540215][ T7312] lo speed is unknown, defaulting to 1000 [ 67.540582][ T7312] lo speed is unknown, defaulting to 1000 [ 67.540931][ T7312] lo speed is unknown, defaulting to 1000 [ 67.541243][ T7312] lo speed is unknown, defaulting to 1000 [ 67.541555][ T7312] lo speed is unknown, defaulting to 1000 [ 67.541867][ T7312] lo speed is unknown, defaulting to 1000 [ 67.571455][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 67.571470][ T30] audit: type=1400 audit(67.560:46): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=7298 comm="syz.3.420" name="file1" dev="tmpfs" ino=804 [ 67.573626][ T7317] pimreg: tun_chr_ioctl cmd 2147767520 [ 67.923156][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.971400][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 68.325728][ T4720] Bluetooth: hci2: command tx timeout [ 68.877271][ T7426] binder: BINDER_SET_CONTEXT_MGR already set [ 68.877283][ T7426] binder: 7425:7426 ioctl 4018620d 200000c0 returned -16 [ 68.878603][ T7426] binder: BINDER_SET_CONTEXT_MGR already set [ 68.878610][ T7426] binder: 7425:7426 ioctl 4018620d 20000200 returned -16 [ 68.878784][ T7426] binder: 7425:7426 got transaction to invalid handle, 1 [ 68.878795][ T7426] binder: 7425:7426 cannot find target node [ 68.878807][ T7426] binder: 7425:7426 transaction call to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3253 [ 68.879277][ T7426] binder: 7425:7426 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.879288][ T7426] binder: 7426 RLIMIT_NICE not set [ 68.910239][ T7429] loop5: detected capacity change from 0 to 1024 [ 68.910777][ T7429] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.910796][ T7429] EXT4-fs: Ignoring removed oldalloc option [ 68.924895][ T5358] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.936335][ T7435] binder: 7425:7435 got transaction to invalid handle, 3 [ 68.936354][ T7435] binder: 7425:7435 cannot find target node [ 68.936371][ T7435] binder: 7425:7435 transaction call to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3253 [ 68.936489][ T7435] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.937609][ T7429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.939900][ T7435] binder: 7425:7435 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.939917][ T7435] binder: 7435 RLIMIT_NICE not set [ 68.940418][ T7435] binder: 7425:7435 got reply transaction with no transaction stack [ 68.940435][ T7435] binder: 7425:7435 transaction reply to 0:0 failed 8/29201/-71, code 0 size 0-0 line 3156 [ 68.942707][ T7429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.020562][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.441'. [ 69.022172][ T7448] loop5: detected capacity change from 0 to 128 [ 69.043271][ T7448] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 69.082775][ T7450] Injecting memory failure for pfn 0x1353a5 at process virtual address 0x20000000 [ 69.090450][ T7450] Memory failure: 0x1353a5: Sending SIGBUS to syz.5.442:7450 due to hardware memory corruption [ 69.090488][ T7450] Memory failure: 0x1353a5: recovery action for unsplit thp: Failed [ 69.127312][ T7455] loop5: detected capacity change from 0 to 512 [ 69.151990][ T7455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.177381][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.252986][ T7464] loop5: detected capacity change from 0 to 256 [ 69.263569][ T7464] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.273980][ T7464] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 69.273998][ T7464] FAT-fs (loop5): Filesystem has been set read-only [ 69.281513][ T7468] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 69.535693][ T7471] SET target dimension over the limit! [ 69.716809][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.721708][ T7486] overlayfs: failed to clone upperpath [ 69.902914][ T7521] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 69.948997][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.457'. [ 69.983568][ T7534] netlink: 'syz.4.458': attribute type 3 has an invalid length. [ 70.159213][ T7557] loop3: detected capacity change from 0 to 512 [ 70.167828][ T7557] EXT4-fs: Ignoring removed nobh option [ 70.167860][ T7557] ext4: Unknown parameter 'permit_directio' [ 70.172794][ T7561] loop5: detected capacity change from 0 to 256 [ 70.264361][ T7571] loop5: detected capacity change from 0 to 128 [ 70.330927][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 70.330953][ T7578] netlink: 'syz.3.474': attribute type 30 has an invalid length. [ 70.334358][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 70.334376][ T7578] netlink: 'syz.3.474': attribute type 30 has an invalid length. [ 70.365122][ T5358] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.365156][ T5358] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.365180][ T5358] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.365196][ T5358] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.428934][ T7582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 70.446412][ T7582] vlan2: entered allmulticast mode [ 70.446638][ T7582] bond0: entered allmulticast mode [ 70.642800][ T7590] netlink: 'syz.8.477': attribute type 1 has an invalid length. [ 70.643171][ T7590] netlink: 52 bytes leftover after parsing attributes in process `syz.8.477'. [ 70.691809][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.8.479'. [ 70.825081][ T7606] loop5: detected capacity change from 0 to 512 [ 70.838520][ T7606] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.483: inode has both inline data and extents flags [ 70.838546][ T7606] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.838727][ T7606] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.483: couldn't read orphan inode 15 (err -117) [ 70.838743][ T7606] loop5: lost filesystem error report for type 5 error -117 [ 70.839403][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.896834][ T7606] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 70.900443][ T7606] batadv1: entered promiscuous mode [ 70.900455][ T7606] batadv1: entered allmulticast mode [ 71.036856][ T7630] netlink: 'syz.8.487': attribute type 15 has an invalid length. [ 71.078374][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.152333][ T7642] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 71.189196][ T7648] vfat: Unknown parameter 'fsmagic' [ 71.246921][ T7648] netlink: 'syz.5.490': attribute type 10 has an invalid length. [ 71.248849][ T7648] team0: Device veth0_vlan failed to register rx_handler [ 71.390849][ T7668] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 71.849669][ T7732] xt_hashlimit: size too large, truncated to 1048576 [ 71.999550][ T7738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.004233][ T7737] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.509: corrupted xattr block 33: invalid header [ 72.014486][ T7737] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.509: corrupted xattr block 33: invalid header [ 72.020392][ T7737] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.509: corrupted xattr block 33: invalid header [ 72.038429][ T7746] fuse: Bad value for 'fd' [ 72.039322][ T7746] __nla_validate_parse: 3 callbacks suppressed [ 72.039332][ T7746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.511'. [ 72.039344][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 72.067657][ T7737] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.509: corrupted xattr block 33: invalid header [ 72.073824][ T7737] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.509: corrupted xattr block 33: invalid header [ 72.074197][ T7737] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 72.074314][ T7737] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 72.074326][ T7737] EXT4-fs (loop8): This should not happen!! Data will be lost [ 72.074326][ T7737] [ 72.074335][ T7737] EXT4-fs (loop8): Total free blocks count 0 [ 72.074342][ T7737] EXT4-fs (loop8): Free/Dirty block details [ 72.092340][ T7737] EXT4-fs (loop8): free_blocks=65280 [ 72.092364][ T7737] EXT4-fs (loop8): dirty_blocks=8 [ 72.092373][ T7737] EXT4-fs (loop8): Block reservation details [ 72.092380][ T7737] EXT4-fs (loop8): i_reserved_data_blocks=8 [ 72.108384][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.123261][ T7748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.513'. [ 72.190229][ T7759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.323815][ T7771] set_capacity_and_notify: 4 callbacks suppressed [ 72.323829][ T7771] loop8: detected capacity change from 0 to 512 [ 72.327003][ T7771] ext4: Unknown parameter 'abort2' [ 72.359344][ T7773] loop8: detected capacity change from 0 to 256 [ 72.460186][ T7779] loop8: detected capacity change from 0 to 256 [ 72.460612][ T7779] vfat: Unknown parameter 'io[arset' [ 72.891845][ T7802] loop3: detected capacity change from 0 to 1024 [ 72.893422][ T7802] No control pipe specified [ 72.955234][ T7813] netlink: 'syz.5.529': attribute type 11 has an invalid length. [ 72.955249][ T7813] netlink: 32 bytes leftover after parsing attributes in process `syz.5.529'. [ 72.955402][ T7813] binder: 7811:7813 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 72.955414][ T7813] binder: 7811:7813 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.955425][ T7813] binder: 7813 RLIMIT_NICE not set [ 72.955436][ T7813] binder: 7811:7813 ioctl c0306201 20000340 returned -14 [ 72.997645][ T7817] loop3: detected capacity change from 0 to 256 [ 73.017964][ T7820] batman_adv: batadv0: Adding interface: dummy0 [ 73.017977][ T7820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.017992][ T7820] batman_adv: batadv0: Interface activated: dummy0 [ 73.039851][ T7820] batadv0: mtu less than device minimum [ 73.041723][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.043375][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.044991][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.046563][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.048144][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.049708][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.051274][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.052842][ T7820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.166532][ T7835] loop3: detected capacity change from 0 to 512 [ 73.168338][ T7835] ext2: Unknown parameter 'euid' [ 73.199669][ T7845] fuse: Bad value for 'fd' [ 73.223440][ T7844] binder: 7843:7844 ioctl c018620b 0 returned -14 [ 73.265024][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.265046][ T7849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.265055][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.265416][ T7849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.265426][ T7849] netlink: 104 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.275715][ T7852] FAULT_INJECTION: forcing a failure. [ 73.275715][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.275740][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.8.537 Tainted: G L syzkaller #0 PREEMPT [ 73.275753][ T7852] Tainted: [L]=SOFTLOCKUP [ 73.275757][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.275763][ T7852] Call trace: [ 73.275766][ T7852] show_stack+0x2c/0x3c (C) [ 73.275785][ T7852] __dump_stack+0x30/0x40 [ 73.275798][ T7852] dump_stack_lvl+0xd8/0x12c [ 73.275810][ T7852] dump_stack+0x1c/0x28 [ 73.275821][ T7852] should_fail_ex+0x418/0x58c [ 73.275835][ T7852] should_fail+0x14/0x24 [ 73.275847][ T7852] should_fail_usercopy+0x20/0x30 [ 73.275855][ T7852] _inline_copy_from_user+0x3c/0x188 [ 73.275866][ T7852] memdup_user+0x78/0xec [ 73.275874][ T7852] strndup_user+0x78/0xe0 [ 73.275883][ T7852] __arm64_sys_mount+0xdc/0x388 [ 73.275895][ T7852] invoke_syscall+0x98/0x244 [ 73.275908][ T7852] el0_svc_common+0xec/0x23c [ 73.275920][ T7852] do_el0_svc+0x4c/0x5c [ 73.275931][ T7852] el0_svc+0x60/0x1d8 [ 73.275944][ T7852] el0t_64_sync_handler+0x44/0x104 [ 73.275957][ T7852] el0t_64_sync+0x198/0x19c [ 73.347858][ T7860] loop3: detected capacity change from 0 to 512 [ 73.371152][ T7865] loop8: detected capacity change from 0 to 512 [ 73.371489][ T7865] EXT4-fs: Ignoring removed bh option [ 73.371503][ T7865] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.379900][ T7865] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 73.389423][ T7865] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 73.389531][ T7865] EXT4-fs (loop8): orphan cleanup on readonly fs [ 73.389882][ T7865] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 73.389910][ T7865] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 73.389939][ T7865] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.544: Failed to acquire dquot type 1 [ 73.389950][ T7865] loop8: lost filesystem error report for type 5 error -5 [ 73.390396][ T7865] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.544: Invalid block bitmap block 0 in block_group 0 [ 73.390409][ T7865] loop8: lost filesystem error report for type 5 error -117 [ 73.394655][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 73.394673][ C0] EXT4-fs (loop8): last error at time 73: ext4_read_block_bitmap_nowait:487 [ 73.401798][ T7865] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.544: Invalid block bitmap block 0 in block_group 0 [ 73.401821][ T7865] loop8: lost filesystem error report for type 5 error -117 [ 73.405357][ T7865] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:487: comm syz.8.544: Invalid block bitmap block 0 in block_group 0 [ 73.405375][ T7865] loop8: lost filesystem error report for type 5 error -117 [ 73.408888][ T7865] Quota error (device loop8): write_blk: dquota write failed [ 73.408941][ T7865] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 73.408957][ T7865] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.544: Failed to acquire dquot type 1 [ 73.408968][ T7865] loop8: lost filesystem error report for type 5 error -28 [ 73.412566][ T7865] Quota error (device loop8): write_blk: dquota write failed [ 73.412610][ T7865] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 73.412626][ T7865] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.544: Failed to acquire dquot type 1 [ 73.412638][ T7865] loop8: lost filesystem error report for type 5 error -28 [ 73.415147][ T7865] EXT4-fs (loop8): 1 orphan inode deleted [ 73.416435][ T7865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.421883][ T7865] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.544: deleted inode referenced: 12 [ 73.424330][ T7865] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.544: deleted inode referenced: 12 [ 73.449872][ T7865] 9p: Bad value for 'rfdno' [ 73.482793][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.557536][ T7868] Invalid logical block size (2) [ 73.574648][ T5361] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.574725][ T5361] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.574741][ T5361] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.574756][ T5361] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.586336][ T7874] loop3: detected capacity change from 0 to 512 [ 73.586989][ T7874] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.597782][ T7874] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #11: comm syz.3.546: casefold flag without casefold feature [ 73.597801][ T7874] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.597975][ T7874] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.546: couldn't read orphan inode 11 (err -117) [ 73.597987][ T7874] loop3: lost filesystem error report for type 5 error -117 [ 73.630654][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.668445][ T4473] kernel read not supported for file [fscontext] (pid: 4473 comm: kworker/1:3) [ 73.889484][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.961145][ T7902] loop8: detected capacity change from 0 to 8192 [ 74.119849][ T7934] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.127693][ T7934] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 74.127718][ T7934] FAT-fs (loop8): Filesystem has been set read-only [ 74.128442][ T7934] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 74.129398][ T7934] FAT-fs (loop8): error, clusters badly computed (3 != 2) [ 74.130876][ T7934] FAT-fs (loop8): error, clusters badly computed (4 != 3) [ 74.131162][ T7934] FAT-fs (loop8): error, clusters badly computed (5 != 4) [ 74.131410][ T7934] FAT-fs (loop8): error, clusters badly computed (6 != 5) [ 74.131695][ T7934] FAT-fs (loop8): error, clusters badly computed (7 != 6) [ 74.132253][ T7934] FAT-fs (loop8): error, clusters badly computed (8 != 7) [ 74.135822][ T7934] FAT-fs (loop8): error, clusters badly computed (9 != 8) [ 74.136459][ T7934] FAT-fs (loop8): error, clusters badly computed (10 != 9) [ 74.444256][ T7961] Dev loop9: unable to read RDB block 7 [ 74.444279][ T7961] loop9: unable to read partition table [ 74.444340][ T7961] loop9: partition table beyond EOD, truncated [ 74.444362][ T7961] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 74.455160][ T7964] FAULT_INJECTION: forcing a failure. [ 74.455160][ T7964] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.455181][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.5.562 Tainted: G L syzkaller #0 PREEMPT [ 74.455193][ T7964] Tainted: [L]=SOFTLOCKUP [ 74.455196][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.455201][ T7964] Call trace: [ 74.455204][ T7964] show_stack+0x2c/0x3c (C) [ 74.455223][ T7964] __dump_stack+0x30/0x40 [ 74.455236][ T7964] dump_stack_lvl+0xd8/0x12c [ 74.455246][ T7964] dump_stack+0x1c/0x28 [ 74.455255][ T7964] should_fail_ex+0x418/0x58c [ 74.455269][ T7964] should_fail+0x14/0x24 [ 74.455279][ T7964] get_futex_key+0xd0c/0x12b0 [ 74.455289][ T7964] futex_wake+0x10c/0x594 [ 74.455298][ T7964] do_futex+0x2c4/0x378 [ 74.455306][ T7964] mm_exit_exec_release+0x190/0x27c [ 74.455314][ T7964] exit_mm+0x50/0x1f0 [ 74.455324][ T7964] do_exit+0x524/0x1a74 [ 74.455334][ T7964] do_group_exit+0x198/0x238 [ 74.455341][ T7964] get_signal+0xfb0/0x1094 [ 74.455348][ T7964] arch_do_signal_or_restart+0x288/0x444c [ 74.455358][ T7964] exit_to_user_mode_loop+0x70/0x17c [ 74.455368][ T7964] el0_svc+0x12c/0x1d8 [ 74.455379][ T7964] el0t_64_sync_handler+0x44/0x104 [ 74.455389][ T7964] el0t_64_sync+0x198/0x19c [ 74.475194][ T7970] Invalid ELF header type: 3 != 1 [ 74.475663][ T7969] Invalid ELF header type: 3 != 1 [ 74.485561][ T4709] Bluetooth: hci2: command 0x0405 tx timeout [ 74.536012][ T7977] ext4: Unknown parameter 'seclabel' [ 74.542734][ T7980] netlink: 'syz.7.568': attribute type 1 has an invalid length. [ 74.542753][ T7980] netlink: 'syz.7.568': attribute type 2 has an invalid length. [ 74.542764][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.568'. [ 74.604639][ T7975] 9p: Bad value for 'rfdno' [ 74.706080][ T7988] netlink: 'syz.7.570': attribute type 1 has an invalid length. [ 74.707087][ T7988] overlayfs: failed to clone upperpath [ 74.811577][ T7983] veth0_macvtap: left promiscuous mode [ 74.836192][ T7983] netlink: 'syz.8.569': attribute type 1 has an invalid length. [ 75.286410][ T30] audit: type=1326 audit(75.280:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.8.579" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839788e8 code=0x7ffc0000 [ 75.286441][ T30] audit: type=1326 audit(75.280:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.8.579" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839788e8 code=0x7ffc0000 [ 75.291792][ T30] audit: type=1326 audit(75.280:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.8.579" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8395b7ac code=0x7ffc0000 [ 75.291819][ T30] audit: type=1326 audit(75.280:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.8.579" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff83979f8c code=0x7ffc0000 [ 75.425707][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.436160][ T8024] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.580: corrupted xattr block 33: invalid ea_ino [ 75.445046][ T8024] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.580: corrupted xattr block 33: invalid ea_ino [ 75.445679][ T8024] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.580: corrupted xattr block 33: invalid ea_ino [ 75.445902][ T8024] EXT4-fs error (device loop3): ext4_xattr_block_list:777: inode #15: comm syz.3.580: corrupted xattr block 33: invalid ea_ino [ 75.478019][ T8036] EXT4-fs error (device loop3): ext4_xattr_block_list:777: inode #15: comm syz.3.580: corrupted xattr block 33: invalid ea_ino [ 75.572243][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.782695][ T8055] 8021q: VLANs not supported on vcan0 [ 75.839144][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.839415][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.848496][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.848537][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.848638][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.848668][ T8062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.857812][ T8062] team0: Port device bridge0 added [ 75.907795][ T8076] validate_nla: 1 callbacks suppressed [ 75.907810][ T8076] netlink: 'syz.3.595': attribute type 15 has an invalid length. [ 75.915909][ T8076] bond0: entered promiscuous mode [ 75.915923][ T8076] bond_slave_0: entered promiscuous mode [ 75.915998][ T8076] bond_slave_1: entered promiscuous mode [ 75.916700][ T8076] batadv0: entered promiscuous mode [ 75.918136][ T8076] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 76.121125][ T8080] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.121643][ T8080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 76.121677][ T8080] System zones: 1-12 [ 76.121764][ T8080] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.122270][ T8080] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.597: invalid indirect mapped block 12 (level 1) [ 76.122284][ T8080] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.122671][ T8080] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.597: invalid indirect mapped block 2 (level 2) [ 76.122688][ T8080] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.123906][ T8080] EXT4-fs (loop3): 1 truncate cleaned up [ 76.124356][ T8080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 76.238887][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 76.289304][ T8088] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 76.289343][ T8088] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 76.495040][ T4720] Bluetooth: hci4: command 0x1003 tx timeout [ 76.495117][ T4719] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.564018][ T8104] EXT4-fs: Ignoring removed bh option [ 76.583839][ T8104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.631383][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.648726][ T8111] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 76.657484][ T8111] macvlan1: entered promiscuous mode [ 76.669573][ T8111] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 76.690983][ T8115] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 76.798014][ T8120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.802819][ T8120] batadv_slave_0: Caught tx_queue_len zero misconfig [ 76.878278][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878278][ T8130] loop3: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 76.878364][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878364][ T8130] loop3: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 76.878417][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878417][ T8130] loop3: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 76.878466][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878466][ T8130] loop3: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 76.878521][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878521][ T8130] loop3: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 76.878577][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878577][ T8130] loop3: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 76.878631][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878631][ T8130] loop3: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 76.878724][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878724][ T8130] loop3: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 76.878789][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878789][ T8130] loop3: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 76.878839][ T8130] syz.3.610: attempt to access beyond end of device [ 76.878839][ T8130] loop3: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 77.150617][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.156012][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.167313][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.167622][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.167885][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.168116][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.168358][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.168659][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.168912][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.169201][ T6738] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 77.391964][ T8136] netlink: 'syz.4.614': attribute type 21 has an invalid length. [ 77.392002][ T8136] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 77.753847][ T8149] netlink: 'syz.5.620': attribute type 142 has an invalid length. [ 78.100299][ T8176] fuse: Bad value for 'fd' [ 78.250104][ T8189] __nla_validate_parse: 9 callbacks suppressed [ 78.250119][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.634'. [ 78.269420][ T8187] net_ratelimit: 46 callbacks suppressed [ 78.269434][ T8187] openvswitch: netlink: ct_state flags b3000008 unsupported [ 78.290990][ T6738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.311106][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 78.311124][ T8191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.635'. [ 78.400856][ T5357] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.729323][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.799372][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.809454][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.853810][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.7.644'. [ 78.867008][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.887990][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.199809][ T8254] set_capacity_and_notify: 9 callbacks suppressed [ 79.199823][ T8254] loop5: detected capacity change from 0 to 2048 [ 79.249140][ T8214] lo speed is unknown, defaulting to 1000 [ 79.301173][ T8254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.323086][ T8254] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 16: comm syz.5.648: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 79.391908][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.463752][ T8283] loop5: detected capacity change from 0 to 512 [ 79.489566][ T8283] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.654: corrupted inode contents [ 79.489589][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.491883][ T8283] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #16: comm syz.5.654: mark_inode_dirty error [ 79.491925][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.492779][ T8283] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.654: corrupted inode contents [ 79.492814][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.492957][ T8283] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.654: mark_inode_dirty error [ 79.492968][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.493093][ T8283] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.654: corrupted inode contents [ 79.493103][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.493230][ T8283] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 79.493239][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 79.493347][ T8283] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #16: comm syz.5.654: corrupted inode contents [ 79.493357][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.493494][ T8283] EXT4-fs error (device loop5): ext4_truncate:4721: inode #16: comm syz.5.654: mark_inode_dirty error [ 79.493509][ T8283] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.493619][ T8283] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 79.493627][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 79.494390][ T8283] EXT4-fs (loop5): 1 truncate cleaned up [ 79.568173][ T12] __quota_error: 56 callbacks suppressed [ 79.568188][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 79.568214][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 79.568225][ T12] loop5: lost filesystem error report for type 5 error -117 [ 79.574250][ T8283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.609725][ T8282] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 79.622022][ T6000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.648908][ T8288] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 79.651239][ T8287] loop3: detected capacity change from 0 to 256 [ 79.747178][ T5357] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.869073][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.869138][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.869191][ T8214] bridge_slave_0: entered allmulticast mode [ 79.869730][ T8214] bridge_slave_0: entered promiscuous mode [ 79.880822][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.880937][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.880995][ T8214] bridge_slave_1: entered allmulticast mode [ 79.881453][ T8214] bridge_slave_1: entered promiscuous mode [ 79.898929][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.899965][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.906103][ T30] audit: type=1326 audit(79.900:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 79.916906][ T8214] team0: Port device team_slave_0 added [ 79.918166][ T8214] team0: Port device team_slave_1 added [ 79.923920][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.923929][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.923942][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.936206][ T30] audit: type=1326 audit(79.930:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 79.945548][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.945556][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.945570][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.946927][ T30] audit: type=1326 audit(79.940:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 79.953216][ T30] audit: type=1326 audit(79.940:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 79.953306][ T30] audit: type=1326 audit(79.940:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 80.136888][ T30] audit: type=1326 audit(80.130:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 80.147192][ T30] audit: type=1326 audit(80.140:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 80.147218][ T30] audit: type=1326 audit(80.140:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 80.147234][ T30] audit: type=1326 audit(80.140:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8297 comm="syz.7.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff853788e8 code=0x7ffc0000 [ 80.200524][ T8214] hsr_slave_0: entered promiscuous mode [ 80.200842][ T8214] hsr_slave_1: entered promiscuous mode [ 80.201025][ T8214] debugfs: 'hsr0' already exists in 'hsr' [ 80.201036][ T8214] Cannot create hsr debugfs directory [ 80.783699][ T8214] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 80.790406][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.791870][ T8214] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 80.813198][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.814444][ T8214] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 80.829411][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.832360][ T8214] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 80.843455][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.880512][ T8334] loop5: detected capacity change from 0 to 128 [ 80.892420][ T8334] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.980068][ T6000] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.008376][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.048209][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.058704][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.058749][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.099430][ T8347] ip_tables: iptables: counters copy to user failed while replacing table [ 81.109297][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.109324][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.132929][ T4719] Bluetooth: hci2: command tx timeout [ 81.159008][ T8345] syzkaller0: entered promiscuous mode [ 81.159025][ T8345] syzkaller0: entered allmulticast mode [ 81.174209][ T8349] loop5: detected capacity change from 0 to 1024 [ 81.210745][ T8349] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.210854][ T8349] /dev/loop5: Can't open blockdev [ 81.255608][ T8349] input: syz1 as /devices/virtual/input/input8 [ 81.381131][ T5357] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.598569][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.722137][ T8405] loop3: detected capacity change from 0 to 512 [ 81.722902][ T8405] EXT4-fs: Ignoring removed nobh option [ 81.728287][ T8405] EXT4-fs: journaled quota format not specified [ 81.745982][ T8397] veth2: entered allmulticast mode [ 81.809025][ T8214] veth0_vlan: entered promiscuous mode [ 81.811522][ T8214] veth1_vlan: entered promiscuous mode [ 81.827494][ T8214] veth0_macvtap: entered promiscuous mode [ 81.829667][ T8214] veth1_macvtap: entered promiscuous mode [ 81.833941][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.844385][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.891148][ T1184] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.891469][ T1184] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.891493][ T1184] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.891509][ T1184] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926316][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.926330][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.946446][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.946463][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.067413][ T8415] Injecting memory failure for pfn 0x15e004 at process virtual address 0x20276000 [ 82.174567][ T8421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.186742][ T8421] bond1: (slave geneve2): making interface the new active one [ 82.187379][ T8421] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.188320][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.683'. [ 82.188333][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.683'. [ 82.193213][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.210861][ T8421] bond1: (slave bond0): making interface the new active one [ 82.212145][ T8421] bond1: (slave bond0): Enslaving as an active interface with an up link [ 82.221732][ T8424] loop3: detected capacity change from 0 to 256 [ 82.267396][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.683'. [ 82.267412][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.9.683'. [ 82.328368][ T8415] Memory failure: 0x15e004: keeping poisoned page in swap cache [ 82.328500][ T8415] Memory failure: 0x15e004: recovery action for clean swapcache page: Recovered [ 82.328536][ T8415] Injecting memory failure for pfn 0x15e005 at process virtual address 0x20277000 [ 82.328597][ T8415] Memory failure: 0x15e005: keeping poisoned page in swap cache [ 82.328619][ T8415] Memory failure: 0x15e005: recovery action for clean swapcache page: Recovered [ 82.696792][ T8421] bond1 (unregistering): (slave geneve2): Releasing active interface [ 82.696817][ T8421] bond0: entered promiscuous mode [ 82.696826][ T8421] bond_slave_0: entered promiscuous mode [ 82.696889][ T8421] bond_slave_1: entered promiscuous mode [ 82.729024][ T8421] bond1 (unregistering): (slave bond0): Releasing active interface [ 82.729084][ T8421] bond0: left promiscuous mode [ 82.729092][ T8421] bond_slave_0: left promiscuous mode [ 82.729154][ T8421] bond_slave_1: left promiscuous mode [ 82.860241][ T8421] bond1 (unregistering): Released all slaves [ 82.889190][ T8425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.890855][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.892332][ T8427] bond1: (slave bond0): making interface the new active one [ 82.893299][ T8427] bond1: (slave bond0): Enslaving as an active interface with an up link [ 83.146924][ T8429] bond1 (unregistering): (slave bond0): Releasing active interface [ 83.185620][ T8429] bond1 (unregistering): Released all slaves [ 83.219165][ T4719] Bluetooth: hci2: command tx timeout [ 83.258564][ T8444] syzkaller0: entered promiscuous mode [ 83.267892][ T8444] syzkaller0: entered allmulticast mode [ 83.358045][ T5357] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.397414][ T8460] ip6t_REJECT: ECHOREPLY is not supported [ 84.164759][ T4719] Bluetooth: hci0: command 0x0401 tx timeout [ 84.165487][ T8417] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 84.360179][ T8496] bridge0: port 3(macvlan2) entered blocking state [ 84.360234][ T8496] bridge0: port 3(macvlan2) entered disabled state [ 84.360302][ T8496] macvlan2: entered allmulticast mode [ 84.360310][ T8496] bridge0: entered allmulticast mode [ 84.360329][ T8496] bridge0: entered promiscuous mode [ 84.363174][ T8496] macvlan2: left allmulticast mode [ 84.363187][ T8496] bridge0: left allmulticast mode [ 84.394014][ T4801] bridge0: left promiscuous mode [ 84.402506][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.700'. [ 84.513755][ T5357] bridge_slave_1: left allmulticast mode [ 84.513778][ T5357] bridge_slave_1: left promiscuous mode [ 84.513867][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.529226][ T5357] bridge_slave_0: left allmulticast mode [ 84.529245][ T5357] bridge_slave_0: left promiscuous mode [ 84.529318][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.691076][ T8515] loop9: detected capacity change from 0 to 512 [ 84.723119][ T8515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.785986][ T8214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.900156][ T5357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.920919][ T8526] loop3: detected capacity change from 0 to 512 [ 84.927341][ T8526] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.928069][ T8526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 84.928154][ T8526] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.928922][ T8526] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.708: Allocating blocks 41-42 which overlap fs metadata [ 84.928936][ T8526] loop3: lost filesystem error report for type 5 error -117 [ 84.929507][ T8526] EXT4-fs (loop3): Remounting filesystem read-only [ 84.929577][ T8526] __quota_error: 25 callbacks suppressed [ 84.929585][ T8526] Quota error (device loop3): write_blk: dquota write failed [ 84.929612][ T8526] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 84.929667][ T8526] EXT4-fs (loop3): 1 truncate cleaned up [ 84.935475][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.935486][ C0] EXT4-fs (loop3): initial error at time 84: ext4_mb_mark_diskspace_used:4223 [ 84.935499][ C0] EXT4-fs (loop3): last error at time 84: ext4_mb_mark_diskspace_used:4223 [ 84.964159][ T5357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.972859][ T5357] bond0 (unregistering): Released all slaves [ 84.989700][ T8526] EXT4-fs (loop3): pa 000000009fb69fff: logic 1, phys. 41, len 23 [ 84.990202][ T8526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.042246][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.182599][ T8540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.706'. [ 85.207454][ T8549] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.207472][ T8549] overlayfs: failed to set xattr on upper [ 85.207477][ T8549] overlayfs: ...falling back to redirect_dir=nofollow. [ 85.207482][ T8549] overlayfs: ...falling back to uuid=null. [ 85.211172][ T8549] overlayfs: failed lookup in lower (/, name='proc', err=-40): overlapping layers [ 85.214891][ T8549] overlayfs: failed lookup in lower (/, name='proc', err=-40): overlapping layers [ 85.225569][ T8549] overlayfs: failed lookup in lower (/, name='proc', err=-40): overlapping layers [ 85.284836][ T4719] Bluetooth: hci2: command tx timeout [ 85.328590][ T8557] overlayfs: failed to clone upperpath [ 85.338400][ T8546] loop3: detected capacity change from 0 to 128 [ 85.340436][ T8546] FAT-fs (loop3): bogus number of FAT structure [ 85.340458][ T8546] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 85.340466][ T8546] FAT-fs (loop3): Can't find a valid FAT filesystem [ 85.555547][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 85.602921][ T8565] loop5: detected capacity change from 0 to 512 [ 85.612088][ T12] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615374][ T5358] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615568][ T5358] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615585][ T5358] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615600][ T5358] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615615][ T5358] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615629][ T5358] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615642][ T5358] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615657][ T5358] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615670][ T5358] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615684][ T5358] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615698][ T5358] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615717][ T5358] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615732][ T5358] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615747][ T5358] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615762][ T5358] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615776][ T5358] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615790][ T5358] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615804][ T5358] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.615818][ T5358] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 85.819678][ T8523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 85.819725][ T8523] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.860782][ T8523] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.909963][ T8523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.910011][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.935590][ T8587] ip6gretap0: entered promiscuous mode [ 85.949446][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.024277][ T8597] netlink: 'syz.9.726': attribute type 2 has an invalid length. [ 86.024293][ T8597] netlink: 224 bytes leftover after parsing attributes in process `syz.9.726'. [ 86.108152][ T4398] 8021q: adding VLAN 0 to HW filter on device eth16 [ 86.281958][ T8608] netlink: 'syz.4.730': attribute type 5 has an invalid length. [ 86.354441][ T4719] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 86.375675][ T4719] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 86.450609][ T8647] netlink: 'syz.9.736': attribute type 2 has an invalid length. [ 86.478765][ T8651] lo speed is unknown, defaulting to 1000 [ 86.544532][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 86.684462][ T8671] syzkaller0: entered promiscuous mode [ 86.684478][ T8671] syzkaller0: entered allmulticast mode [ 86.766446][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 87.215944][ T8678] syz.4.743 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.863674][ T4719] Bluetooth: hci5: command 0x0c1a tx timeout [ 87.865445][ T30] audit: type=1326 audit(87.860:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8669 comm="syz.3.741" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab9788e8 code=0x0 [ 87.924762][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.676835][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 88.883943][ T8722] syzkaller1: entered promiscuous mode [ 88.883959][ T8722] syzkaller1: entered allmulticast mode [ 89.047796][ T5357] hsr_slave_0: left promiscuous mode [ 89.051829][ T5357] hsr_slave_1: left promiscuous mode [ 89.052180][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.052192][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.062184][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.062199][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.093561][ T5357] veth1_macvtap: left promiscuous mode [ 89.093646][ T5357] veth1_vlan: left promiscuous mode [ 89.093688][ T5357] veth0_vlan: left promiscuous mode [ 89.163427][ T8727] FAULT_INJECTION: forcing a failure. [ 89.163427][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 89.163451][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz.5.751 Tainted: G L syzkaller #0 PREEMPT [ 89.163465][ T8727] Tainted: [L]=SOFTLOCKUP [ 89.163468][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 89.163474][ T8727] Call trace: [ 89.163477][ T8727] show_stack+0x2c/0x3c (C) [ 89.163496][ T8727] __dump_stack+0x30/0x40 [ 89.163508][ T8727] dump_stack_lvl+0xd8/0x12c [ 89.163520][ T8727] dump_stack+0x1c/0x28 [ 89.163531][ T8727] should_fail_ex+0x418/0x58c [ 89.163545][ T8727] should_failslab+0xc4/0x120 [ 89.163558][ T8727] __kmalloc_cache_noprof+0x94/0x5fc [ 89.163568][ T8727] tipc_nametbl_insert_publ+0x4f8/0xe44 [ 89.163581][ T8727] tipc_nametbl_publish+0x10c/0x250 [ 89.163594][ T8727] tipc_sk_publish+0x17c/0x380 [ 89.163604][ T8727] tipc_sk_join+0x2d8/0x508 [ 89.163615][ T8727] tipc_setsockopt+0x570/0x7c0 [ 89.163626][ T8727] do_sock_setsockopt+0x1f0/0x330 [ 89.163639][ T8727] __sys_setsockopt+0x104/0x170 [ 89.163650][ T8727] __arm64_sys_setsockopt+0xc8/0xe4 [ 89.163661][ T8727] invoke_syscall+0x98/0x244 [ 89.163673][ T8727] el0_svc_common+0xec/0x23c [ 89.163685][ T8727] do_el0_svc+0x4c/0x5c [ 89.163696][ T8727] el0_svc+0x60/0x1d8 [ 89.163717][ T8727] el0t_64_sync_handler+0x44/0x104 [ 89.163730][ T8727] el0t_64_sync+0x198/0x19c [ 89.163740][ T8727] tipc: Failed to bind to 30739,3,3 [ 89.278175][ T8749] ip_tables: iptables: counters copy to user failed while replacing table [ 89.309688][ T8751] 9p: Bad value for 'wfdno' [ 89.932864][ T4719] Bluetooth: hci5: command 0x0c1a tx timeout [ 90.076840][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.021791][ T4719] Bluetooth: hci5: command 0x0c1a tx timeout [ 92.458330][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.638172][ C1] sched: DL replenish lagged too much [ 120.810045][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 30s! [ 120.810090][ C0] Showing busy workqueues and worker pools: [ 120.810096][ C0] workqueue events: flags=0x100 [ 120.810140][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=24 refcnt=26 [ 120.810157][ C0] in-flight: 4896:uhid_device_add_worker for 31s BAR(8748) [ 120.810185][ C0] pending: 8*nsim_dev_hwstats_traffic_work, release_one_tty, jump_label_update_timeout, psi_avgs_work, ovs_dp_masks_rebalance, delayed_vfree_work, vmstat_shepherd, 2*psi_avgs_work, 2*ovs_dp_masks_rebalance, psi_avgs_work, ovs_dp_masks_rebalance, free_obj_work, ovs_dp_masks_rebalance, drm_fb_helper_damage_work [ 120.810292][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=5 refcnt=6 [ 120.810308][ C0] in-flight: 55:xfrm_state_gc_task for 15s xfrm_state_gc_task [ 120.810333][ C0] pending: 2*nsim_dev_hwstats_traffic_work, key_garbage_collector [ 120.810352][ C0] workqueue events_unbound: flags=0x2 [ 120.810357][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=16 refcnt=17 [ 120.810371][ C0] in-flight: 5364:cfg80211_wiphy_work for 18s ,40:cfg80211_wiphy_work for 19s ,5361:linkwatch_event for 23s ,5356:cfg80211_wiphy_work for 7s ,5360:cfg80211_wiphy_work for 17s ,12:nsim_dev_trap_report_work for 0s ,1238:cfg80211_wiphy_work for 21s ,98:cfg80211_wiphy_work for 5s [ 120.810470][ C0] pending: nsim_dev_trap_report_work, 4*cfg80211_wiphy_work, macvlan_process_broadcast, 2*cfg80211_wiphy_work [ 120.810509][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=12 refcnt=13 [ 120.810522][ C0] in-flight: 5359:nsim_dev_trap_report_work for 0s [ 120.810536][ C0] pending: nsim_dev_trap_report_work, crng_reseed, 2*nsim_dev_trap_report_work, flush_memcg_stats_dwork, 2*nsim_dev_trap_report_work, macvlan_process_broadcast, toggle_allocation_gate, macvlan_process_broadcast, nsim_dev_trap_report_work [ 120.810596][ C0] workqueue events_power_efficient: flags=0x82 [ 120.810601][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 120.810613][ C0] in-flight: 1184:crda_timeout_work for 22s [ 120.810628][ C0] pending: fb_flashcursor, neigh_periodic_work [ 120.810647][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=6 [ 120.810660][ C0] pending: do_cache_clean, wg_ratelimiter_gc_entries, nf_flow_offload_work_gc BAR(5357), neigh_managed_work [ 120.810696][ C0] workqueue events_dfl_long: flags=0x2 [ 120.810702][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=8 refcnt=9 [ 120.810721][ C0] pending: 8*defense_work_handler [ 120.810736][ C0] workqueue netns: flags=0x6000a [ 120.810741][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 120.810754][ C0] in-flight: 5357:cleanup_net for 42s [ 120.810771][ C0] inactive: cleanup_net [ 120.810783][ C0] workqueue mm_percpu_wq: flags=0x108 [ 120.810788][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.810803][ C0] pending: vmstat_update [ 120.810820][ C0] workqueue writeback: flags=0x4a [ 120.810825][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.810838][ C0] in-flight: 5358:wb_workfn for 30s [ 120.810856][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.810869][ C0] pending: wb_update_bandwidth_workfn [ 120.810889][ C0] workqueue gid-cache-wq: flags=0x20002 [ 120.810894][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 120.810907][ C0] pending: update_gid_event_work_handler [ 120.810951][ C0] workqueue bat_events: flags=0x6000a [ 120.810956][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=46 [ 120.810969][ C0] in-flight: 14:batadv_tt_purge for 23s [ 120.810984][ C0] inactive: 6*batadv_mcast_mla_update, 4*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge [ 120.811143][ C0] workqueue ext4-rsv-conversion: flags=0xa [ 120.811149][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811162][ C0] pending: ext4_end_io_rsv_work [ 120.811178][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.811183][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811196][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811209][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.811214][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811227][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811240][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.811245][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811257][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811270][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.811275][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811290][ C0] pending: wg_packet_encrypt_worker [ 120.811301][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.811306][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811318][ C0] pending: wg_packet_handshake_send_worker [ 120.811330][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.811335][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.811349][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.811366][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.811370][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811384][ C0] pending: wg_packet_handshake_receive_worker [ 120.811396][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.811400][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811413][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811430][ C0] workqueue bond0: flags=0x2000a [ 120.811434][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 120.811447][ C0] pending: bond_arp_monitor [ 120.811461][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.811465][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811480][ C0] pending: wg_packet_handshake_receive_worker [ 120.811491][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.811496][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.811510][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.811532][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.811536][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811549][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811562][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.811567][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.811581][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.811597][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.811603][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811617][ C0] in-flight: 26:wg_packet_handshake_receive_worker for 3s [ 120.811633][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.811638][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811650][ C0] pending: wg_packet_handshake_send_worker [ 120.811663][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.811668][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811682][ C0] pending: wg_packet_encrypt_worker [ 120.811696][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.811701][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811720][ C0] pending: wg_packet_handshake_send_worker [ 120.811733][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.811737][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811750][ C0] pending: wg_packet_handshake_send_worker [ 120.811760][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811773][ C0] pending: wg_packet_handshake_send_worker [ 120.811785][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.811790][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811803][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.811824][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.811830][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811844][ C0] in-flight: 4817:wg_packet_handshake_receive_worker for 2s [ 120.811861][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.811865][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811880][ C0] pending: wg_packet_handshake_receive_worker [ 120.811890][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811904][ C0] in-flight: 4473:wg_packet_handshake_receive_worker for 14s [ 120.811921][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.811927][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.811939][ C0] pending: wg_packet_handshake_send_worker [ 120.811950][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.811955][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.811969][ C0] pending: wg_packet_encrypt_worker [ 120.811981][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.811986][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.811999][ C0] pending: 2*wg_packet_handshake_send_worker [ 120.812012][ C0] workqueue krds_cp_wq#1/0: flags=0x20002 [ 120.812016][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 120.812029][ C0] pending: rds_connect_worker [ 120.812045][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=30s workers=9 idle: 4809 4794 4802 866 4810 4801 10 9 [ 120.812100][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=8 idle: 4897 24 6746 4903 [ 120.812135][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=17 idle: 49 3732 5362 928 [ 120.812169][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.812174][ C0] pool 2: [ 120.812177][ C0] task:kworker/0:8 state:R running task stack:0 pid:4896 tgid:4896 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 120.812192][ C0] Workqueue: events uhid_device_add_worker [ 120.812201][ C0] Call trace: [ 120.812205][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.812218][ C0] __schedule+0x135c/0x2b00 [ 120.812227][ C0] preempt_schedule_common+0xd4/0x190 [ 120.812238][ C0] preempt_schedule+0x60/0x78 [ 120.812247][ C0] _raw_spin_unlock_irqrestore+0x94/0x98 [ 120.812256][ C0] debug_check_no_obj_freed+0x2c8/0x3a4 [ 120.812267][ C0] __free_frozen_pages+0x470/0xbd0 [ 120.812276][ C0] free_frozen_pages+0x14/0x20 [ 120.812283][ C0] __free_slab+0x11c/0x1b4 [ 120.812292][ C0] free_slab+0x2c/0x154 [ 120.812301][ C0] discard_slab+0x48/0x90 [ 120.812311][ C0] __slab_free+0x1a0/0x1d0 [ 120.812319][ C0] ___cache_free+0x80/0x94 [ 120.812327][ C0] qlist_free_all+0xb4/0x120 [ 120.812337][ C0] kasan_quarantine_reduce+0x118/0x124 [ 120.812347][ C0] __kasan_slab_alloc+0x2c/0x88 [ 120.812356][ C0] kmem_cache_alloc_noprof+0x268/0x5d4 [ 120.812364][ C0] __kernfs_new_node+0xf0/0x7d8 [ 120.812374][ C0] kernfs_new_node+0xe8/0x130 [ 120.812383][ C0] kernfs_create_link+0x98/0x1e4 [ 120.812394][ C0] sysfs_do_create_link_sd+0x8c/0x120 [ 120.812401][ C0] sysfs_create_link+0x74/0x94 [ 120.812409][ C0] device_add_class_symlinks+0xb8/0x254 [ 120.812418][ C0] device_add+0x3fc/0x9e0 [ 120.812427][ C0] device_create_groups_vargs+0x1fc/0x298 [ 120.812437][ C0] device_create+0xf4/0x148 [ 120.812445][ C0] hidraw_connect+0x124/0x2f0 [ 120.812453][ C0] hid_connect+0x2a8/0xe20 [ 120.812462][ C0] hidpp_probe+0xe30/0x132c [ 120.812473][ C0] hid_device_probe+0x35c/0x61c [ 120.812482][ C0] really_probe+0x29c/0x800 [ 120.812490][ C0] __driver_probe_device+0x1e0/0x350 [ 120.812498][ C0] driver_probe_device+0x6c/0x19c [ 120.812506][ C0] __device_attach_driver+0x198/0x2f8 [ 120.812514][ C0] bus_for_each_drv+0x144/0x1dc [ 120.812524][ C0] __device_attach+0x248/0x390 [ 120.812532][ C0] device_initial_probe+0x90/0xc8 [ 120.812539][ C0] bus_probe_device+0x58/0x120 [ 120.812550][ C0] device_add+0x6cc/0x9e0 [ 120.812558][ C0] hid_add_device+0x254/0x3b8 [ 120.812568][ C0] uhid_device_add_worker+0x4c/0xf8 [ 120.812576][ C0] process_scheduled_works+0x91c/0x1250 [ 120.812586][ C0] worker_thread+0x798/0xbd0 [ 120.812595][ C0] kthread+0x304/0x3d4 [ 120.812604][ C0] ret_from_fork+0x10/0x20 [ 127.255633][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.755974][ T1594] ieee802154 phy1 wpan1: encryption failed: -22