last executing test programs: 8.186437985s ago: executing program 4 (id=94): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={r1, r2, 0x7, 0x1, 0x1}) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r3, r0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xc0102, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async) close_range(r4, r5, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000400), 0x2, 0x0) (async) ioctl$FIONCLEX(r5, 0x5450) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x4b87}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000004c0)={r8, 0x6ed}, 0x8) (async) r9 = syz_open_pts(r5, 0x41) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r9}, 0x8) (async) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xf93, 0xfffd, 0x1, 0x401, 0xc0, 0x5, 0x1}, 0x9c) (async) fchmod(r3, 0x100) (async) connect$unix(r5, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) vmsplice(r10, &(0x7f0000000700)=[{&(0x7f00000006c0)="cca3f006370b2ee808ec8c7d2a4b375b0474ae9443bef1618d931f2e87c599435b2424961395869d65", 0x29}], 0x1, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000740)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000780)={0x28, 0x0, 0x0, r11, 0x2, 0x7}) (async) r12 = socket$unix(0x1, 0x1, 0x0) close(r12) (async) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f00000007c0)=""/129) close_range(r10, r5, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000880)={0x1, 0xdc}, 0x2) 8.121664665s ago: executing program 4 (id=95): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, &(0x7f0000000340)=""/162, 0xa2, 0x2000, &(0x7f0000000400)={0x23, 0xff, 0xf9, 0x8}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) setuid(0xee01) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040004}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40090}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x1d, &(0x7f0000000440)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa16}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.112143512s ago: executing program 4 (id=96): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000000c0)=0xa5a95, 0x4) 7.996937848s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file2\x00', 0x0, &(0x7f0000000a40), 0x4, 0x526, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0/file0\x00', 0x10b442, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="ce347dedfa4b236d0622787c42d95b4dfa", 0x11) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000100)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) ppoll(&(0x7f0000000240)=[{r3, 0x92}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000040)={0xa, 0x4e22, 0x2000, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002003, 0x0) pwrite64(r0, &(0x7f0000001040)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001080)={0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xffffffffffff}) 7.18072844s ago: executing program 4 (id=107): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xda90) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 6.789644433s ago: executing program 4 (id=119): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x101000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x8, @sliced={0xff, [0x7, 0xa, 0xc, 0x101, 0x0, 0xfff, 0x2, 0x4, 0x58, 0x7, 0x8, 0xe, 0x5, 0xfff8, 0x80, 0x7fff, 0x8001, 0x3, 0x8, 0x6, 0x2, 0x4, 0x0, 0x8, 0x1000, 0x9, 0x40, 0x1000, 0x6, 0x7f, 0xa04, 0x5, 0xaf70, 0xa, 0x8, 0x2, 0x6, 0x101, 0xfff7, 0x4, 0xfff, 0x6, 0x6, 0x6, 0x9, 0x6, 0xff80], 0x4}}) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r3 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "1234567812345678"}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) sendto$inet(r2, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 6.758705497s ago: executing program 32 (id=119): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x101000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x8, @sliced={0xff, [0x7, 0xa, 0xc, 0x101, 0x0, 0xfff, 0x2, 0x4, 0x58, 0x7, 0x8, 0xe, 0x5, 0xfff8, 0x80, 0x7fff, 0x8001, 0x3, 0x8, 0x6, 0x2, 0x4, 0x0, 0x8, 0x1000, 0x9, 0x40, 0x1000, 0x6, 0x7f, 0xa04, 0x5, 0xaf70, 0xa, 0x8, 0x2, 0x6, 0x101, 0xfff7, 0x4, 0xfff, 0x6, 0x6, 0x6, 0x9, 0x6, 0xff80], 0x4}}) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r3 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "1234567812345678"}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) sendto$inet(r2, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 3.6736116s ago: executing program 5 (id=120): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8no}, {@shortname_win95}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 3.549504332s ago: executing program 5 (id=151): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x3ff, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0xfffffffffffffe77) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0xb7) 3.529336319s ago: executing program 5 (id=152): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) r1 = syz_io_uring_setup(0x28b5, &(0x7f0000000040)={0x0, 0xe129, 0x80000, 0x0, 0x32b}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000180)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x80045200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000000b80)={0xa74, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x46d, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xdf, 0x3, "3f97fbf49c5ea83f86b125e4c0669bdcc136cc4523336a7f080e8bf205083454a37ba560f88fb2e167fb6201c7a41639f354456c915ce155b5a946aed30989ef92ce907fb66af14fe3f8709739223ffdc3da7605379e01b8c5fc946ea48767cd38ab42600b1c57decc94d00f54afa0505bd5f2a3be4da4cb38ac4aa7f86c79a7f91713870d7b08f6f70ecc2ac5a9bae790aabb2bf2d17e4b0e098731bc80332bc6060f997941cca8dcafec2d6f37d2dd1c19ba7767f0b46fd13ead596584c0e90ca9fa358267412193f9837849daddf8a3b8a5db0ff99c6cca70e7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2d, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x1f, {{}, 0x7, 0x81, @broadcast, 0xf7, @void, 0x8, 0x4, @device_b, 0x10001}}]}, @NL80211_ATTR_BEACON_HEAD={0x4a6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @random="6bd28fe34efe", {}, @value=@ver_80211n={0x0, 0x40, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x5ab, @default, 0x1002, @void, @val={0x1, 0x3, [{0x6, 0x1}, {0xd8ff615ffe87aff7, 0x1}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x45, 0x0, 0x19, 0x100}}, [{0xdd, 0x3e, "ee6d5ae3adac6a2ebb6ec38af82e046302b44ecc22ee289272034f3572f804c2cf38d5080655af4be342961d15314b73aa54dc842c184535b816201b4c8b"}, {0xdd, 0x97, "0e0efd71879c9153904039eee8d3ac589a560d169c4b2ab2df21fc9e51e5b8538451a58f9df188367d463d64798030b1852c42611726698a76af9ce9d38f36db7917a4c1e10dd1d1acbf91076efb48b92903950b3555b464b8e8541a50d2493d50f62ca4dade2d283103d614078bb6122223ee08e70ee8fcd4b2f54dfd55448f509aa42c81456821c5de5d2ff79b60bb488977217c325d"}, {0xdd, 0xa0, "dc0e4fa504874cdb4a1f6c037467fd2d20ff32f92e71ef708612d7df5edaee87e4602fe0ec80221fffc8a677df2689c5d26079b816e8e46469afd87213e8a3ff6e462321d6e24ec2585353aba9c59dc955450b71468e781584f434c5e61dc15fb0d78c983b2719251b31867dc9f6a222ca15810e29d4d4a10781e9d0776e4b34f9decaf7cd48c464c7f560ed9e74c6e8e9f02f8f8e37798e847a3254c4b51ac2"}, {0xdd, 0xdc, "5f8354fba05e4623784d9ba0c7fd4e3545b62d811a7c58447553bbc3082d9df9411fb3eadcc866f97b1d2b52b932993645ddcb990bf501db13c037edba1e8e26c24f6b61df746243257aba8bb800f4ee64639dfddc6849c47416e81bd057bb190885dc9f2eda0b6f450e847904cf8b242277f1a565c4234461e0d4c26dd3b326913ae9659557cd55bd7b1d7cf718a847dedbd27a08f171283f4d2bb5283eb75544b1bc66954961eaf32a14eb3a49dcabaab4ec30d9c0b64054db9d3a599a43562582ea80b9dd10a36e63122c2eebd27768f0227b98249aa4335f96b1"}, {0xdd, 0x29, "b061fc962eb84fb4eb188ce532d62d28e32dfa81979186b51ef25fa1c4fc5be1f4f15fc70d8195da29"}, {0xdd, 0xe3, "4c37d8b5544009d7317fcd778b593163bcbb138810c8f9c43c7f8b03f4d5c9e4fcfcf71571a699b90af8f265b1232efd4d4f57847eef99611d3f9a93f264493d7d2b1e970f5774d498a4418b89acb0f06927a1d484243fddb5a19e4a569645c2a8add7c6b662c1afdf343a106123aac76ccd1e1f5e6e5fc7e7d2099f01728a11d79981db3fdda45c0d549d3edb3db94fd0714516fd8b6d2b6d1f3473b69060130a13583552b500fa45ddb6c593474edfd8c8499882af3200c87bf92dbab5bcd8ca5b59cc3c8497715b07cbb5ef01495199118e1bb264e812417a60cb128459e95b834f"}, {0xdd, 0xee, "4ae1fb97672726ff0130e5a01c5149b9104844efe4da61c7b8fc6b1a4167523b80d8dc9175c99f0f9cf866fc0f644e906723fd4cb053f4554fd38686d195963a9cce66430074d46b441518f5dbc10d3eee5e1ed2ed52525097f5e6363f87140d2612f0a1b9cde7b71964000134ebf692ab6f75f6ea6403d64850b76675d71a3a52c1f731f9e2c0aa5209cbd64bd107d616ab8ca89a338c7f4ffd819e6655653b39f8d2dcd4e5b3c1a977cbf628a89d8f49063c81b6e06455f74407d166337a61296a08d668f9e7cc797ce461cf723ed8929f2820e9260ba2ccc8e4a7546dbaf9a1d8668c9e3e8e9a897e459e0f7f"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x14}]}]}, 0xa74}}, 0x24004004) 3.401553447s ago: executing program 5 (id=154): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) unshare(0x40000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r5, &(0x7f0000000ac0)=""/102400, 0x19000, 0x100008) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000019b80)={&(0x7f0000019ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000019b40)={&(0x7f0000019b00)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe2ef}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x301}]}, 0x2c}}, 0x1) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.124367754s ago: executing program 3 (id=159): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x100002) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4c8d0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x2, 0x0, 0x0) prlimit64(r2, 0x1, &(0x7f0000000080)={0xffffffffffffff13, 0x8}, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x26}, @ioring_restriction_register_op={0x0, 0x4}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xfffffffffffffceb, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0x0, 0xa7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) 1.9693053s ago: executing program 5 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x80, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x6, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8001, 0x3, 0x20000000, 0x1, 0x9}}]}, {0x4}, {0xc, 0x3f, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x20040054) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x60680, 0x0) sendfile(r5, r6, 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3103fc1f0000000000400800000008000300", @ANYRES32=r9, @ANYBLOB="08000600b7"], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60001806ffb4370000000000000000000000aafe81000000000000000000800000d201b944606b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e040fda"], 0x0) 1.964308014s ago: executing program 3 (id=164): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x6b0, [0x0, 0x20000940, 0x20000970, 0x20000e80], 0x0, 0x0, &(0x7f0000000b40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x3, 'netpci0\x00', 'veth1_to_batadv\x00', 'ip6gretap0\x00', 'macvlan1\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x208, 0x268, 0x298, [@comment={{'comment\x00', 0x0, 0x600}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'vlan0\x00', 'team0\x00', 0x9, 0x0, 0x7caf, 0x4, 0x1, 0x7c3a, {0xffffffffffff0001}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}, {0x3, 0x4, 0x201, 'netpci0\x00', 'nr0\x00', 'nicvf0\x00', 'ipvlan1\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0x0, 0x158, 0x1d0, 0x248, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x1ff000081, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xff], 0x6, 0x2f, 0x74, 0x8, 0x4e23, 0x4e22, 0x4e21, 0x4e24}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'veth1_virt_wifi\x00', {}, 'vlan0\x00', {0xff}, 0x7}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x2, 0x6, 0x0, 0x0, "fa71a99771b7eccfee66245b3f91cf43f85a42feb568e14203268ac11c7a6755b1494ffbc2a3f71eed1e521d523a04d76f425b2ca2f5803d9a5b13788fa99862"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x2, 0x9, 0x0, 0x0, "60de56fb011d711d184ed4aea05d554d22e9117681e5adc5e227c920f46bea0987bed52449f213aa80d2ef74c6b83844f9597c8bc6235c5ce7991342332d7fd9"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x30, 0x16, 'ip6_vti0\x00', 'veth0_to_hsr\x00', 'vlan0\x00', 'sit0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {0x3, 0x4, 0x88f8, 'bond0\x00', 'pimreg1\x00', 'syzkaller1\x00', 'ipvlan0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}]}, 0x728) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setuid(0xee01) r5 = semget$private(0x0, 0x4, 0x96) semop(r5, &(0x7f0000000000)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a30000000060a0103000000000000000002000000d5fd04800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad6b1f2f4750b1956b7e518161240ec3442f5ee39aed11d2f5020deec3c906cfe4b479a08f4fd2ab266bc38cdc27467b5a10790bdee91af5363a9bf9e23858db36202c6be9a81fb7b"], 0x58}}, 0x4) 1.837492957s ago: executing program 3 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="144969c52d26562830000000000000000500000a480000000c0a070100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="b2", 0x1, 0x24000045, &(0x7f0000000280)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1000c08, 0x0, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000002c0)={0x1f, 0x0, 0x3}, 0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x20010, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffd51) sendmmsg$unix(r7, &(0x7f00000001c0), 0x0, 0x4040000) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/97, 0x61}], 0x2, &(0x7f0000001800)=""/135, 0x87}, 0x1}], 0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000000, 0x2010, 0xffffffffffffffff, 0x0) 1.481203164s ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r1, @ANYRES64=r2], 0x24}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r1, @ANYRES64=r2], 0x24}}, 0x4000) (async) 1.480691318s ago: executing program 1 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0xa4) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/net/ipt_hashlimit/lo\x00', 0x0, 0x0) sendfile(r7, r8, &(0x7f0000000700)=0x6, 0x993) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000000000000000ec00", @ANYRES32=0x0, @ANYBLOB="0305000000000200240012800b00010062726964676500001400028008000200800000000800030026000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1.061848248s ago: executing program 0 (id=175): r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x10, 0x1, 0x59}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r4 = mq_open(&(0x7f0000000000)='*{\x00', 0x1, 0x40, &(0x7f0000000040)={0xffff, 0x7ff, 0x5396, 0x1}) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000080)={0x80, 0x0, 0x7, 0x7}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 1.014588003s ago: executing program 0 (id=176): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) 1.012503378s ago: executing program 3 (id=177): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) readahead(0xffffffffffffffff, 0xf, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f0000000100)='27', 0x2) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='cgroup.procs\x00', r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)=@chain) add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@setlink={0x34, 0x13, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0xa04, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_CARRIER={0x5}]}, 0x34}}, 0x24008844) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@loopback, 0x36, r5}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f57000/0x1000)=nil, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x7c}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) readahead(0xffffffffffffffff, 0xf, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) (async) write(r1, &(0x7f0000000100)='27', 0x2) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='cgroup.procs\x00', r2) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)=@chain) (async) add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@setlink={0x34, 0x13, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0xa04, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_CARRIER={0x5}]}, 0x34}}, 0x24008844) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@loopback, 0x36, r5}) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f57000/0x1000)=nil, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x7c}) (async) 737.635668ms ago: executing program 3 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000002c0)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x4, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xb) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pidfd_send_signal(r3, 0x10, &(0x7f0000000180)={0x1c, 0x90, 0x7}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r4, @ANYBLOB="80620100000001000c00368008000103a61e803bfc0c3c1edd6500d56dd6d7400ed7cb0b0e9a7b00ca991134feb13f47091a4f06267fcafb7699331adbeb52fd2176998f4be7545551397f0667cb296603898c13729feb9ed52f856e87e1117b21a37b05c181526070519bbcc3565e8d6782d51e0f00ced258192d4ec46c535f00000000f456007913e2b085e0cfcf31b54f4818345b3034795bb4"], 0x34}}, 0x0) 726.354961ms ago: executing program 3 (id=179): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x20081, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000140)={0xc000003, 0x1, &(0x7f0000000240)=[0x10]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0xb, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000400)=0x7) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000009c0)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000b80)="87466f9cd4b3ff0ecf976ef31519f737a47ba037e130bbf9db180e02dcb01397666e1ac5715214921d5d450600c2db066013a545d6cee9aac75c5eae28e48b446148c10262d2a84365420e2e0f55c37c72979d0a4a21831bfba7a8f9a23f535064f30ef186005e8e20ddeca95f2f6362733a3eed8ca270d9b63bec8e", 0x2, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000b80)="87466f9cd4b3ff0ecf976ef31519f737a47ba037e130bbf9db180e02dcb01397666e1ac5715214921d5d450600c2db066013a545d6cee9aac75c5eae28e48b446148c10262d2a84365420e2e0f55c37c72979d0a4a21831bfba7a8f9a23f535064f30ef186005e8e20ddeca95f2f6362733a3eed8ca270d9b63bec8e", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000c00)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) landlock_create_ruleset(&(0x7f00000000c0)={0x20000, 0xd, 0x2, 0x40, 0x8}, 0x30, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x20000, 0xd, 0x2, 0x40, 0x8}, 0x30, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x1860, 0x0, 0x81, 0x0, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000300)={0x0, 0x2, 0x2, 0x3, 0x1f}, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/3\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) exit(0x100000000000035) read$eventfd(r3, &(0x7f00000003c0), 0x8) r4 = syz_open_dev$media(&(0x7f0000000440), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}]}) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 648.523753ms ago: executing program 0 (id=180): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') write$cgroup_int(r0, &(0x7f0000000040), 0x12) read$eventfd(r0, &(0x7f0000000340), 0x8) 596.971663ms ago: executing program 1 (id=182): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000400)=""/160, 0xa0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x1, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "baac6c0b0f05a1e2", "34a3d9ead18a1854fbb46d0a257396dc", '\x00', "170cd569e7d750e2"}, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r4, 0x1, r0, 0x80003}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r4, 0x5, 0x4000003}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@block_validity}, {@dax_never}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") 596.283628ms ago: executing program 0 (id=183): readahead(0xffffffffffffffff, 0x6, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000009) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41029, 0x38023}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1a}, 0x4000010) readahead(0xffffffffffffffff, 0x6, 0x9) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) (async) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000009) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41029, 0x38023}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1a}, 0x4000010) (async) 566.855206ms ago: executing program 0 (id=184): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = userfaultfd(0x80000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f0000000040)='\x00', 0x38000, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x9]}, {0x9, 0x1, 0x9, 0x7da5}}, 0x7fffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x7}, {[0x5, 0x8, 0x4, 0x3]}, 0x0, 0xd7, &(0x7f0000000140)=""/215}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r1, 0x40049409, r2) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x304, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x28}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc864}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x10}, 0x4000044) r5 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0) close_range(r5, r0, 0x2) (async) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000740)={0x200, 0x2, 0x2, 0x8000, 0x1b, "3dc62bb67b28c958422bb94cf29c611eae769b"}) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000007c0)={{[0x8, 0x8, 0x16, 0x2]}, 0x0, 0x1, 0x4, 0x0, &(0x7f0000000780)=[{{@align=0x523bc1e3, {0x8001, 0xf8b5, 0x3}}, 0xcd88, 0x0, '{}]--\\@&]\x00'}]}) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000800)={0x3}, 0x4) (async) sendmsg$key(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x2, 0x10, 0x9, 0x5, 0x19, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@mcast2, 0x15, 0x4, 0x4}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_ident={0x2, 0xb, 0x6, 0x0, 0x9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bbb, 0x7, {0x6, 0x33, 0xd, 0xa, 0x0, 0x7fffffff, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x2a, 0x4, 0x10}]}, 0xc8}}, 0x8080) (async) write$UHID_INPUT(r2, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa8, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44080}, 0x880) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000001b80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_pidfd_open(r7, 0x0) (async) pwrite64(r6, &(0x7f0000001c00)="d238c2ee4bfb76ea0ce49e295a9bbf2d6afa1ba5fca2cc6d750c73ad50060c25e6ed3cd6f90d9a25a3f638bf89a536e1b6a7da50243eec90ce378cee34f7f62bd1407f40ac445a50d972b2e4de6fc5ebe800e4d8d265ca33e9a132880d67f481ca940e96e88b3590f87af3b69f35553294dd563ae12f8407bab5", 0x7a, 0xc78) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000001c80)='io.stat\x00', 0x0, 0x0) connect$inet(r8, &(0x7f0000001cc0)={0x2, 0x4e22, @loopback}, 0x10) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000001d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000001d40)={0x18, r9}) (async) connect$inet(r8, &(0x7f0000001d80)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000001ec0)={&(0x7f0000001e80)=[{&(0x7f0000001dc0)="4c74030a6b550f32da68b666410af7e6759e14b79b85b3f041b943a85d8b2ff6e8faee81fd361f057adc28c2c9f828c209b987069a38aca91803ea8c23003be67b72758ad5d2a22adfa42c9d4ee75d7e4f9bf28eec9a46f9191a487d5518aa335e9d074c108e8cbb912cd761c43042161d9e97184d442a9bf64a84e2b31b68b88c", 0x81}], 0x1, 0x9610, 0x0, 0xc0000000, 0x100, 0x2, 0x5, 0x3}) r10 = syz_create_resource$futex(&(0x7f0000001f40)) (async) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) futex$unlock_pi_list64(r10, 0x207, 0xda, &(0x7f0000001fc0)={r11, r12+60000000}, &(0x7f0000002000)=0x5450, 0x6b3abc57) 544.141987ms ago: executing program 0 (id=185): syz_emit_vhci(&(0x7f0000002540)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "bc1d4d384fc3a414"}}}, 0xe) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x222701, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000002500)={0x10, 0xffff, 0x140, 0xfd, &(0x7f0000000400)=""/253, 0x1000, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000001500)=""/4096}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0xe, 0x4, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], &(0x7f0000002a40)='GPL\x00', 0x4, 0xfd90, &(0x7f0000002a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002b80), 0x366, 0x10, &(0x7f0000002bc0), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002c40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x7edcaa70, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) syz_usb_connect$uac3(0x5, 0x104, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4153, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x3, 0x1, 0x6, 0xb0, 0xb2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x27, 0x7}, [@extension_unit={0x1d, 0x24, 0xa, 0x1, 0x2, [0x2, 0x1, 0x3, 0x1, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0xfffd, 0x74, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd9, 0x1, 0xfc, 0x9, "fad673e1bbe925ffa6"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfb, 0x9, 0x40, {0xa, 0x25, 0x25, 0x3, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x3, 0x3, "bfe94d080546e02724"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x0, 0x62, "5b6ac92274"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x9, 0x5, "1fe448"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x5, 0x8, 0x72}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0xca3, 0x2, "b9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x80, {0xa, 0x25, 0x25, 0x7, 0x3, 0xc0d}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x9, 0x5, 0x3, 0xff, 0x7}, 0x4e, &(0x7f0000000200)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x9, 0x8, 0x3, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x9, 0x0, 0x2000, [0xf, 0xf, 0x7f4000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x40, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x0, 0x4}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x70f, 0x0, 0x5, [0x0, 0xffffc0]}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}]}) 439.903621ms ago: executing program 1 (id=187): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x80000}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcfb}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xbfffff, 0x2000014, 0x401d031, r0, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000840)={@multicast2, @local, @remote}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000000880)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0x98100, 0x0) close_range(r2, r4, 0x2) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc, 0x8, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x34}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14704, 0x4000, 0x2, 0x4e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x3, 0x141, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x8, 0xffffffff, 0x2a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) brk(0x6) 365.40033ms ago: executing program 1 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x10, 0x1418, 0x1, 0x2, 0x43}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000001400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0xec) shutdown(r3, 0x0) accept(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) write(0xffffffffffffffff, &(0x7f0000000f00)='\\x01', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r4, 0x9, 0x0, &(0x7f0000001480)="f84ab49019baf37ad992ada9077af2e99160542417410eaf3f59e6c58eb38ae08593ab707c1a45ea48863ae4f1b4a7d42b71b8f412a52f81502f5c7fd8e2365ebcb8eb5e73334b61489e89ff3a45f8c584b7926b78ac3898bd2a2eeed52c731c93c23a9e9f3b4341e55febcc2c2f54c05ca73c64684b8090b584c9f7c4197f6a75323ed175d750ddbc74ae8b917cac98929d181484332f5aa03344b4930f1b93b8213cc2", 0xa4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000f40)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000180)=0x1) syz_open_dev$vim2m(&(0x7f0000000900), 0x10001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000001600)=0x3) listns(&(0x7f0000000040)={0x20, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000940)=[{&(0x7f0000000980)={&(0x7f00000009c0)={0x0, &(0x7f0000000a00)="b96d", 0x1, 0x2}, 0x0}, 0x0, 0x1}], 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f00000008c0)=0xffffffff) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x9}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0xf8, 0x1c8, 0x3c8, 0xf8, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='1', 0x1) 365.062273ms ago: executing program 2 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0), 0xffffffffffffff45, 0x10, &(0x7f0000000d00)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x108, 0xe, 0x0, &(0x7f0000000dc0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x9, 0x8, 0x2b6}, {0x6, 0x7, 0x4e}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x53, 0xff9, 0x8}, 0x28) 347.346708ms ago: executing program 1 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x2, 0x0) (async) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_io_uring_setup(0x29d7, &(0x7f00000000c0)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) (rerun: 32) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000300)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000700)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)='`', 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [r7, r0, r3]}}, @rights={{0x38, 0x1, 0x1, [r3, r5, r0, r4, r2, r2, r0, r4, r5, r1]}}], 0x58, 0x4}}], 0x1, 0x48084) (async) recvmmsg(r7, &(0x7f0000000440), 0x10106, 0x2, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x200400, 0x0) fgetxattr(r9, &(0x7f0000000180)=@random={'btrfs.', 'ntfs3\x00'}, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) (async) shutdown(0xffffffffffffffff, 0x0) (async) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000004c0)=0x63ba, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x14044804, &(0x7f0000000500)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) mremap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0xf02, 0xf0, 0x0) (async, rerun: 32) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000640)={0x5813}, 0x10) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) 294.20345ms ago: executing program 2 (id=193): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xda90) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r1, &(0x7f0000000740), &(0x7f0000000780)=@tcp6, 0x1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x3, 0x1, 0x800, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x2, 0x6, 0x550, 0xf0, 0xf0, 0x3b0, 0xf0, 0x0, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, [], [0xff, 0xffffff00, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@remote, 0x3d, 0x34, 0x71}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0xff, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x0, 0x44}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x26, 0xc32, 0x6, 0x8, 0x93, 0x6, 0x15]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r6, 0x8000, 0x8, 0x0, 0x78, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x64, 0x0, 0xa, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x3, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x4}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0xd84e}, {@multicast1, 0x800}, {@empty, 0x55d}, {@multicast2, 0x101}]}, @noop, @end, @rr={0x7, 0x7, 0x5b, [@private=0xa010100]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$inet_sctp(0x2, 0x5, 0x84) (async) listen(r0, 0xda90) (async) shutdown(r0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r1, &(0x7f0000000740), &(0x7f0000000780)=@tcp6, 0x1}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x3, 0x1, 0x800, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x2, 0x6, 0x550, 0xf0, 0xf0, 0x3b0, 0xf0, 0x0, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, [], [0xff, 0xffffff00, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@remote, 0x3d, 0x34, 0x71}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0xff, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x0, 0x44}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x26, 0xc32, 0x6, 0x8, 0x93, 0x6, 0x15]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r6, 0x8000, 0x8, 0x0, 0x78, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x64, 0x0, 0xa, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x3, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x4}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0xd84e}, {@multicast1, 0x800}, {@empty, 0x55d}, {@multicast2, 0x101}]}, @noop, @end, @rr={0x7, 0x7, 0x5b, [@private=0xa010100]}]}}}}}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) 137.053861ms ago: executing program 2 (id=194): r0 = io_uring_setup(0x4dea, &(0x7f0000000140)={0x0, 0x1b4b, 0x400, 0xffffffff, 0x80000372}) pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x900) write$P9_RXATTRWALK(r1, &(0x7f00000007c0)={0xf, 0x1f, 0x2, 0x7}, 0xf) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000c00)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000c40)={0x0, 0x0, 0x10001, 0x5, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000c80)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x480180, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys/devices/system/node/node0/reclaim\x00', &(0x7f00000001c0)='fusectl\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r5, &(0x7f0000000dc0)=0xffffffffffffffff, 0x12) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000840)={0xc023, 0x2}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2100000000000000000000002d00000000040600", @ANYRES32=0x1, @ANYBLOB="840f00"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0100000004000000000000000d400fdb7f3a6ec1326e5bfd00"/40], 0x50) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000340)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000300)={0x4, 0x746, 0x3, 0x3, 0xfb, 0xf3, 0x7743}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x9c, 0x24, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xe}, {0x9, 0x6}, {0x9, 0xbdc0df2de84df40f}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x87, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x2, 0x3}}, {0xa, 0x2, [0x76, 0xd, 0x2]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x800}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x40005) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00003cf000/0x3000)=nil, 0x3000, 0x0) 136.049795ms ago: executing program 2 (id=195): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d4, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x684}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe2}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x10}, 0x802) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2020, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x198, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0xe3, &(0x7f0000000700)=""/227, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x81, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000880)=[0x1], &(0x7f00000008c0)=[{0x1, 0x1, 0x0, 0x8}, {0x5, 0x3, 0xd, 0x8}], 0x10, 0x81}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x1000001, 0x80010, r0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x20008088) r5 = socket$inet6(0xa, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x15}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x15a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000d40)='ip6tnl0\x00', 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000e00)={'bond0\x00', {0x2, 0x4e20, @private=0xa010102}}) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x6ea2d3f47a3816c1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200200d1}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xd541a41ac14fe84e}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x91}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000001500)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001240)={0x250, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x1d8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x108, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfde3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe0}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffe}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x250}, 0x1, 0x0, 0x0, 0x4100}, 0x2040) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xa4, r13, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb45}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa8ed}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 113.296814ms ago: executing program 2 (id=196): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000e40)='ext4\x00', &(0x7f0000000e80)='./file1\x00', 0x0, &(0x7f0000000f40)={[{@lazytime}, {@mb_optimize_scan}]}, 0x1, 0x79e, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001780)={0x0, 0x2904c, 0x1f0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) socket$inet6(0xa, 0x4, 0x0) socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000018c0)=0x100, 0x4) socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRESHEX=r0], 0x48) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x80900, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000480)=0x10) 0s ago: executing program 2 (id=197): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)={0x80000, 0x8, 0x1}, 0x18) mkdirat(r0, &(0x7f0000000380)='./proc\x00', 0x1ff) syz_read_part_table(0x106a, &(0x7f0000000c80)="$eJzs0LtNxjAUBeDzg/MCwRxsQM0y1FkAIlZgCOZiB2owykMo6ZHSfF/j4+vrhxxO9XG3jlMyjEm6w+r7X2r35askl/4yxz5lyPSW1GWan7pael4ev57yWb+32nOyNDVJhjk8dH3S3OZ6d/Z8UXm9b5OxliS1Hh9ccrPtTvnXnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8/wGAAD//39wHQk=") ioctl$DVB_DEMUX_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f0000001d00)={0x4, 0xd7c, 0x0, 0x9, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) symlinkat(&(0x7f0000001d40)='./sys\x00', 0xffffffffffffff9c, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0x80000000, 0x5}) write(0xffffffffffffffff, &(0x7f0000001dc0)='usbip', 0x5) openat(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001e40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001e80)='./config\x00', &(0x7f0000001ec0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001f40)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001f80)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x17e) mkdirat(0xffffffffffffff9c, &(0x7f0000001fc0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000002000)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000002080)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000020c0)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f0000002140)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000002180)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000021c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) symlinkat(&(0x7f00000022c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000002300)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 28.887199][ T4697] cgroup: Unknown subsys name 'net' [ 29.027389][ T4697] cgroup: Unknown subsys name 'cpuset' [ 29.028808][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.164314][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.977542][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.978032][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.978272][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.978620][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.978849][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.008607][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.009008][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.009213][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.009899][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.013915][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.014073][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.015251][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.015526][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.026525][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.027476][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.027602][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.028948][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.029560][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.031438][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.031716][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.076147][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.077887][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.079076][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.080278][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.080602][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.207994][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.208277][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.208642][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.216112][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.242020][ T4717] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.257445][ T4715] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.293730][ T4711] infiniband rxe0: set active [ 30.294045][ T4711] infiniband rxe0: added rxe_eth0 [ 30.310873][ T1049] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.313447][ T4711] RDS/IB: rxe0: added [ 30.313526][ T4711] smc: adding ib device rxe0 with port count 1 [ 30.313551][ T4711] smc: ib device rxe0 port 1 has no pnetid [ 30.313789][ T870] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.314456][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.387046][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.436919][ T1049] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.438992][ T4715] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.491231][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.491585][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.491656][ T4709] bridge_slave_0: entered allmulticast mode [ 30.492296][ T4709] bridge_slave_0: entered promiscuous mode [ 30.494874][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.494902][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.494958][ T4709] bridge_slave_1: entered allmulticast mode [ 30.495477][ T4709] bridge_slave_1: entered promiscuous mode [ 30.506831][ T4730] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.540406][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.544414][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.545465][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.547462][ T4717] bridge_slave_0: entered allmulticast mode [ 30.548808][ T4717] bridge_slave_0: entered promiscuous mode [ 30.552476][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.559652][ T4709] team0: Port device team_slave_0 added [ 30.561310][ T4709] team0: Port device team_slave_1 added [ 30.567904][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.567916][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.567931][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.568762][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.568770][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.568784][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.569043][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.569090][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.569161][ T4717] bridge_slave_1: entered allmulticast mode [ 30.569588][ T4717] bridge_slave_1: entered promiscuous mode [ 30.582807][ T4709] hsr_slave_0: entered promiscuous mode [ 30.583157][ T4709] hsr_slave_1: entered promiscuous mode [ 30.613075][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.623648][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.628846][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.651296][ T4717] team0: Port device team_slave_0 added [ 30.667034][ T4717] team0: Port device team_slave_1 added [ 30.691972][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.691987][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.692002][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.693437][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.693446][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693459][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.733866][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.738251][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.749539][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.751218][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.764424][ T4717] hsr_slave_0: entered promiscuous mode [ 30.764744][ T4717] hsr_slave_1: entered promiscuous mode [ 30.764960][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.765019][ T4717] Cannot create hsr debugfs directory [ 30.774757][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.777070][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.777453][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.779813][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.823705][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.823777][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.823831][ T4715] bridge_slave_0: entered allmulticast mode [ 30.824246][ T4715] bridge_slave_0: entered promiscuous mode [ 30.838698][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.838732][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.838786][ T4715] bridge_slave_1: entered allmulticast mode [ 30.839205][ T4715] bridge_slave_1: entered promiscuous mode [ 30.848520][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.852179][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.852217][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.852369][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.852398][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.858551][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.881257][ T4715] team0: Port device team_slave_0 added [ 30.882270][ T4715] team0: Port device team_slave_1 added [ 30.885246][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.885313][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.885379][ T4711] bridge_slave_0: entered allmulticast mode [ 30.887564][ T4711] bridge_slave_0: entered promiscuous mode [ 30.888662][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.888691][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.888751][ T4711] bridge_slave_1: entered allmulticast mode [ 30.889183][ T4711] bridge_slave_1: entered promiscuous mode [ 30.915345][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.915360][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.915376][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.918738][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.918752][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.918763][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.922826][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.923704][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.939922][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.939993][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.940052][ T4730] bridge_slave_0: entered allmulticast mode [ 30.940462][ T4730] bridge_slave_0: entered promiscuous mode [ 30.941673][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941693][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.941779][ T4730] bridge_slave_1: entered allmulticast mode [ 30.942208][ T4730] bridge_slave_1: entered promiscuous mode [ 30.949906][ T4730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.950737][ T4730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.960179][ T4730] team0: Port device team_slave_0 added [ 30.962369][ T4730] team0: Port device team_slave_1 added [ 30.969011][ T4711] team0: Port device team_slave_0 added [ 30.970243][ T4711] team0: Port device team_slave_1 added [ 30.979578][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.979591][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.979607][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.980300][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.980307][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.980321][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.991411][ T4711] hsr_slave_0: entered promiscuous mode [ 30.991701][ T4711] hsr_slave_1: entered promiscuous mode [ 30.991882][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.991892][ T4711] Cannot create hsr debugfs directory [ 31.015180][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.015194][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.015208][ T4730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.032063][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.032077][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.032094][ T4730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.040139][ T4715] hsr_slave_0: entered promiscuous mode [ 31.040456][ T4715] hsr_slave_1: entered promiscuous mode [ 31.040661][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 31.040671][ T4715] Cannot create hsr debugfs directory [ 31.048584][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.063826][ T4730] hsr_slave_0: entered promiscuous mode [ 31.064114][ T4730] hsr_slave_1: entered promiscuous mode [ 31.064326][ T4730] debugfs: 'hsr0' already exists in 'hsr' [ 31.064336][ T4730] Cannot create hsr debugfs directory [ 31.071729][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.072203][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.093364][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.093614][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.094916][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.095203][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.099207][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.109062][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.110512][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.110818][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.111707][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.129717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.129753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.159500][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.159530][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.179641][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.182551][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.183922][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.185211][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.188464][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.191264][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.191588][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.193126][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.229201][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.232594][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.245200][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.252075][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.254201][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.254653][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.260481][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.267908][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.276636][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.280576][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.285004][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.285037][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.285425][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.310583][ T4730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.311457][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.312022][ T4730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.313105][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.330745][ T4730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.331831][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.333531][ T4730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.334982][ T4730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.351704][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.371199][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.401341][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.401371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.401772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.416175][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.426611][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.438258][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.439844][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.439866][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.453353][ T4730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.454177][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.454196][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.461049][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.479217][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.479232][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.487904][ T4730] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.493298][ T4709] veth0_vlan: entered promiscuous mode [ 31.495274][ T4709] veth1_vlan: entered promiscuous mode [ 31.511831][ T4709] veth0_macvtap: entered promiscuous mode [ 31.513216][ T4709] veth1_macvtap: entered promiscuous mode [ 31.532895][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.532920][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.533604][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.533625][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.550054][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.551931][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.553968][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554136][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554397][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.603392][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.606737][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629235][ T465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.629248][ T465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.634495][ T4717] veth0_vlan: entered promiscuous mode [ 31.648845][ T4717] veth1_vlan: entered promiscuous mode [ 31.652642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.652654][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.662762][ T4717] veth0_macvtap: entered promiscuous mode [ 31.668501][ T4717] veth1_macvtap: entered promiscuous mode [ 31.673963][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.687324][ T4709] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.693022][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.693955][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.702987][ T4711] veth0_vlan: entered promiscuous mode [ 31.728994][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.729254][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.729366][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.746168][ T4711] veth1_vlan: entered promiscuous mode [ 31.748736][ T4894] xt_MASQUERADE: bad rangesize 20224 [ 31.751247][ T4711] veth0_macvtap: entered promiscuous mode [ 31.752214][ T4711] veth1_macvtap: entered promiscuous mode [ 31.766873][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.778838][ T351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.780836][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.780845][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.792971][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.809065][ T638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.809260][ T638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.809269][ T638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.809379][ T638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.817888][ T4899] netlink: 'syz.1.6': attribute type 8 has an invalid length. [ 31.833263][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.850593][ T4730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.851258][ T638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.881982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.881998][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.896889][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.919165][ T4715] veth0_vlan: entered promiscuous mode [ 31.921722][ T638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.921733][ T638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.936282][ T4715] veth1_vlan: entered promiscuous mode [ 31.942831][ T4715] veth0_macvtap: entered promiscuous mode [ 31.943913][ T4715] veth1_macvtap: entered promiscuous mode [ 31.954666][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.957484][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.959125][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976412][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976487][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.976542][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.012225][ T638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.012239][ T638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.016225][ T51] Bluetooth: hci0: command tx timeout [ 32.025003][ T638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.025019][ T638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.040580][ T4730] veth0_vlan: entered promiscuous mode [ 32.042307][ T4730] veth1_vlan: entered promiscuous mode [ 32.050670][ T4730] veth0_macvtap: entered promiscuous mode [ 32.059531][ T4730] veth1_macvtap: entered promiscuous mode [ 32.073079][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.079149][ T4917] loop0: detected capacity change from 0 to 2048 [ 32.080896][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.087532][ T4918] Zero length message leads to an empty skb [ 32.088311][ T4918] loop1: detected capacity change from 0 to 8 [ 32.094687][ T4918] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 32.094699][ T4918] unable to read xattr id index table [ 32.095279][ T4918] SQUASHFS error: zlib decompression failed, data probably corrupt [ 32.095294][ T4918] SQUASHFS error: Failed to read block 0x9b: -5 [ 32.095301][ T4918] SQUASHFS error: Unable to read metadata cache entry [99] [ 32.095307][ T4918] SQUASHFS error: Unable to read inode 0x127 [ 32.095813][ T51] Bluetooth: hci4: command tx timeout [ 32.095971][ T51] Bluetooth: hci2: command tx timeout [ 32.096051][ T51] Bluetooth: hci3: command tx timeout [ 32.096118][ T51] Bluetooth: hci1: command tx timeout [ 32.118586][ T465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.118711][ T465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.118797][ T465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.118957][ T465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.154184][ T4917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.178299][ T4923] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.198512][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.198525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.201098][ T4712] block nbd1: Receive control failed (result -107) [ 32.203576][ T4925] nbd1: detected capacity change from 0 to 18 [ 32.211132][ T4917] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.225350][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.225367][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.236159][ T4925] nbd1: detected capacity change from 18 to 8589934592 [ 32.238900][ T4358] block nbd1: Dead connection, failed to find a fallback [ 32.238917][ T4358] block nbd1: shutting down sockets [ 32.238937][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.238961][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.240906][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.240927][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241516][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241532][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241585][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241596][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241642][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241652][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241701][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241711][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241754][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241764][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241802][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241812][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241826][ T4701] ldm_validate_partition_table(): Disk read failed. [ 32.241855][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241865][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241901][ T4358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 32.241911][ T4358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 32.241989][ T4701] Dev nbd1: unable to read RDB block 0 [ 32.242160][ T4701] nbd1: unable to read partition table [ 32.289829][ T4701] ldm_validate_partition_table(): Disk read failed. [ 32.289966][ T4701] Dev nbd1: unable to read RDB block 0 [ 32.290129][ T4701] nbd1: unable to read partition table [ 32.322265][ T4942] tmpfs: Bad value for 'mpol' [ 32.369577][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.404345][ T4955] loop1: detected capacity change from 0 to 2048 [ 32.473832][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.606840][ T30] audit: type=1326 audit(32.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.606876][ T30] audit: type=1326 audit(32.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.606900][ T30] audit: type=1326 audit(32.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.607523][ T30] audit: type=1326 audit(32.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.619283][ T30] audit: type=1326 audit(32.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.619374][ T30] audit: type=1326 audit(32.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.620015][ T30] audit: type=1326 audit(32.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.623596][ T30] audit: type=1326 audit(32.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.624085][ T30] audit: type=1326 audit(32.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.624104][ T30] audit: type=1326 audit(32.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4974 comm="syz.1.20" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 32.634509][ T4975] FAULT_INJECTION: forcing a failure. [ 32.634509][ T4975] name failslab, interval 1, probability 0, space 0, times 1 [ 32.634525][ T4975] CPU: 1 UID: 0 PID: 4975 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT [ 32.634537][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.634543][ T4975] Call trace: [ 32.634547][ T4975] show_stack+0x2c/0x3c (C) [ 32.634566][ T4975] __dump_stack+0x30/0x40 [ 32.634579][ T4975] dump_stack_lvl+0xd8/0x12c [ 32.634590][ T4975] dump_stack+0x1c/0x28 [ 32.634601][ T4975] should_fail_ex+0x418/0x58c [ 32.634611][ T4975] should_failslab+0xc4/0x120 [ 32.634619][ T4975] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 32.634630][ T4975] kstrdup+0x50/0x104 [ 32.634639][ T4975] kstrdup_const+0x54/0x6c [ 32.634647][ T4975] kvasprintf_const+0x120/0x2e4 [ 32.634660][ T4975] kobject_set_name_vargs+0xd8/0x1c0 [ 32.634670][ T4975] dev_set_name+0xe8/0x13c [ 32.634680][ T4975] netdev_register_kobject+0xa8/0x328 [ 32.634694][ T4975] register_netdevice+0xd74/0x14c0 [ 32.634702][ T4975] tun_set_iff+0x628/0xc0c [ 32.634714][ T4975] __tun_chr_ioctl+0x6f4/0x18f4 [ 32.634725][ T4975] tun_chr_ioctl+0x38/0x4c [ 32.634734][ T4975] __arm64_sys_ioctl+0x154/0x1cc [ 32.634743][ T4975] invoke_syscall+0x98/0x244 [ 32.634755][ T4975] el0_svc_common+0x19c/0x23c [ 32.634766][ T4975] do_el0_svc+0x4c/0x5c [ 32.634777][ T4975] el0_svc+0x60/0x1d8 [ 32.634785][ T4975] el0t_64_sync_handler+0x44/0x104 [ 32.634793][ T4975] el0t_64_sync+0x198/0x19c [ 32.662749][ T4981] loop3: detected capacity change from 0 to 256 [ 32.772957][ T4987] loop1: detected capacity change from 0 to 2048 [ 32.823536][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.844873][ T4987] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.892707][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.892789][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.892833][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.892873][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.892913][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.892961][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.893000][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.893046][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.893090][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.894469][ T5008] netlink: 'syz.0.31': attribute type 15 has an invalid length. [ 32.980359][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.162603][ T5015] loop3: detected capacity change from 0 to 256 [ 33.162927][ T5015] vfat: Unknown parameter 'iocharse' [ 33.341439][ T5032] binder: tried to use weak ref as strong ref [ 33.341454][ T5032] binder: 5029:5032 Acquire 1 refcount change on invalid ref 0 ret -22 [ 33.342534][ T5032] binder: 5029:5032 got transaction to invalid handle, 1 [ 33.342569][ T5032] binder: 5029:5032 cannot find target node [ 33.342584][ T5032] binder: 5029:5032 transaction call to 0:0 failed 3/29201/-22, code 0 size 104-24 line 3253 [ 33.342700][ T5032] binder: 5029:5032 ioctl b703 0 returned -22 [ 33.343051][ T870] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.500920][ T5041] bond0: (slave bond_slave_0): Releasing backup interface [ 33.531866][ T5045] loop0: detected capacity change from 0 to 512 [ 33.539735][ T5045] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 33.567774][ T5045] EXT4-fs (loop0): 1 truncate cleaned up [ 33.569478][ T5045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.590645][ T5049] loop3: detected capacity change from 0 to 1024 [ 33.590994][ T5049] EXT4-fs: Invalid want_extra_isize 1 [ 33.619610][ T5045] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.36: invalid indirect mapped block 2185560079 (level 0) [ 33.625202][ T5045] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.36: invalid indirect mapped block 65535 (level 2) [ 33.732926][ T5041] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.36: Invalid inode table block 1 in block_group 0 [ 33.738882][ T5041] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.36: Invalid inode table block 1 in block_group 0 [ 33.742013][ T5041] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 33.752729][ T5041] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.36: mark_inode_dirty error [ 33.754187][ T5041] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.36: Invalid inode table block 1 in block_group 0 [ 33.933520][ T5041] EXT4-fs error (device loop0): ext4_get_max_inline_size:120: inode #15: comm syz.0.36: can't get inode location 15 [ 33.952863][ T5041] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.36: Invalid inode table block 1 in block_group 0 [ 33.981329][ T5057] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 33.984546][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.036217][ T5060] EXT4-fs: Ignoring removed bh option [ 34.044281][ T5061] SQUASHFS error: Failed to read block 0x6e6: -5 [ 34.044292][ T5061] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 34.044299][ T5061] SQUASHFS error: Unable to read directory block [6aa:26] [ 34.052476][ T5061] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 34.052487][ T5061] SQUASHFS error: Unable to read directory block [6aa:26] [ 34.058831][ T5060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 34.061825][ T5060] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:168: inode #12: comm syz.0.41: inline data xattr refers to an external xattr inode [ 34.062977][ T5060] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:168: inode #12: comm syz.0.41: inline data xattr refers to an external xattr inode [ 34.080975][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 34.095725][ T4712] Bluetooth: hci0: command tx timeout [ 34.120979][ T5067] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 34.140440][ T5072] FAULT_INJECTION: forcing a failure. [ 34.140440][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 34.140460][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT [ 34.140470][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.140476][ T5072] Call trace: [ 34.140479][ T5072] show_stack+0x2c/0x3c (C) [ 34.140498][ T5072] __dump_stack+0x30/0x40 [ 34.140514][ T5072] dump_stack_lvl+0xd8/0x12c [ 34.140526][ T5072] dump_stack+0x1c/0x28 [ 34.140537][ T5072] should_fail_ex+0x418/0x58c [ 34.140546][ T5072] should_failslab+0xc4/0x120 [ 34.140555][ T5072] __kmalloc_cache_noprof+0x94/0x5fc [ 34.140565][ T5072] sctp_endpoint_new+0xe4/0x860 [ 34.140576][ T5072] sctp_init_sock+0x684/0x115c [ 34.140585][ T5072] sctp_v6_init_sock+0x20/0x80 [ 34.140594][ T5072] inet6_create+0xb4c/0xfc8 [ 34.140606][ T5072] __sock_create+0x31c/0x670 [ 34.140617][ T5072] __sys_socket_create+0xc0/0x11c [ 34.140628][ T5072] __sys_socket+0x44/0xec [ 34.140638][ T5072] __arm64_sys_socket+0x84/0x9c [ 34.140649][ T5072] invoke_syscall+0x98/0x244 [ 34.140661][ T5072] el0_svc_common+0xec/0x23c [ 34.140672][ T5072] do_el0_svc+0x4c/0x5c [ 34.140684][ T5072] el0_svc+0x60/0x1d8 [ 34.140692][ T5072] el0t_64_sync_handler+0x44/0x104 [ 34.140700][ T5072] el0t_64_sync+0x198/0x19c [ 34.168729][ T5067] netlink: 'syz.0.43': attribute type 12 has an invalid length. [ 34.185956][ T51] Bluetooth: hci3: command tx timeout [ 34.185979][ T4726] Bluetooth: hci2: command tx timeout [ 34.186238][ T51] Bluetooth: hci4: command tx timeout [ 34.186283][ T4712] Bluetooth: hci1: command tx timeout [ 34.186773][ T5068] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 34.204893][ T5075] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 34.204908][ T5075] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 34.454137][ T5087] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 34.618449][ T5093] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.638031][ T5095] ima: Unable to open file: /e (-2) [ 34.640398][ T5095] EXT4-fs: Ignoring removed nobh option [ 34.644158][ T5095] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 34.644245][ T5095] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 34.644368][ T5095] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.49: inode has both inline data and extents flags [ 34.644403][ T5095] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 34.644828][ T5095] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.49: couldn't read orphan inode 13 (err -117) [ 34.644863][ T5095] loop3: lost filesystem error report for type 5 error -117 [ 34.645922][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.661024][ T5094] ima: policy update failed [ 34.670697][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.725241][ T5102] random: crng reseeded on system resumption [ 34.773248][ T5109] tipc: Started in network mode [ 34.773266][ T5109] tipc: Node identity fc02, cluster identity 4711 [ 34.773285][ T5109] tipc: Enabling of bearer rejected, failed to enable media [ 34.791883][ T5111] process 'syz.3.55' launched './file0' with NULL argv: empty string added [ 34.828485][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.996864][ T5121] pim6reg: entered allmulticast mode [ 35.278236][ T5134] FAULT_INJECTION: forcing a failure. [ 35.278236][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 35.278259][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.4.60 Not tainted syzkaller #0 PREEMPT [ 35.278272][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.278278][ T5134] Call trace: [ 35.278281][ T5134] show_stack+0x2c/0x3c (C) [ 35.278301][ T5134] __dump_stack+0x30/0x40 [ 35.278313][ T5134] dump_stack_lvl+0xd8/0x12c [ 35.278325][ T5134] dump_stack+0x1c/0x28 [ 35.278336][ T5134] should_fail_ex+0x418/0x58c [ 35.278346][ T5134] should_failslab+0xc4/0x120 [ 35.278355][ T5134] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 35.278364][ T5134] sock_alloc_inode+0x30/0x180 [ 35.278374][ T5134] alloc_inode+0x68/0x198 [ 35.278385][ T5134] sock_alloc+0x4c/0x204 [ 35.278395][ T5134] __sock_create+0x108/0x670 [ 35.278406][ T5134] __sys_socket_create+0xc0/0x11c [ 35.278417][ T5134] __sys_socket+0x44/0xec [ 35.278427][ T5134] __arm64_sys_socket+0x84/0x9c [ 35.278438][ T5134] invoke_syscall+0x98/0x244 [ 35.278450][ T5134] el0_svc_common+0xec/0x23c [ 35.278462][ T5134] do_el0_svc+0x4c/0x5c [ 35.278474][ T5134] el0_svc+0x60/0x1d8 [ 35.278483][ T5134] el0t_64_sync_handler+0x44/0x104 [ 35.278491][ T5134] el0t_64_sync+0x198/0x19c [ 35.278552][ T5134] socket: no more sockets [ 35.385989][ T5137] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 35.406001][ T5143] infiniband syz1: set active [ 35.406053][ T5143] infiniband syz1: added batadv_slave_0 [ 35.418735][ T5143] RDS/IB: syz1: added [ 35.418760][ T5143] smc: adding ib device syz1 with port count 1 [ 35.418771][ T5143] smc: ib device syz1 port 1 has no pnetid [ 35.616383][ T5147] xt_hashlimit: size too large, truncated to 1048576 [ 35.650729][ T5147] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 35.685134][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.733486][ T5152] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.748318][ T5152] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.748415][ T5152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.748802][ T5152] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 35.748819][ T5152] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 35.751877][ T5152] EXT4-fs (loop3): 1 truncate cleaned up [ 35.759639][ T5152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.779905][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.801909][ T5157] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 35.838535][ T5159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.838549][ T5159] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.862126][ T5159] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.66: Failed to acquire dquot type 1 [ 35.862142][ T5159] loop3: lost filesystem error report for type 5 error -5 [ 35.862296][ T5159] EXT4-fs (loop3): Remounting filesystem read-only [ 35.862385][ T5159] EXT4-fs (loop3): 1 truncate cleaned up [ 35.862828][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.884670][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.949180][ T5163] overlay: ./file0 is not a directory [ 35.971342][ T5173] FAULT_INJECTION: forcing a failure. [ 35.971342][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 35.971361][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT [ 35.971372][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.971377][ T5173] Call trace: [ 35.971380][ T5173] show_stack+0x2c/0x3c (C) [ 35.971400][ T5173] __dump_stack+0x30/0x40 [ 35.971411][ T5173] dump_stack_lvl+0xd8/0x12c [ 35.971421][ T5173] dump_stack+0x1c/0x28 [ 35.971430][ T5173] should_fail_ex+0x418/0x58c [ 35.971438][ T5173] should_failslab+0xc4/0x120 [ 35.971446][ T5173] __kmalloc_cache_noprof+0x94/0x5fc [ 35.971454][ T5173] assoc_array_insert+0x2f0/0x1d60 [ 35.971465][ T5173] __key_link_begin+0xc4/0x1c4 [ 35.971474][ T5173] key_link+0x68/0x1cc [ 35.971482][ T5173] call_sbin_request_key+0x390/0x9cc [ 35.971491][ T5173] request_key_and_link+0xfa8/0x1120 [ 35.971500][ T5173] __arm64_sys_request_key+0x2d4/0x37c [ 35.971509][ T5173] invoke_syscall+0x98/0x244 [ 35.971519][ T5173] el0_svc_common+0xec/0x23c [ 35.971529][ T5173] do_el0_svc+0x4c/0x5c [ 35.971538][ T5173] el0_svc+0x60/0x1d8 [ 35.971546][ T5173] el0t_64_sync_handler+0x44/0x104 [ 35.971553][ T5173] el0t_64_sync+0x198/0x19c [ 36.107023][ T5186] EXT4-fs: Ignoring removed i_version option [ 36.107738][ T5186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.108426][ T5186] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.113981][ T5186] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.114134][ T5186] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.114423][ T5186] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.73: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.114438][ T5186] loop3: lost filesystem error report for type 5 error -117 [ 36.115170][ T5186] EXT4-fs (loop3): Remounting filesystem read-only [ 36.115233][ T5186] EXT4-fs (loop3): 1 orphan inode deleted [ 36.115730][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.175927][ T4712] Bluetooth: hci0: command tx timeout [ 36.256283][ T4712] Bluetooth: hci2: command tx timeout [ 36.256321][ T51] Bluetooth: hci3: command tx timeout [ 36.256340][ T4720] Bluetooth: hci4: command tx timeout [ 36.256398][ T4712] Bluetooth: hci1: command tx timeout [ 36.549433][ T5194] FAULT_INJECTION: forcing a failure. [ 36.549433][ T5194] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.549452][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT [ 36.549463][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.549468][ T5194] Call trace: [ 36.549471][ T5194] show_stack+0x2c/0x3c (C) [ 36.549492][ T5194] __dump_stack+0x30/0x40 [ 36.549505][ T5194] dump_stack_lvl+0xd8/0x12c [ 36.549516][ T5194] dump_stack+0x1c/0x28 [ 36.549527][ T5194] should_fail_ex+0x418/0x58c [ 36.549536][ T5194] should_fail+0x14/0x24 [ 36.549543][ T5194] should_fail_usercopy+0x20/0x30 [ 36.549551][ T5194] get_bitmap+0x8c/0x26c [ 36.549563][ T5194] get_nodes+0x18c/0x230 [ 36.549573][ T5194] __arm64_sys_set_mempolicy+0x16c/0x1f8 [ 36.549582][ T5194] invoke_syscall+0x98/0x244 [ 36.549594][ T5194] el0_svc_common+0xec/0x23c [ 36.549606][ T5194] do_el0_svc+0x4c/0x5c [ 36.549617][ T5194] el0_svc+0x60/0x1d8 [ 36.549626][ T5194] el0t_64_sync_handler+0x44/0x104 [ 36.549634][ T5194] el0t_64_sync+0x198/0x19c [ 36.632909][ T5204] ======================================================= [ 36.632909][ T5204] WARNING: The mand mount option has been deprecated and [ 36.632909][ T5204] and is ignored by this kernel. Remove the mand [ 36.632909][ T5204] option from the mount to silence this warning. [ 36.632909][ T5204] ======================================================= [ 36.640172][ T5206] overlay: ./file3 is not a directory [ 36.644487][ T5204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 36.645408][ T5204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.685683][ T5204] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 36.686727][ T5209] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.703563][ T5204] overlay: filesystem on ./file0 is read-only [ 36.752219][ T5204] team0: Device bridge0 is up. Set it down before adding it as a team port [ 36.784288][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.892456][ C1] vcan0: j1939_tp_rxtimer: 0x000000009796957b: rx timeout, send abort [ 36.892755][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eb9e3304: rx timeout, send abort [ 36.892807][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009796957b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.893122][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000eb9e3304: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.926197][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.286801][ T5234] bridge0: port 3(syz_tun) entered blocking state [ 37.286848][ T5234] bridge0: port 3(syz_tun) entered disabled state [ 37.286947][ T5234] syz_tun: entered allmulticast mode [ 37.288638][ T5234] syz_tun: entered promiscuous mode [ 37.289209][ T5234] bridge0: port 3(syz_tun) entered blocking state [ 37.289246][ T5234] bridge0: port 3(syz_tun) entered forwarding state [ 37.545974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 37.546842][ T5243] xt_hashlimit: max too large, truncated to 1048576 [ 37.701876][ T5255] set_capacity_and_notify: 10 callbacks suppressed [ 37.701889][ T5255] loop2: detected capacity change from 0 to 512 [ 37.721217][ T5260] loop4: detected capacity change from 0 to 512 [ 37.744014][ T5262] __nla_validate_parse: 31 callbacks suppressed [ 37.744024][ T5262] netlink: 1 bytes leftover after parsing attributes in process `syz.0.97'. [ 37.744036][ T5262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 37.754844][ T5260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.840088][ T5267] FAULT_INJECTION: forcing a failure. [ 37.840088][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 37.840110][ T5267] CPU: 0 UID: 0 PID: 5267 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT [ 37.840127][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.840134][ T5267] Call trace: [ 37.840137][ T5267] show_stack+0x2c/0x3c (C) [ 37.840155][ T5267] __dump_stack+0x30/0x40 [ 37.840165][ T5267] dump_stack_lvl+0xd8/0x12c [ 37.840175][ T5267] dump_stack+0x1c/0x28 [ 37.840184][ T5267] should_fail_ex+0x418/0x58c [ 37.840192][ T5267] should_failslab+0xc4/0x120 [ 37.840201][ T5267] __kmalloc_noprof+0x108/0x6c8 [ 37.840209][ T5267] sk_prot_alloc+0xc4/0x1e8 [ 37.840218][ T5267] sk_alloc+0x44/0x320 [ 37.840225][ T5267] __netlink_create+0x78/0x23c [ 37.840235][ T5267] netlink_create+0x3b4/0x610 [ 37.840244][ T5267] __sock_create+0x31c/0x670 [ 37.840254][ T5267] __sys_socket_create+0xc0/0x11c [ 37.840262][ T5267] __sys_socket+0x44/0xec [ 37.840271][ T5267] __arm64_sys_socket+0x84/0x9c [ 37.840280][ T5267] invoke_syscall+0x98/0x244 [ 37.840290][ T5267] el0_svc_common+0xec/0x23c [ 37.840300][ T5267] do_el0_svc+0x4c/0x5c [ 37.840309][ T5267] el0_svc+0x60/0x1d8 [ 37.840317][ T5267] el0t_64_sync_handler+0x44/0x104 [ 37.840324][ T5267] el0t_64_sync+0x198/0x19c [ 37.889179][ T5279] loop3: detected capacity change from 0 to 2048 [ 37.904990][ T5279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.912650][ T5279] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.997113][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.335687][ T4726] Bluetooth: hci2: command tx timeout [ 38.335722][ T4712] Bluetooth: hci4: command tx timeout [ 38.345650][ T4726] Bluetooth: hci3: command tx timeout [ 38.345678][ T4712] Bluetooth: hci1: command tx timeout [ 38.484636][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 38.484978][ T5296] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.104'. [ 38.485122][ T5296] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 38.491178][ T5296] 0ªX¹¦Dö»: entered allmulticast mode [ 38.492346][ T5296] FAULT_INJECTION: forcing a failure. [ 38.492346][ T5296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.492361][ T5296] CPU: 0 UID: 0 PID: 5296 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT [ 38.492371][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.492377][ T5296] Call trace: [ 38.492380][ T5296] show_stack+0x2c/0x3c (C) [ 38.492401][ T5296] __dump_stack+0x30/0x40 [ 38.492413][ T5296] dump_stack_lvl+0xd8/0x12c [ 38.492425][ T5296] dump_stack+0x1c/0x28 [ 38.492436][ T5296] should_fail_ex+0x418/0x58c [ 38.492446][ T5296] should_fail+0x14/0x24 [ 38.492453][ T5296] should_fail_usercopy+0x20/0x30 [ 38.492461][ T5296] _inline_copy_from_user+0x3c/0x174 [ 38.492472][ T5296] __sys_bpf+0x1b4/0x82c [ 38.492482][ T5296] __arm64_sys_bpf+0xd0/0xec [ 38.492491][ T5296] invoke_syscall+0x98/0x244 [ 38.492503][ T5296] el0_svc_common+0xec/0x23c [ 38.492515][ T5296] do_el0_svc+0x4c/0x5c [ 38.492526][ T5296] el0_svc+0x60/0x1d8 [ 38.492538][ T5296] el0t_64_sync_handler+0x44/0x104 [ 38.492546][ T5296] el0t_64_sync+0x198/0x19c [ 38.568349][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.568535][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.568690][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.568841][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.569127][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.569396][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.569563][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.569716][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.569878][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.570038][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 38.571801][ T5262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 38.630912][ T5309] loop2: detected capacity change from 0 to 512 [ 38.729992][ T5315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 38.735135][ T5318] overlayfs: failed to resolve './bus': -2 [ 38.735363][ T4730] bridge0: port 3(syz_tun) entered disabled state [ 38.743276][ T4730] syz_tun (unregistering): left allmulticast mode [ 38.743295][ T4730] syz_tun (unregistering): left promiscuous mode [ 38.743325][ T4730] bridge0: port 3(syz_tun) entered disabled state [ 38.796179][ T5325] No control pipe specified [ 38.807769][ T5328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 38.857708][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 38.857723][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 38.899374][ T4730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.937205][ T5083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.955685][ T5348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.978607][ T5350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.014564][ T5344] loop3: detected capacity change from 0 to 8192 [ 39.031756][ T5344] loop3: AHDI p1 p2 p3 p4 [ 39.031843][ T5344] loop3: p1 start 2130706432 is beyond EOD, truncated [ 39.031854][ T5344] loop3: p3 start 1375731712 is beyond EOD, truncated [ 39.034319][ T5083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.043362][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 39.047144][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 39.047780][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 39.048561][ T4726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 39.048791][ T4726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.108365][ T5083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.251760][ T5354] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.289640][ T5083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.369554][ T5378] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 39.740536][ T5411] loop1: detected capacity change from 0 to 4096 [ 39.749609][ T5411] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.751691][ T5411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.754232][ T5083] bridge_slave_1: left allmulticast mode [ 39.754256][ T5083] bridge_slave_1: left promiscuous mode [ 39.754712][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.772165][ T5083] bridge_slave_0: left allmulticast mode [ 39.772182][ T5083] bridge_slave_0: left promiscuous mode [ 39.772258][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.783253][ T5402] netlink: 404 bytes leftover after parsing attributes in process `syz.3.129'. [ 39.824693][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.902578][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 39.902592][ T30] audit: type=1326 audit(39.880:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.902974][ T30] audit: type=1326 audit(39.880:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.902992][ T30] audit: type=1326 audit(39.880:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.903068][ T30] audit: type=1326 audit(39.880:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.905992][ T30] audit: type=1326 audit(39.890:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.906010][ T30] audit: type=1326 audit(39.890:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.927203][ T30] audit: type=1326 audit(39.910:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.927231][ T30] audit: type=1326 audit(39.910:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.935125][ T30] audit: type=1326 audit(39.910:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.935145][ T30] audit: type=1326 audit(39.910:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5423 comm="syz.1.131" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7ffc0000 [ 39.967798][ T5424] FAULT_INJECTION: forcing a failure. [ 39.967798][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 39.967816][ T5424] CPU: 1 UID: 0 PID: 5424 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT [ 39.967826][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.967832][ T5424] Call trace: [ 39.967835][ T5424] show_stack+0x2c/0x3c (C) [ 39.967856][ T5424] __dump_stack+0x30/0x40 [ 39.967869][ T5424] dump_stack_lvl+0xd8/0x12c [ 39.967881][ T5424] dump_stack+0x1c/0x28 [ 39.967892][ T5424] should_fail_ex+0x418/0x58c [ 39.967901][ T5424] should_failslab+0xc4/0x120 [ 39.967910][ T5424] kmem_cache_alloc_node_noprof+0x98/0x604 [ 39.967920][ T5424] __alloc_skb+0x1f0/0x610 [ 39.967932][ T5424] audit_log_start+0x180/0x868 [ 39.967944][ T5424] audit_seccomp+0x60/0x14c [ 39.967952][ T5424] __seccomp_filter+0xc88/0x1a7c [ 39.967963][ T5424] __seccomp_permit_syscall+0xd8/0x27c [ 39.967974][ T5424] syscall_trace_enter+0x2d4/0x6b4 [ 39.967984][ T5424] el0_svc_common+0x170/0x23c [ 39.967997][ T5424] do_el0_svc+0x4c/0x5c [ 39.968008][ T5424] el0_svc+0x60/0x1d8 [ 39.968017][ T5424] el0t_64_sync_handler+0x44/0x104 [ 39.968025][ T5424] el0t_64_sync+0x198/0x19c [ 39.974627][ T5424] binder: 5423:5424 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 39.974643][ T5424] binder: 5423:5424 ioctl c0306201 20000240 returned -22 [ 40.024473][ T5083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.059596][ T5083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.072217][ T5431] loop1: detected capacity change from 0 to 512 [ 40.077168][ T5431] EXT4-fs: Ignoring removed oldalloc option [ 40.077936][ T5431] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.096125][ T5431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.096745][ T5083] bond0 (unregistering): Released all slaves [ 40.116910][ T5431] EXT4-fs error (device loop1): __ext4_remount:6873: comm syz.1.132: Abort forced by user [ 40.117670][ T5431] EXT4-fs (loop1): Remounting filesystem read-only [ 40.117684][ T5431] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.138905][ T5431] netlink: 64 bytes leftover after parsing attributes in process `syz.1.132'. [ 40.203724][ T5444] netlink: 27 bytes leftover after parsing attributes in process `syz.2.134'. [ 40.240976][ T5449] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 40.281281][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.281345][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.281415][ T5354] bridge_slave_0: entered allmulticast mode [ 40.282404][ T5354] bridge_slave_0: entered promiscuous mode [ 40.289245][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.289269][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.289318][ T5354] bridge_slave_1: entered allmulticast mode [ 40.289774][ T5354] bridge_slave_1: entered promiscuous mode [ 40.341641][ T5451] loop2: detected capacity change from 0 to 512 [ 40.360433][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.361467][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.379004][ T5451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.389274][ T5354] team0: Port device team_slave_0 added [ 40.390173][ T5354] team0: Port device team_slave_1 added [ 40.423437][ T5451] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 2147500033 (only 1 groups) [ 40.435142][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.435153][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.435167][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.436501][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.436509][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.436521][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.446372][ T5354] hsr_slave_0: entered promiscuous mode [ 40.446649][ T5354] hsr_slave_1: entered promiscuous mode [ 40.446820][ T5354] debugfs: 'hsr0' already exists in 'hsr' [ 40.446830][ T5354] Cannot create hsr debugfs directory [ 40.638842][ T5354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.657773][ T5354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.658163][ T5354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.659652][ T5354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.660069][ T5354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.664870][ T5354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.665258][ T5354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.680374][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.683485][ T5354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.727726][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.727757][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.727830][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.727859][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.814524][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.836889][ T5493] loop1: detected capacity change from 0 to 4096 [ 40.840383][ T5493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.840394][ T5493] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.844815][ T5493] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 40.844849][ T5493] System zones: 0-5 [ 40.852208][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.852913][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.853960][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.856015][ T5493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.870742][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.870766][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.878725][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.878748][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.925392][ T5083] hsr_slave_0: left promiscuous mode [ 40.929556][ T5083] hsr_slave_1: left promiscuous mode [ 40.929961][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.929977][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.932157][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.932173][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.959844][ T5083] veth1_macvtap: left promiscuous mode [ 40.959880][ T5083] veth0_macvtap: left promiscuous mode [ 40.959930][ T5083] veth1_vlan: left promiscuous mode [ 40.959975][ T5083] veth0_vlan: left promiscuous mode [ 41.066006][ T4712] Bluetooth: hci4: command tx timeout [ 41.072672][ T5083] team0 (unregistering): Port device team_slave_1 removed [ 41.079660][ T5083] team0 (unregistering): Port device team_slave_0 removed [ 41.083385][ T5516] sctp: [Deprecated]: syz.1.138 (pid 5516) Use of int in max_burst socket option deprecated. [ 41.083385][ T5516] Use struct sctp_assoc_value instead [ 41.114200][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.135953][ T5493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.177895][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.181236][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.290478][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.291521][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.421324][ T5544] bridge3: entered promiscuous mode [ 41.468578][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.512865][ T5565] usb usb2: check_ctrlrecip: process 5565 (syz.3.145) requesting ep 01 but needs 81 [ 41.512887][ T5565] usb usb2: usbfs: process 5565 (syz.3.145) did not claim interface 0 before use [ 41.585905][ T5573] loop2: detected capacity change from 0 to 8 [ 41.596594][ T5573] SQUASHFS error: Failed to read block 0x260685: -5 [ 41.596612][ T5573] SQUASHFS error: Unable to read metadata cache entry [260685] [ 41.596619][ T5573] SQUASHFS error: Unable to read directory block [260685:0] [ 41.892578][ T5354] veth0_vlan: entered promiscuous mode [ 41.894596][ T5354] veth1_vlan: entered promiscuous mode [ 41.904949][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 41.918306][ T5354] veth0_macvtap: entered promiscuous mode [ 41.921716][ T5354] veth1_macvtap: entered promiscuous mode [ 41.925256][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.935050][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.937131][ T5579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.944001][ T351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.944169][ T351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.944259][ T351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.944328][ T351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.996652][ T638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.996669][ T638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.014523][ T281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.014541][ T281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.020670][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.040601][ T5591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 42.151332][ T5599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.158611][ T5599] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.237861][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.241290][ T4825] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.272005][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.534755][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.335941][ T4712] Bluetooth: hci4: command tx timeout [ 43.365424][ T5644] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.663008][ T5660] set_capacity_and_notify: 3 callbacks suppressed [ 43.663031][ T5660] loop1: detected capacity change from 0 to 128 [ 43.682576][ T5660] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.691501][ T5660] syz.1.160 (pid 5660) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 43.732831][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.760692][ T5666] loop0: detected capacity change from 0 to 512 [ 43.781808][ T5673] loop1: detected capacity change from 0 to 256 [ 43.782258][ T5673] vfat: Unknown parameter 'ioet' [ 43.802925][ T5666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.811107][ T5673] loop1: detected capacity change from 0 to 8 [ 43.811387][ T5673] squashfs: Unknown parameter 'vfat' [ 43.846383][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.918247][ T5682] __nla_validate_parse: 6 callbacks suppressed [ 43.918264][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 43.918276][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 43.933611][ T5684] fuse: Unknown parameter '0x000000000000000600000000000000000006' [ 44.006137][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.007452][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.023799][ T5699] loop1: detected capacity change from 0 to 512 [ 44.053171][ T5699] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.169: bg 0: block 5: invalid block bitmap [ 44.053193][ T5699] loop1: lost filesystem error report for type 5 error -117 [ 44.055118][ T5699] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 44.055139][ T5699] loop1: lost filesystem error report for type 5 error -117 [ 44.055598][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 44.055614][ C1] EXT4-fs (loop1): initial error at time 44: ext4_validate_block_bitmap:436 [ 44.055629][ C1] EXT4-fs (loop1): last error at time 44: ext4_mb_clear_bb:6680 [ 44.057652][ T5699] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.169: invalid indirect mapped block 3 (level 2) [ 44.057682][ T5699] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.061536][ T5699] EXT4-fs (loop1): 1 orphan inode deleted [ 44.061556][ T5699] EXT4-fs (loop1): 1 truncate cleaned up [ 44.072367][ T5699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.094456][ T5708] netlink: 81 bytes leftover after parsing attributes in process `syz.0.170'. [ 44.122323][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.211964][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.267872][ T5726] ip_tables: iptables: counters copy to user failed while replacing table [ 45.083899][ T5769] syz.0.176 (5769): drop_caches: 2 [ 45.090742][ T5787] overlayfs: upper fs does not support file handles, falling back to index=off. [ 45.132697][ T5794] loop2: detected capacity change from 0 to 2048 [ 45.140623][ T5796] batman_adv: batadv0: Adding interface: macsec0 [ 45.140636][ T5796] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.140656][ T5796] batman_adv: batadv0: Interface activated: macsec0 [ 45.143253][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.144455][ T5794] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.207573][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.236560][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 45.236574][ T30] audit: type=1326 audit(45.220:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5791 comm="syz.1.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7fc00000 [ 45.247302][ T30] audit: type=1326 audit(45.220:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5791 comm="syz.1.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98d79e28 code=0x7fc00000 [ 45.249745][ T5813] loop2: detected capacity change from 0 to 512 [ 45.251698][ T5814] loop1: detected capacity change from 0 to 2048 [ 45.274566][ T5814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.281839][ T30] audit: type=1326 audit(45.260:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5791 comm="syz.1.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79e28 code=0x7fc00000 [ 45.291079][ T5813] UBIFS error (pid: 5813): cannot open "ubi0:testvol", error -19 [ 45.303261][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.377253][ T5832] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 45.385692][ T4712] Bluetooth: hci4: command tx timeout [ 45.526203][ T4818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.648694][ T5864] loop2: detected capacity change from 0 to 2048 [ 45.671044][ T5864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.673151][ T5864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.675918][ T4818] usb 1-1: Using ep0 maxpacket: 8 [ 45.677948][ T4818] usb 1-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice= 0.40 [ 45.679639][ T4818] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 45.681146][ T4818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.681161][ T4818] usb 1-1: Product: syz [ 45.681169][ T4818] usb 1-1: Manufacturer: syz [ 45.681176][ T4818] usb 1-1: SerialNumber: syz [ 45.743405][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.788799][ T5872] loop2: detected capacity change from 0 to 8192 [ 45.846798][ T5872] [ 45.847357][ T5872] ====================================================== [ 45.848625][ T5872] WARNING: possible circular locking dependency detected [ 45.849802][ T5872] syzkaller #0 Not tainted [ 45.850533][ T5872] ------------------------------------------------------ [ 45.851641][ T5872] syz.2.197/5872 is trying to acquire lock: [ 45.852598][ T5872] ffff80008a3b11e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x47c [ 45.854473][ T5872] [ 45.854473][ T5872] but task is already holding lock: [ 45.855733][ T5872] ffff0000f2220140 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: configfs_symlink+0x400/0xfb4 [ 45.857684][ T5872] [ 45.857684][ T5872] which lock already depends on the new lock. [ 45.857684][ T5872] [ 45.859606][ T5872] [ 45.859606][ T5872] the existing dependency chain (in reverse order) is: [ 45.861186][ T5872] [ 45.861186][ T5872] -> #3 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}: [ 45.862760][ T5872] down_write+0xac/0x2a8 [ 45.863671][ T5872] configfs_depend_item_unlocked+0x154/0x344 [ 45.864864][ T5872] usbg_make_tpg+0x218/0x4a0 [ 45.865842][ T5872] target_fabric_make_tpg+0x98/0x518 [ 45.866887][ T5872] configfs_mkdir+0x374/0x7d4 [ 45.867852][ T5872] vfs_mkdir+0x2e4/0x46c [ 45.868711][ T5872] filename_mkdirat+0x228/0x3f4 [ 45.869676][ T5872] __arm64_sys_mkdirat+0x9c/0xc0 [ 45.870640][ T5872] invoke_syscall+0x98/0x244 [ 45.871601][ T5872] el0_svc_common+0xec/0x23c [ 45.872519][ T5872] do_el0_svc+0x4c/0x5c [ 45.873387][ T5872] el0_svc+0x60/0x1d8 [ 45.874209][ T5872] el0t_64_sync_handler+0x44/0x104 [ 45.875273][ T5872] el0t_64_sync+0x198/0x19c [ 45.876125][ T5872] [ 45.876125][ T5872] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 45.877521][ T5872] __mutex_lock+0x164/0x1078 [ 45.878436][ T5872] mutex_lock_nested+0x24/0x30 [ 45.879397][ T5872] tcm_alloc_inst+0x6c/0x190 [ 45.880352][ T5872] try_get_usb_function_instance+0xe4/0x164 [ 45.881560][ T5872] usb_get_function_instance+0x24/0xb0 [ 45.882691][ T5872] function_make+0x110/0x300 [ 45.883672][ T5872] configfs_mkdir+0x374/0x7d4 [ 45.884650][ T5872] vfs_mkdir+0x2e4/0x46c [ 45.885539][ T5872] filename_mkdirat+0x228/0x3f4 [ 45.886522][ T5872] __arm64_sys_mkdirat+0x9c/0xc0 [ 45.887575][ T5872] invoke_syscall+0x98/0x244 [ 45.888563][ T5872] el0_svc_common+0xec/0x23c [ 45.889519][ T5872] do_el0_svc+0x4c/0x5c [ 45.890425][ T5872] el0_svc+0x60/0x1d8 [ 45.891248][ T5872] el0t_64_sync_handler+0x44/0x104 [ 45.892322][ T5872] el0t_64_sync+0x198/0x19c [ 45.893288][ T5872] [ 45.893288][ T5872] -> #1 (func_lock){+.+.}-{4:4}: [ 45.894603][ T5872] __mutex_lock+0x164/0x1078 [ 45.895527][ T5872] mutex_lock_nested+0x24/0x30 [ 45.896507][ T5872] try_get_usb_function_instance+0x38/0x164 [ 45.897661][ T5872] usb_get_function_instance+0x24/0xb0 [ 45.898700][ T5872] function_make+0x110/0x300 [ 45.899647][ T5872] configfs_mkdir+0x374/0x7d4 [ 45.900598][ T5872] vfs_mkdir+0x2e4/0x46c [ 45.901422][ T5872] filename_mkdirat+0x228/0x3f4 [ 45.902376][ T5872] __arm64_sys_mkdirat+0x9c/0xc0 [ 45.903402][ T5872] invoke_syscall+0x98/0x244 [ 45.904315][ T5872] el0_svc_common+0xec/0x23c [ 45.905212][ T5872] do_el0_svc+0x4c/0x5c [ 45.906089][ T5872] el0_svc+0x60/0x1d8 [ 45.906910][ T5872] el0t_64_sync_handler+0x44/0x104 [ 45.907960][ T5872] el0t_64_sync+0x198/0x19c [ 45.908949][ T5872] [ 45.908949][ T5872] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 45.910456][ T5872] __lock_acquire+0x1660/0x2b08 [ 45.911423][ T5872] lock_acquire+0x13c/0x320 [ 45.912310][ T5872] __mutex_lock+0x164/0x1078 [ 45.913225][ T5872] mutex_lock_nested+0x24/0x30 [ 45.914194][ T5872] uvcg_streaming_header_allow_link+0x7c/0x47c [ 45.915449][ T5872] configfs_symlink+0x5ec/0xfb4 [ 45.916445][ T5872] vfs_symlink+0x16c/0x290 [ 45.917382][ T5872] filename_symlinkat+0x18c/0x328 [ 45.918378][ T5872] __arm64_sys_symlinkat+0xb0/0xdc [ 45.919450][ T5872] invoke_syscall+0x98/0x244 [ 45.920405][ T5872] el0_svc_common+0xec/0x23c [ 45.921355][ T5872] do_el0_svc+0x4c/0x5c [ 45.922207][ T5872] el0_svc+0x60/0x1d8 [ 45.923033][ T5872] el0t_64_sync_handler+0x44/0x104 [ 45.924076][ T5872] el0t_64_sync+0x198/0x19c [ 45.925036][ T5872] [ 45.925036][ T5872] other info that might help us debug this: [ 45.925036][ T5872] [ 45.926961][ T5872] Chain exists of: [ 45.926961][ T5872] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#32 [ 45.926961][ T5872] [ 45.929812][ T5872] Possible unsafe locking scenario: [ 45.929812][ T5872] [ 45.931100][ T5872] CPU0 CPU1 [ 45.932009][ T5872] ---- ---- [ 45.932935][ T5872] lock(&sb->s_type->i_mutex_key#32); [ 45.933932][ T5872] lock(tpg_instances_lock); [ 45.935166][ T5872] lock(&sb->s_type->i_mutex_key#32); [ 45.936541][ T5872] lock(gadget_subsys.su_mutex); [ 45.937437][ T5872] [ 45.937437][ T5872] *** DEADLOCK *** [ 45.937437][ T5872] [ 45.938923][ T5872] locks held by syz.2.197/5872: 2, last CPU#0: [ 45.940001][ T5872] #0: ffff0000c41f6460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 45.941734][ T5872] #1: ffff0000f2220140 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: configfs_symlink+0x400/0xfb4 [ 45.943769][ T5872] [ 45.943769][ T5872] stack backtrace: [ 45.944866][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.2.197 Not tainted syzkaller #0 PREEMPT [ 45.946733][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.948563][ T5872] Call trace: [ 45.949146][ T5872] show_stack+0x2c/0x3c (C) [ 45.949984][ T5872] __dump_stack+0x30/0x40 [ 45.950695][ T5872] dump_stack_lvl+0xd8/0x12c [ 45.951559][ T5872] dump_stack+0x1c/0x28 [ 45.952294][ T5872] print_circular_bug+0x328/0x330 [ 45.953228][ T5872] check_noncircular+0x158/0x174 [ 45.954166][ T5872] __lock_acquire+0x1660/0x2b08 [ 45.955047][ T5872] lock_acquire+0x13c/0x320 [ 45.955842][ T5872] __mutex_lock+0x164/0x1078 [ 45.956665][ T5872] mutex_lock_nested+0x24/0x30 [ 45.957529][ T5872] uvcg_streaming_header_allow_link+0x7c/0x47c [ 45.958663][ T5872] configfs_symlink+0x5ec/0xfb4 [ 45.959515][ T5872] vfs_symlink+0x16c/0x290 [ 45.960278][ T5872] filename_symlinkat+0x18c/0x328 [ 45.961158][ T5872] __arm64_sys_symlinkat+0xb0/0xdc [ 45.962066][ T5872] invoke_syscall+0x98/0x244 [ 45.962888][ T5872] el0_svc_common+0xec/0x23c [ 45.963731][ T5872] do_el0_svc+0x4c/0x5c [ 45.964542][ T5872] el0_svc+0x60/0x1d8 [ 45.965287][ T5872] el0t_64_sync_handler+0x44/0x104 [ 45.966179][ T5872] el0t_64_sync+0x198/0x19c [ 45.988496][ T4818] usb 1-1: USB disconnect, device number 2 [ 46.576369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.455582][ T4712] Bluetooth: hci4: command tx timeout