last executing test programs: 1m32.295313979s ago: executing program 32 (id=63): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c2800005000d000100000008000500", @ANYRES32=r3, @ANYBLOB="496535932e01da7cf46d9f196a4b74664a3126f508ff90ad8d42128d743ecea39e59885c2bfee41830b3b7bb73bd8e6fd5369e6f86e58b6c4f8823d6a3683a715bf60eefe4d603156e5ac1a98a9c301bcee96d1dabf4a4eb8e415aad52540e784c401b928e4675d205ccbb55bcd10f463ca7628334fa1daf609947571766ec1f72cd0f21e30301e93fee76b6e4c7d9b542f539dd570c582750a464552ba51a63386612199d849d48ba4837467d80df4cbc27616b46fd4c4771afb2747e6fce8939ef64000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r4 = fanotify_init(0x20, 0x800) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r5, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000640)}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d8e9c39993f75af7df84d039b4cf1c3af0472e7868ac478d0233d9a8d3fcf99a232ae3fd78dea3548e5882eeeb897e04e661e26", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000004016009ee4e0660600000000b00000", @ANYRES32, @ANYBLOB="00000004000010000000e5ff00000000000100", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0100000003000000050000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x6, 0x18}, 0xc) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000000)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x34, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcd3a}}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x37, &(0x7f00000002c0)=""/55, 0x40f00, 0x2c, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x10, 0x3ff, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, r5, r6, r7, r8, r10, r11, r12], &(0x7f00000007c0)=[{0x3, 0x4, 0x3, 0xa}, {0x2, 0x4, 0x4, 0x2}, {0x3, 0x2, 0xc, 0x8}, {0x0, 0x5, 0x3, 0xa}, {0x4, 0x3, 0x1, 0x6}, {0x3, 0x5, 0x2, 0xe}, {0x0, 0x1, 0xc, 0x1}], 0x10, 0x3}, 0x94) r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) fanotify_mark(r4, 0x241, 0x8000008, r13, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r14, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r13, 0x40089413, &(0x7f0000000000)=0x6) r15 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r15, 0x80085504, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)}, 0xc000) ioctl$PIO_CMAP(r13, 0x4b71, &(0x7f0000000080)={0x9, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x3}) 1m30.433987494s ago: executing program 3 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") (async) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff9, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_LIST={0xc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m30.128640621s ago: executing program 3 (id=93): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)={0x1}) fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0xa, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1m26.704148494s ago: executing program 3 (id=128): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0xfffffffe, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @empty}, @ib={0x1b, 0x6, 0x7fffffe, {"7d9006000800"}, 0x0, 0xb3b, 0x6}}}, 0x118) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f00000004c0)={0x1, 0xd, 0x800081}) 1m25.499748936s ago: executing program 3 (id=134): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000006, &(0x7f0000001d40)={[], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) close(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) 1m25.257868728s ago: executing program 3 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006980)=@deltfilter={0x234c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xc, 0xb}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xefc, 0x2, [@TCA_CGROUP_EMATCHES={0xb8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0x3}, {0x4}}}, @TCF_EM_IPT={0x68, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_DATA={0xc, 0x5, "f0a8671c994bae2e"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x24, 0x5, "70813804dca605b1d1c410735bd71522f241429b91aeb4a2befa3df944f1bd97"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x7ff, 0xb8eb, 0x74, 0x7f}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}, @TCA_CGROUP_EMATCHES={0x140, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfd, 0x7, 0x1}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0xa}, {0xf, 0x1, 0x0, 0x8a8}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x7f}, {0x6, 0x6, 0x2, "2d7ed9cd34d2"}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x770}, [@TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="8849d2cbc5b83cb60d63", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f8d6c712f60e3d", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="edb1f5ec", @TCF_META_TYPE_VAR="0fd12260"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="78d4b6ac28f81756"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ff", @TCF_META_TYPE_VAR="4708f82eea8300", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="24473a0a85bf8e", @TCF_META_TYPE_VAR="b5044c6e9eaf7bb8", @TCF_META_TYPE_VAR="02a98d", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="86b8", @TCF_META_TYPE_VAR="cd7da92e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="db018d0c", @TCF_META_TYPE_VAR="e238814869"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x400, 0x7, 0x8}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x7ff, 0x9, 0x6191}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x95f3, 0x8, 0x401}, {0x2, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d, 0x6, 0x3db6, 0x0, 0xdc83, 0x0, 0x2180, 0x40, 0x4, 0x5, 0x48000000, 0x1, 0x6, 0x5, 0xff, 0x1, 0xc3d8, 0x10000, 0x1, 0x200, 0x3ff, 0x3, 0x15, 0x1ffbcbbb, 0xea, 0x1, 0x0, 0x7ce, 0x100, 0x3, 0x3275, 0xf7da, 0x8ac3, 0x8, 0x2, 0x401, 0x7, 0x6, 0x1, 0x8, 0x1, 0x9, 0x10001, 0x7, 0x7, 0xe, 0x9, 0xfffffffa, 0x0, 0x4, 0x0, 0x8, 0xffffff5f, 0x3, 0x9, 0x5, 0x1, 0x1, 0xfffffffb, 0xffffffff, 0x800, 0x751, 0x80000000, 0x3e7, 0x28000, 0xa3b, 0x5, 0x2, 0x1, 0x6, 0xd78, 0xc, 0x7, 0xe, 0x81, 0x1, 0x0, 0x704b, 0x5, 0x2, 0x6, 0x4, 0x9, 0xd707, 0xff, 0x9, 0x8, 0x8, 0x5, 0x9, 0x9, 0xbae4, 0xfffffff8, 0x5b, 0x4, 0x4, 0x0, 0x10000, 0x9b, 0xfffffffa, 0x3, 0x6, 0x7, 0x4, 0x7fff, 0x8, 0xf, 0x6, 0x7, 0x7f, 0xedec, 0xba, 0x56a69c81, 0x7fff, 0x200, 0xa5, 0xfffffff2, 0xffffffff, 0xe, 0x80000001, 0x8, 0x0, 0x8, 0x80000001, 0x5, 0x20e, 0x7, 0x3, 0xe6, 0x9, 0x0, 0x33579ed5, 0xf7, 0x1000000, 0x6, 0x9f, 0x6a, 0xd, 0x4, 0x2f, 0x1, 0x7ff, 0x5665, 0x4, 0x2, 0xc0000000, 0x3, 0x3, 0x6, 0x7fffffff, 0x1, 0x337, 0x4, 0x6b, 0x1, 0xbbc, 0x6, 0x7, 0xe8d, 0x3, 0x7, 0x7, 0x10000, 0x7, 0x80000000, 0x1, 0x2, 0x7ff, 0x3, 0x7, 0x13ca, 0x9, 0xb, 0x0, 0x7372bdf5, 0x80000001, 0x5c44, 0xc23, 0xd8a8, 0x0, 0x7, 0xd1dd, 0x4f, 0xf386, 0xd, 0x9, 0x5, 0xfffffff8, 0x5, 0x8, 0x2, 0x8, 0x5, 0x5, 0x8, 0x3, 0x0, 0x6800, 0x81, 0xfffffffd, 0x8001, 0x4, 0x8, 0x401, 0x8000, 0x1, 0x8, 0xfff, 0x10001, 0x7, 0x5, 0x2, 0x8, 0x0, 0x3, 0x3f9d, 0x8, 0x45c72086, 0x7fffffff, 0x5, 0x2, 0x1, 0x1, 0xfee9, 0x1, 0x10000, 0x0, 0xffff, 0xd, 0x2, 0x3, 0x0, 0x80000001, 0x100, 0xfff, 0xc1, 0x0, 0x3, 0x9, 0x200, 0x0, 0xf0, 0x6231db21, 0xc, 0x1ff, 0x3, 0xfffffbb2, 0x7, 0x8, 0xf, 0x5, 0x800, 0xff, 0x81, 0xffff, 0x199a]}]}, @TCA_CGROUP_EMATCHES={0x1ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x6}, {0x5, 0x5, 0x1, "428066cd46"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x6}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xfffa}, {0x0, 0xa, 0x1, "aa4574613001bb09adf2"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3ff, 0x3, 0x8000}, {0x1, 0x7, 0x0, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x7}, {0x8, 0xa, 0x2, "ee010000000000001700"}}}]}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xa, 0x3, 0x8}, {0x7, 0x9, 0x5, 0x9}}}, @TCF_EM_IPT={0xbc, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xa7, 0x5, "342c17c2e77143420719cc50f02be1a21bf56cac753b58996e579ea121b6204864e147e351741795ec580eefd279fb3bada53346a80afd9a4f320d5bb8be5984ee529d4578c3bcce640c17d383c744301887697fb3c6fe3b6da61cb912230befff134cbb65c158e470dce8a6b5d99c457c206f1f96468c0b68b88458b11b2d6297714f249158745ecd556821056a7ed5a17fc1346d83fed894f4dd4a47f4ebeae2d500"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa, 0x2, 0x3}, {0x7, 0x7, 0x1, "3e0c843901a096"}}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x4b}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3d0c}}]}, @TCA_CGROUP_POLICE={0x420, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0xdbf5, 0xa, 0x6, 0x1fa49145, 0x1000, 0x4, 0x5, 0x100, 0x5e26783c, 0x1000, 0x3, 0x4, 0x0, 0x8, 0x9, 0x1000, 0x5, 0x2, 0x6, 0x9, 0x3, 0x1000, 0x9e5d, 0x15a, 0x2, 0x1000, 0x6, 0x8, 0x6, 0x1, 0x5, 0x9, 0x54, 0x621, 0x1fb, 0x5, 0x4, 0x1, 0x7, 0x4, 0xb, 0x100, 0x7fff, 0x5, 0x7, 0x7, 0x6, 0x4, 0x10, 0xff, 0x7, 0x8001, 0x80000000, 0x6, 0x4d15, 0x9, 0x2a6, 0x4, 0x7, 0x2, 0x8001, 0x0, 0x1, 0x2, 0xfff, 0x3, 0x5, 0x1, 0x6, 0x1ded5704, 0x60c51979, 0xfff, 0x111c8af7, 0xffffff7f, 0xe, 0xc00000, 0x1, 0x0, 0x80000001, 0x7, 0x8001, 0x4, 0x1e, 0x400, 0x0, 0x80000001, 0x7f, 0x4, 0x2, 0x5, 0x0, 0x8, 0x3, 0xfff, 0x8, 0x7, 0x9, 0x1ff, 0x2, 0x0, 0x90c, 0x8000, 0xfffffffb, 0x7, 0x40, 0x2, 0x1, 0x8, 0x3, 0x40, 0x6a432b3f, 0x3, 0x4, 0x4a, 0x0, 0xfff, 0xb50, 0x8, 0x7, 0x8001, 0x6, 0x400, 0xe, 0x8, 0xffffff2a, 0x9, 0x2, 0x80000000, 0x41, 0xcc38, 0xe, 0x4, 0x2, 0x7f, 0x200, 0xa, 0x6, 0x2, 0x1, 0x9, 0x1, 0x7, 0x9, 0x1, 0x9, 0xffffffff, 0x7, 0x8, 0xa890, 0x1, 0xfffffff5, 0x5, 0x80, 0x2, 0x1, 0x4, 0xffffff80, 0x2f, 0x6dd5, 0x2, 0xbbe, 0x2, 0x2, 0x0, 0x5, 0x7, 0x11e1, 0x5, 0x8001, 0x8, 0x4, 0xa07, 0x80, 0x5, 0x3, 0x2, 0x1, 0x3, 0xffffffe0, 0xfffffeff, 0x4, 0x0, 0x80, 0x62e, 0x6, 0x7, 0x3d4f, 0x3, 0x8, 0x6, 0x9, 0x401, 0x63f2e8a8, 0x3, 0x8, 0x9, 0xa, 0x400000d2, 0x3, 0x81, 0x6, 0x0, 0x7, 0x578c, 0xc, 0xfffffffd, 0x0, 0x480, 0x3, 0x0, 0x2, 0x1, 0xa, 0x9, 0xd2, 0xc, 0x76, 0x0, 0x7, 0x28, 0x7, 0x2, 0xc545, 0x707, 0xfffffffd, 0xff, 0x7, 0x10000, 0xfffffff3, 0x6, 0xb, 0xc43e, 0x101, 0x8, 0x320, 0xfed, 0x1, 0x0, 0x6, 0xfffffffc, 0x7, 0x7ff, 0x6, 0x6, 0x2, 0x1, 0x3ff, 0x6, 0xff32, 0xc250, 0x0, 0x100, 0x5, 0xf0c, 0x7, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_CGROUP_EMATCHES={0x2e4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x3}, "27050c32d2a224e7c7a2e94492e4e57588464441a04ebe75a32683dd2ecd45d1d332bc1c0c03f88d05b54794ece3d736afd7ba7602e0b1fbc9f1af9b1833f2071a5e6f621371b5e9858d5804c96f0f0838f70e047ea241fb1e7d32f2269a0ce1a0d1f197f43e09f96b47a43ebfe8f5598b9ac2d0c788390e538390ab969d7cbf99660212981d4434b702db303206ee78c7ba1dbae719c64dcc7bff3709b94f70d5ff26b6c8fb9ed7894a5c6cc2dcecf1f23dd586b20b177c7c388f94277a86665c5d951624a658381a3a70a4b0d50f7fd112ea823d9f47804cbab820256bae35b8"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xa0, 0x2, 0x5}, {0x80, 0x9, 0x1, "b4b9a3e91028866cd2"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x211, 0x1, 0x1}, {0x2, 0x63, 0x3fe, 0x0, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x77, 0x2}, {0x9, 0xb, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8}, {0x4, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="12", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="84", @TCF_META_TYPE_VAR="d43219ae"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9da, 0x3, 0x1000}, {0x800, 0x0, 0x10, 0x6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x5}, {0x2, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa}, {{0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x800, 0x3, 0x8000}, {0x0, 0x10000, 0x5, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x6}, "c6382b3c738518c3d947656e32bbf9b4f31f7d00c99ea58b7de4573e8331ca49a58fb200af7fef69e7ca36f3626f8c9c8673b1b052ad47bbedf63fbef99f94bbe03b97922394500797c2327f6748c97d14e1ead3a55c4da70fa786241ed1c76b388d84809122bb43ef6a87758bb495aa92f7de9bc85ceaa7b524f09696b462721453bed83e818bd9b1e41a6ec30e"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1a, 0x8, 0x401}, {0x4, 0x6, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x3}, {0x9, 0x5, 0x3ff, 0x1, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa0, 0x8, 0x1}, {0x4, 0x5}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x9}, {0x8, 0x5, 0x0, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x200, 0x1, 0x8368}, {0xe, 0x1d02, 0x5, 0x1, 0x6, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @filter_kind_options=@f_fw={{0x7}, {0x70, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x995f}, @TCA_FW_INDEV={0x14, 0x3, 'wg1\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xd}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x1f, 0xd}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x778}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xffffffff}]}}, @filter_kind_options=@f_route={{0xa}, {0x258, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x43}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_ROUTE4_ACT={0x234, 0x6, [@m_ct={0x100, 0x19, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2d3f2b2cf1488e1f1b9c83f9864ecd51"}]}, {0xc1, 0x6, "2ceaf962dfb89391fcae8ce88f4a070623716f227df10b6cca63440d3ecfe9ea2a127926fb494211dd22b561cb6d3e1ba7dcb6b93577e48fc0d62f4d140d2c3dd3294ccc3f318a5dc0fb1df6aea816d6582ccbbe2556f4e120d5ebff2c8fc5fc081bd713611853d1ed4ba0f47363bec5d6672ff63747cde11f8a66b7f98ae3b3012d8b679666aca36ecb2b20c53550d5481a301c3f9a94895ce16455c57a9ce7a0eecb0b1704569bb913d637c0d377b5035691edf70b26fcd8f8fb6ee5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x130, 0x1d, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x80}, @TCA_IFE_SMAC={0xa, 0x4, @random="fa7d20a4a0a1"}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x10000000, 0xb, 0x2}}}]}, {0xca, 0x6, "435520de72ebbf3cf916e6212f499349fa98a2f0cdd08b9746cb213a29ddcac95c0c04f44c0479dafebfbcc68ad327b79072337f5184964325277e5e23f38e2dbed0022c48bb653e2fe88eff54a2e8d34a0166e65fb6cbe9448a7d526a7e9cf42cbae7dd5900c520b65f8a62208a25b512e8faa15be9443633da9fff447b2d92ce6826ebde2c6a4008162fda0afe247849f32e6d1166b34966882bcc5986216fe2aba781fa0c43454f36e6f36dcb28ac95675eba9d776facb9f169bad7d15ea209324b333837"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x10a8, 0x2, [@TCA_CGROUP_EMATCHES={0x108, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ce"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe00, 0x1}, {0x2, 0x40}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="a78dc3ed2aec", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="df5a9db2", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x14, 0x2, 0x3}, {0x76, 0xa, 0x11ccf2ce6fbed0be, "bb140c49cdc072b84986"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xb65a, 0x3, 0x6}, {0xa, 0x37, 0x1, 0x7}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x100, 0x1, 0x0, 0x0, 0x5, 0x0, 0x2}}}]}]}, @TCA_CGROUP_POLICE={0x428, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x87af, 0x2, 0x40, 0xfffffffb, 0x47, 0x9, 0x7, 0xfff, 0x800, 0x4, 0xa, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff, 0xed8, 0x4, 0x2, 0x9, 0x36cc, 0x0, 0x5, 0x401, 0x8, 0x100, 0xa8, 0x0, 0x8, 0x3, 0x4, 0x7ff, 0x273, 0x2, 0xc, 0x86d8, 0x6, 0x9, 0x7, 0x5, 0x9, 0x6, 0x1, 0x81f, 0xf, 0x6, 0x7, 0x6, 0x5, 0xfffffffb, 0x3c, 0x3, 0x1, 0x6, 0x74aa, 0xd, 0x5f2c, 0xfffffff2, 0x4, 0x64000000, 0x71, 0x8, 0x1, 0x5, 0x8, 0x7, 0x7fff, 0x3, 0x5e53df07, 0x27, 0x44, 0x7fffffff, 0xb9, 0x7, 0xff, 0x6, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5, 0x3, 0x0, 0x7, 0x2cd, 0x1, 0x1000, 0x7fff, 0x1, 0x5, 0x90, 0x1, 0x8, 0x6a200, 0x6, 0x81, 0x8, 0x949, 0x5, 0x5, 0x9, 0x3ff, 0x10000, 0x6, 0x8, 0x8, 0x401, 0xfffffff8, 0x5, 0xf10f, 0x3, 0x6, 0xa, 0x7, 0x2, 0x0, 0x8, 0x5, 0x5, 0x10000, 0xaff, 0x8e129ed, 0x2, 0x7, 0x4, 0x3, 0x10000, 0x5, 0x38, 0x7, 0x3ff, 0x81, 0x4, 0x5, 0x101, 0xf647, 0xf5, 0x7, 0x6, 0x3, 0x2, 0x8, 0x2, 0x34, 0x7, 0x6, 0x0, 0xf, 0x401, 0x6, 0x9, 0x4c, 0x5f8, 0xd, 0x0, 0xd, 0x677, 0x7, 0x6, 0x5, 0x6d14271f, 0x7ff, 0x0, 0x82, 0xffffffff, 0x9, 0x5, 0x101, 0x9, 0x0, 0xd73f, 0x1, 0x6, 0x401, 0x5, 0x0, 0x42a5, 0xa, 0x6, 0x7, 0x100, 0x73a, 0x2, 0x8, 0xffff2ae7, 0xfffffffd, 0x9096, 0x8, 0x2, 0xba, 0x2, 0x5, 0x2, 0x5cb4, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x5, 0xb654, 0x7f, 0x0, 0x6, 0x68, 0x9, 0x1a, 0x78, 0x5, 0x0, 0x80000001, 0xfffffff5, 0x9, 0x240, 0x0, 0xd2, 0x14, 0x5aaf5797, 0x5, 0xfff, 0x3f, 0x6, 0xd00e, 0x7, 0x5, 0x8, 0x1, 0x3, 0x4, 0x4, 0xffffffff, 0x9, 0x2, 0x8000, 0x10000, 0x8, 0xa, 0x1, 0x2, 0xc, 0x0, 0x5, 0x2, 0x6639, 0x7fff, 0xff, 0xf, 0x7cb4, 0x7, 0x10000, 0x2, 0x9, 0x18, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1454, 0x0, 0x1, 0xd806, 0x5, {0x9b, 0x1, 0x12, 0x31c, 0x4, 0x8000}, {0x6, 0x2, 0x8, 0x7f, 0x9, 0x3}, 0x0, 0x28, 0xfb61}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_CGROUP_EMATCHES={0xe8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x80}, {0x4, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x8}, {0xce2, 0x8, 0x0, "d33b4c1b319987bb"}}}, @TCF_EM_CONTAINER={0x24, 0x2, 0x0, 0x0, {{0xec, 0x0, 0x40c6}, "239fd9fb4d8f40adf07a6ce54e3ab487daf3bcd35acbd1"}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1}, {0x2, 0x62}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="ca1101ff830b720bd8c7"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7ff, 0x3, 0x401}, {0xffff, 0x9, 0xe4a, 0xff}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0x10, 0x5, 0x8, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x800}, {0x5, 0x3, 0x7, 0x4}}}]}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x4, 0xfffffffa, 0xa409, {0x6, 0x1, 0x9, 0xa6ff, 0x0, 0x80}, {0x2, 0x2, 0x5, 0x2, 0x7, 0x7}, 0x7, 0x626, 0x1507200}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x165}]}, @TCA_CGROUP_POLICE={0x888, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xfc, 0x1, 0x7ff, 0x1, 0x400, 0x7, 0x8, 0x8, 0xfff, 0xca, 0x0, 0x7, 0x1, 0x3, 0x3, 0x4, 0x1, 0x3, 0x2, 0x5, 0xfff, 0x5, 0x5, 0x3, 0x401, 0x7, 0x71668a33, 0x2, 0x4, 0x83, 0x2d3cda2b, 0x5, 0x10, 0x0, 0x80000001, 0xb3, 0xc0, 0x5cc000, 0x1b93b9ac, 0x3, 0x6, 0x1, 0xffffffff, 0xcd, 0x0, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8, 0xfffffff5, 0x8, 0x5, 0x81, 0x7fffffff, 0x7, 0x3a, 0x7, 0x800, 0x2, 0x8, 0x2, 0x7, 0x5, 0x3, 0xb8, 0x6, 0x7, 0x9, 0x96, 0xe7b0, 0x6, 0x371, 0x6, 0x6, 0x0, 0xfffffff8, 0xe, 0xd, 0x1, 0x1, 0x3, 0x7, 0x2, 0x1, 0x9, 0x10, 0x5, 0x2, 0x767, 0x2, 0x101, 0x20d9, 0x3, 0x5, 0x7, 0x8, 0x8, 0x8, 0x7f, 0xc5a0, 0x10, 0x3, 0xa1a, 0x9fd7, 0x200, 0xffffffff, 0xfffffffa, 0x400, 0x4, 0xff2, 0x1, 0x7, 0x10, 0x10, 0x6e2b, 0x0, 0x4, 0x7, 0xffffffff, 0x9, 0x4, 0x1, 0x1ff, 0x400, 0xfffffff8, 0x2, 0x7a, 0x8, 0x2, 0x7fff, 0x100, 0x3, 0x8, 0x1ff, 0x3ff, 0x5, 0x9, 0x5, 0xff, 0x38, 0x9, 0xfff, 0x3, 0x6, 0x8, 0x9, 0x34, 0x0, 0x4, 0xd4, 0x5, 0x3, 0x5, 0xfffffffc, 0x6, 0x5, 0x0, 0x9f, 0x0, 0x7, 0x7f, 0x6, 0xffff, 0xd9, 0x67, 0x9, 0xb65a, 0x4, 0x5, 0x7, 0x3b, 0xc, 0x2, 0x5, 0x80000000, 0x1, 0x10000, 0x3ff, 0x6, 0x9, 0x1ff80, 0x1, 0xc, 0x6, 0xffffffff, 0x8, 0x3, 0x8, 0x2, 0x8, 0x9, 0x1, 0x0, 0x4, 0x7, 0x9, 0xe, 0x4, 0x4a3, 0x400, 0xc, 0x80, 0x7, 0x7d4, 0x7f, 0x4, 0x8, 0x80, 0x7, 0x2, 0x80000001, 0x7, 0x10001, 0x6, 0x400, 0xff, 0x6, 0xff, 0x7fffffff, 0x9, 0x67c1, 0x3, 0x6, 0x5, 0x8, 0x1, 0x1, 0x6ae, 0x1, 0xfffffffe, 0x0, 0x7, 0x6, 0x4, 0x6, 0x80000001, 0x66f6cd65, 0x4, 0xc0000000, 0x2, 0xd, 0x9, 0x9, 0xd3, 0xfff, 0x7fffffff, 0x1728, 0x4, 0x9, 0x7ff, 0x1, 0x5, 0x1ff, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xce0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0xc, 0x1f, 0xfffffffe, 0x3, 0x401, 0xec, 0x3, 0x5, 0x2, 0x4, 0x6, 0x7ff, 0x6eb, 0xd103, 0xfffffff0, 0x6, 0x9a5ff77, 0x6, 0x3ff, 0x7fff, 0x11, 0x3, 0xfe6, 0x7, 0x8, 0x1d31cdb6, 0x7fff, 0xb3f8, 0xfff, 0x9, 0x7fff, 0x9, 0xd, 0x2, 0x40, 0x1, 0x6, 0x3ff, 0x455, 0x18, 0x8000, 0xb77, 0x200, 0x101, 0x6, 0xff, 0x3, 0x8, 0xe46, 0x96, 0x2, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0xffffff25, 0x2, 0x7f, 0x40, 0x2, 0x7, 0x8, 0x5, 0x5000, 0x10001, 0x2, 0x3ff, 0xefb, 0x8, 0xff, 0x9, 0x7c4e, 0x7fffffff, 0x5, 0x200, 0x4, 0x77f2774a, 0x4, 0x7, 0x9, 0x6fb, 0x3f83, 0x1, 0x401, 0x5, 0xcc5, 0x200, 0x25a2, 0xc, 0x0, 0x7, 0x4, 0x5, 0x81, 0xfffffffb, 0xffff, 0x6, 0x80000000, 0x4, 0x201a, 0x8, 0x3, 0xd, 0x7, 0x9, 0x80, 0x0, 0x6, 0x6, 0x7f, 0x6, 0x3, 0x9, 0x782e, 0x80000001, 0x0, 0x5, 0x9, 0x4, 0x2, 0x7, 0x1, 0x0, 0xd, 0x7ff, 0x80, 0x9, 0x4, 0x7ff, 0x9750, 0x7ff, 0x81, 0x0, 0x3, 0xa6, 0x2, 0x9, 0x1, 0xf, 0x7, 0x101, 0x8, 0x5, 0x81, 0x1, 0xfff, 0x7, 0x8, 0x1, 0xffff, 0x1, 0xfffffff8, 0x0, 0x1000, 0x80000000, 0x2, 0x6, 0xfffff000, 0x2, 0x74, 0x5ed, 0x200, 0xf3d, 0x4, 0x48a, 0x8, 0xe53, 0xed96, 0xd, 0x8, 0xa800, 0x3ff, 0x60e2, 0x8, 0x9, 0x3, 0xb, 0x9, 0x7, 0x7fffffff, 0x1ff, 0x75b3c344, 0x9, 0xfffffffe, 0x10001, 0xe, 0x4, 0x8f42, 0x5, 0x0, 0x3ff, 0x8, 0xfffff97a, 0x8, 0x70000000, 0x1, 0x100, 0x4, 0x8659, 0x8160, 0x178c, 0x9, 0xffff, 0x0, 0x2, 0x2, 0x3, 0xffffffbd, 0xb, 0x2d, 0x49df, 0x7fffffff, 0x7fff, 0x5, 0x4, 0x1ff, 0x3, 0x8000, 0xd00, 0x1, 0x6, 0x2, 0x0, 0xdf0, 0x8b2, 0x8, 0x7, 0x8, 0x3, 0xc39, 0x1, 0x39400000, 0x3, 0x13795f15, 0xffff, 0x3ff, 0x3, 0x4, 0x8, 0x5, 0x1a1, 0x5, 0x5, 0x0, 0x7, 0x12b3061b, 0x9, 0xfffffff4, 0x80000001, 0x6, 0x7, 0x3ff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc41, 0x5, 0x2, 0x8, 0x3, {0x2, 0x1, 0x3, 0x7fff, 0x7f, 0x7}, {0x7, 0x0, 0x1ff, 0x5, 0x6, 0xe1de}, 0x7, 0x2, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x33}]}, @TCA_CGROUP_ACT={0x16c, 0x1, [@m_gact={0x168, 0xc, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x17a7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1be, 0x7, 0x8, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f05, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa79, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xa79, 0x2, 0xfffffffd, 0x1a583c69}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x851, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x63c, 0xfffffc01, 0xffffffffffffffff, 0x10001, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdd8c, 0x9, 0x6, 0x2, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x268f, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1299, 0x2}}]}, {0x91, 0x6, "dfb096748f218f2fa80fd65397dad0eb2c7d286cfe60c279f0ef80b47d4be037bb784a0e76cc7d89c3dc84957731ee77ce7c26d149f87c5db385c9a9fecdd9b7e08b428b71d277315dc0ed032de50a3d0711d1cdd831946e51cb5f3d3868240bfc90cccb73f7c18a32dc8fda9bcc88606e522feddbff9613a3a3546498280fbce3bfe56d58782794b8a12bbdc3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xa1}, @filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9a}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x878}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0xa}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xdb}]}}]}, 0x234c}, 0x1, 0x0, 0x0, 0x24000874}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x10) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000a20004000000020000000000000c02000000000000000500000000000000000000000000000000005f00"], 0x0, 0x3c}, 0x28) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000b65900000000030006000000000002004e240000000000000000000000000800120000000300000002020000000010000000000000000000000000000000ac1414aa000000000000000000000000fe800000000000000000000000000030030005000000000002"], 0x80}}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) 1m25.018636943s ago: executing program 3 (id=144): set_tid_address(&(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x98ca, 0xb}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf256c00000008000300", @ANYRES32=r1, @ANYBLOB="080026006c6ee5ee442a5f229830ee93ff090000ee453d942d9046f38039f45fd98ee64bfbd57e1c62cc42317e058a1b62722aa15535da295fa70d4f7fc1786672be753f245008e2b543b02a6982ece403d0fd40dd4461c767deab3160889c329a69d22fd01b260b86bbc8ac5372ee805a661364fafade719dd18d4de32a71d93860573bef9b61192f1180c9d0015a9be54e142fc7c86f3ce12f9853481bafeb975575ad4a9157411b70ed3c7ea81cae1473c215125437cdda9e01b80c961909a4bb8c494d7d2f9c34d77428c378911cb4dee42da73ce60679e6"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000858fc2230000002c000000850000002a00"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r8, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x100008) (async) listen(r5, 0x100008) accept4(r10, 0x0, 0x0, 0x0) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) write(r11, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) write(r11, &(0x7f00000002c0)="04", 0x1) (async) write(r11, &(0x7f00000002c0)="04", 0x1) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$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") 1m21.863085321s ago: executing program 33 (id=183): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001a40)=ANY=[@ANYBLOB="ec0200000102010100000000000000000a000000480001802c00018014000300fe8000000000000000000000000000bb14000400fe8800000000000000000000000000010c00028005000100060000000c0002800500010001"], 0x2ec}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x3, 0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x3, 0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="117660ba1941bd6e4ff65fb027b9ac5226c038acdf7abc8450c9eec544c3d51f5d75540c353ae33a7e97f5", 0x2b}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)="117660ba1941bd6e4ff65fb027b9ac5226c038acdf7abc8450c9eec544c3d51f5d75540c353ae33a7e97f5", 0x2b, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000680)={0x1, 0x0, &(0x7f0000000640)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000002c0)=[r3, r4, r5, r7], &(0x7f0000000300)=[0x4, 0xb, 0xb, 0xfffffe00, 0x8], &(0x7f00000006c0)=[r8, r9], &(0x7f0000000700)=[0x0, 0x6, 0x9a9, 0x40, 0x7, 0x200, 0x1000], 0x0, 0x6}) 1m16.717348031s ago: executing program 6 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x0, 0x29, 0x1, @local, @mcast2}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = gettid() r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000001a80)={0x6, 'veth0_to_team\x00', {}, 0x8000}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00', {}, 0x10}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x1, 0x2000) timer_settime(r6, 0x0, &(0x7f0000000680)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000640)=0x9c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x80000001, 0x8, @loopback, @private1, 0x10, 0x40, 0x9, 0x5c}}) sendto$packet(r9, &(0x7f0000000100)="b6f83a6ca59c15bdafcaedfad3938762bc6635aa8377987e1d160f9c16bf1373c8b40a9218ee631bc9bb26380d0d26058245cf1e6bc80549804e2138763ff60a3261a4fbcdb41a5f650a2a4434f4403c474be224ab260243d0e338c81330c196214d249635ad6c0d4cb354d54e4821d2ab4ab2dd6fcfd0894f78bc1871f8995f2529bf5c6001bf846948", 0x8a, 0x80, &(0x7f00000002c0)={0x11, 0x1c, r10, 0x1, 0x7b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m16.483375048s ago: executing program 6 (id=210): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000ac0)='./bus\x00', 0x8200c0, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f00000011c0)="4703b86f0946b9", 0x7}], 0x2}}], 0x5, 0x4801) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2) pread64(r1, &(0x7f0000000180)=""/39, 0x27, 0x2b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aa"], 0x54}}, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') r8 = fanotify_init(0x4, 0x20000) fanotify_mark(r8, 0x1, 0x40001019, r7, 0x0) read$FUSE(r7, &(0x7f0000009040)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000000180)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clock_gettime(0x0, &(0x7f0000003580)) close(r10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="16f9c8f57ea0091788cbafb487301c0a", 0x10) 1m15.949011427s ago: executing program 6 (id=221): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000001a40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) open_tree(0xffffffffffffffff, 0x0, 0x81000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) unshare(0x26020480) openat$dir(0xffffffffffffff9c, 0x0, 0x414301, 0x0) 1m14.926763067s ago: executing program 6 (id=227): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "43316ffb89b9279c965344edad905ea795a87224bdf9a940e1e653fcc7759680a2daa9d938967eaf84a5a953114370e20214611f3b7d35c1be533c685fc4d9c9", 0x34}, 0x48, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0x1a, 0x1, 0x407ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1m13.577073882s ago: executing program 0 (id=245): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e85f92422d00"}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x8010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m13.434631821s ago: executing program 0 (id=250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0xfff2, 0x3}, {0xe, 0xffe0}}}, 0x24}}, 0x4004000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0xa002a014}) 1m13.242412471s ago: executing program 0 (id=251): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) (async) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0x4, &(0x7f0000000280)=0x0) eventfd2(0x800, 0x1) (async) r3 = eventfd2(0x800, 0x1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xa7a, 0xffffffffffffffff, &(0x7f0000000400)="b0f85079c71b06e71a20409921b2ae26bcd026db7e2e6998b46e6b611e7bcbf972ac0af7bc6699cc88c12894a3389beb2911f313725c8761d4b31e136f6e5dc0d51c8706010bfd74e3a83297a74c784f4d0f775f56fc4e5882be5a783b7c884b3187d843a3b297f4e46a8351560d0a1bec5319172441c6f659905d815a80c81cd750f0729dacb61b94e0aaeea33300ac50497b2f42b3397380b0588028cf3918e5ed9f9cdbdc7cd865ba9ce8d3b66d682867a575b726e1f4808cdd3b2b0a3e82864319286cf64efca204ecd32132d111c178d17ffcc781fb13", 0xd9, 0x400, 0x0, 0x3, r3}]) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x2, 0x2, 0x4}}, @TCA_RATE={0x0, 0x5, {0x66, 0xf}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x5, 0x5}, {0x6, 0x2}, {0xf}]}, @typedef={0x7}, @union={0x3, 0x9, 0x0, 0x5, 0x1, 0x2, [{0x4, 0x1, 0x7}, {0x8, 0x2, 0x5}, {0x1, 0x0, 0x9}, {0x5, 0x1, 0xffffff03}, {0x0, 0x1, 0x203}, {0xf, 0x0, 0x6}, {0x0, 0x200000, 0x3}, {0xd, 0x1, 0x5}, {0x4, 0x5, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/179, 0xcb, 0xb3, 0x1, 0x1, 0x10000}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x5, 0x5}, {0x6, 0x2}, {0xf}]}, @typedef={0x7}, @union={0x3, 0x9, 0x0, 0x5, 0x1, 0x2, [{0x4, 0x1, 0x7}, {0x8, 0x2, 0x5}, {0x1, 0x0, 0x9}, {0x5, 0x1, 0xffffff03}, {0x0, 0x1, 0x203}, {0xf, 0x0, 0x6}, {0x0, 0x200000, 0x3}, {0xd, 0x1, 0x5}, {0x4, 0x5, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/179, 0xcb, 0xb3, 0x1, 0x1, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4814}, 0x4008050) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2f5, '\x00', r5, r6, 0x3, 0x4, 0x3}, 0x50) 1m12.1520249s ago: executing program 0 (id=255): r0 = socket$kcm(0x21, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0xc20) lseek(r1, 0x6, 0x3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@auto_da_alloc}], [], 0x2c}, 0x1, 0x469, &(0x7f0000001b00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x220000b9, 0x41000ff7ff, 0xd9, 0x6cf}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x3f}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m12.022197481s ago: executing program 0 (id=257): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x0, 0x1}, 0x18) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x66}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x0, 0x1}, 0x18) (async) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x66}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async) lseek(0xffffffffffffffff, 0x0, 0x1) (async) 1m11.936830275s ago: executing program 0 (id=259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x100, 0x8000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2086, 0x700ca}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m8.97660977s ago: executing program 34 (id=144): set_tid_address(&(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x98ca, 0xb}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf256c00000008000300", @ANYRES32=r1, @ANYBLOB="080026006c6ee5ee442a5f229830ee93ff090000ee453d942d9046f38039f45fd98ee64bfbd57e1c62cc42317e058a1b62722aa15535da295fa70d4f7fc1786672be753f245008e2b543b02a6982ece403d0fd40dd4461c767deab3160889c329a69d22fd01b260b86bbc8ac5372ee805a661364fafade719dd18d4de32a71d93860573bef9b61192f1180c9d0015a9be54e142fc7c86f3ce12f9853481bafeb975575ad4a9157411b70ed3c7ea81cae1473c215125437cdda9e01b80c961909a4bb8c494d7d2f9c34d77428c378911cb4dee42da73ce60679e6"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000858fc2230000002c000000850000002a00"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r8, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x100008) (async) listen(r5, 0x100008) accept4(r10, 0x0, 0x0, 0x0) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) write(r11, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) write(r11, &(0x7f00000002c0)="04", 0x1) (async) write(r11, &(0x7f00000002c0)="04", 0x1) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYCqOok7E41mAcMKIVQJ0SVIbUjcKIodR7FTmlCh9D8gUYkVLPkBrLtizwbBjk1ZIPERgZpKLIzu9U3qpnaTNomdiZ9Hurr33GP7PSfOPcd+nfgEMLCuRMRuRIxGxO2ImMrO57ItPm1tye2e7N1f2t+7v5SLZvPmv3JpfXIu2u6TeCN7zEJE/Oh7ET/NvRi3vr2ztliplDdbxfHZRnVjtr69c221urhSXimvl0oL8wtzH1//qHRmfX2vOpodffnxH3e/9fOkWZPZmfZ+nKVW10cO4ySGI+IH5xGsD4ay/oz2uyG8lnxEvBMR76fX/1QMpc8mAHCZNZtT0ZxqLwMAl10+zYHl8sUsFzAZ+Xyx2MrhvRsT+Uqt3rh6p7a1vtzKlU3HSP7OaqU8l+UKp2Mkl5Tn0+Nn5dKR8vWIeDsifjk2npaLS7XKcj9f+ADAAHvjyPz/37HW/A8AXHKFfjcAAOg58z8ADB7zPwAMHvM/AAwe8z8ADB7zPwAMHvM/AAyUH964kWzN/ez7r5fvbm+t1e5eWy7X14rVraXiUm1zo7hSq62k39lTPe7xKrXaxvyHsXVv+tsb9cZsfXvnVrW2td64lX6v963ySE96BQC8zNvvPfpLLiJ2PxlPt2hby8FcDZdbvt8NAPpmqN8NAPrmVKt9zfzi7BoC9Nwp3uNLD8Al0WGJ3ucUImL86Mlms9k8vyYB52zmC/L/MKja8v/+ChgGjPw/DK5T5f+Bz7RmM3fSNf/jpDcEAC42OX6gy+f/72T732UfDvxk+egtHp5nqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBiO1j/t5itBT4Z+XyxGPFmREzHSO7OaqU8FxFvRcSfx0bGkvJ8n9sMAJxW/u+5bP2vmakPJo/WjuaejqX7iPjZr2/+6t5io7H5p+T8vw/PNx5m50v9aD8AcJyDeTrdt72Rf7J3f+lg62V7/vHdiCi04u/vjcb+YfzhGE73hRiJiIn/5LJyS64td3Eauw8i4vOd+p+LyTQH0lr59Gj8JPabPY2ffy5+Pq1r7ZOfxefSEvAqHiXjz6edrr98XEn3na//QjpCnV42/iUPtbSfjoHP4h+Mf0Ndxr8rJ43x4R++3zoaf7HuQcQXhyMOYu+3jT8H8XNd4n9wwvh//dJX3u9W1/xNxEx0jt8ea7ZR3Zitb+9cW60urpRXyuul0sL8wtzH1z8qzaY56tnus8E/P7n6Vre6pP8TXeIXjun/10/Y/9/+7/aPv/qS+N/8Wqf4+Xj3JfGTOfEbJ4y/OPH7Qre6JP5yl/4f9/xfPWH8x3/beWHZcACgf+rbO2uLlUp5s5cHBy8kehrUwSU4SH5rLkAzOh58p1exRuOV7tVsvlasbiPGWWTdgIvg8KKPiKf9bgwAAAAAAAAAAAAAANBRL/5jqd99BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PL6fwAAAP//WhXPiw==") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYCqOok7E41mAcMKIVQJ0SVIbUjcKIodR7FTmlCh9D8gUYkVLPkBrLtizwbBjk1ZIPERgZpKLIzu9U3qpnaTNomdiZ9Hurr33GP7PSfOPcd+nfgEMLCuRMRuRIxGxO2ImMrO57ItPm1tye2e7N1f2t+7v5SLZvPmv3JpfXIu2u6TeCN7zEJE/Oh7ET/NvRi3vr2ztliplDdbxfHZRnVjtr69c221urhSXimvl0oL8wtzH1//qHRmfX2vOpodffnxH3e/9fOkWZPZmfZ+nKVW10cO4ySGI+IH5xGsD4ay/oz2uyG8lnxEvBMR76fX/1QMpc8mAHCZNZtT0ZxqLwMAl10+zYHl8sUsFzAZ+Xyx2MrhvRsT+Uqt3rh6p7a1vtzKlU3HSP7OaqU8l+UKp2Mkl5Tn0+Nn5dKR8vWIeDsifjk2npaLS7XKcj9f+ADAAHvjyPz/37HW/A8AXHKFfjcAAOg58z8ADB7zPwAMHvM/AAwe8z8ADB7zPwAMHvM/AAyUH964kWzN/ez7r5fvbm+t1e5eWy7X14rVraXiUm1zo7hSq62k39lTPe7xKrXaxvyHsXVv+tsb9cZsfXvnVrW2td64lX6v963ySE96BQC8zNvvPfpLLiJ2PxlPt2hby8FcDZdbvt8NAPpmqN8NAPrmVKt9zfzi7BoC9Nwp3uNLD8Al0WGJ3ucUImL86Mlms9k8vyYB52zmC/L/MKja8v/+ChgGjPw/DK5T5f+Bz7RmM3fSNf/jpDcEAC42OX6gy+f/72T732UfDvxk+egtHp5nqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBiO1j/t5itBT4Z+XyxGPFmREzHSO7OaqU8FxFvRcSfx0bGkvJ8n9sMAJxW/u+5bP2vmakPJo/WjuaejqX7iPjZr2/+6t5io7H5p+T8vw/PNx5m50v9aD8AcJyDeTrdt72Rf7J3f+lg62V7/vHdiCi04u/vjcb+YfzhGE73hRiJiIn/5LJyS64td3Eauw8i4vOd+p+LyTQH0lr59Gj8JPabPY2ffy5+Pq1r7ZOfxefSEvAqHiXjz6edrr98XEn3na//QjpCnV42/iUPtbSfjoHP4h+Mf0Ndxr8rJ43x4R++3zoaf7HuQcQXhyMOYu+3jT8H8XNd4n9wwvh//dJX3u9W1/xNxEx0jt8ea7ZR3Zitb+9cW60urpRXyuul0sL8wtzH1z8qzaY56tnus8E/P7n6Vre6pP8TXeIXjun/10/Y/9/+7/aPv/qS+N/8Wqf4+Xj3JfGTOfEbJ4y/OPH7Qre6JP5yl/4f9/xfPWH8x3/beWHZcACgf+rbO2uLlUp5s5cHBy8kehrUwSU4SH5rLkAzOh58p1exRuOV7tVsvlasbiPGWWTdgIvg8KKPiKf9bgwAAAAAAAAAAAAAANBRL/5jqd99BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PL6fwAAAP//WhXPiw==") 1m7.163436715s ago: executing program 7 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"7b45af6fc01bced0"}}}}}}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) 1m6.95744685s ago: executing program 7 (id=295): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000084d000/0x4000)=nil) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x563, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x62, &(0x7f0000000440)=""/98, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x2, 0xffffff7f, 0x800}, 0x10, 0x2950a, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x5, 0x2, 0x7}, {0x0, 0x2, 0x9, 0x8}, {0x2, 0x1, 0x1, 0xc}, {0x1, 0x2, 0xb, 0x2}, {0x1, 0x1, 0xe, 0x3}], 0x10, 0x200}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000680)={r3, 0x1, 0x2, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x6, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1m5.856398205s ago: executing program 7 (id=303): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d520887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b364a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x6, 0xe6, &(0x7f0000000040)="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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f00000000c0)={0x1, 0xb, 0x2}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4005}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x140, 0x178, 0xc, 0x140, 0x178, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0xff000000, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0xce4, 0x9004, 0x8, 0x0, 0x5, 0xc0de}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000018000103010c7002fadbdf2501"], 0x14}}, 0x8854) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 1m4.072369562s ago: executing program 7 (id=310): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0xc2080, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x205b) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0x12000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r5, 0x6}, &(0x7f0000000340)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, r6, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008044}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001140)=0x10001, 0x7fffffffffffffff) r7 = syz_clone(0x20000, &(0x7f0000000040)="ce518f1035f0058929bad2fa7dd629aec848c45e9ec076de290fcb8b2cb81eb3528190d571e98970c9c726f5a32bd116195148457ac6df0816e18258cde90738b4f55eaabedfcc8669b7e0b846d4635d9f829c5d3952429e860751c359600effd1c56ea980c327cce663a6f11bc88101aeecb1081725752a8cde8fc5c9733d1f7497fe47bd5c26a4bbafaa6bd5fe184f904b3ac43bd11d9764a2ff7133ed1d94b235dbfdf06e0c", 0xa7, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="2cec8493b1ac0bc46da8051be06c33") syz_pidfd_open(r7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0xc2080, 0x10) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) (async) read$FUSE(r1, &(0x7f000000b040)={0x2020}, 0x205b) (async) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0x12000) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180), &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r5, 0x6}, &(0x7f0000000340)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, r6, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008044}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001140)=0x10001, 0x7fffffffffffffff) (async) syz_clone(0x20000, &(0x7f0000000040)="ce518f1035f0058929bad2fa7dd629aec848c45e9ec076de290fcb8b2cb81eb3528190d571e98970c9c726f5a32bd116195148457ac6df0816e18258cde90738b4f55eaabedfcc8669b7e0b846d4635d9f829c5d3952429e860751c359600effd1c56ea980c327cce663a6f11bc88101aeecb1081725752a8cde8fc5c9733d1f7497fe47bd5c26a4bbafaa6bd5fe184f904b3ac43bd11d9764a2ff7133ed1d94b235dbfdf06e0c", 0xa7, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="2cec8493b1ac0bc46da8051be06c33") (async) syz_pidfd_open(r7, 0x0) (async) 1m3.997386607s ago: executing program 7 (id=311): r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x0, 0x0, @mcast1, 0xfffffffe}}}, 0x38) fchdir(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640", @ANYRESOCT=r3], 0x64}}, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x1}, 0x6) syz_mount_image$vfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001140)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@shortname_lower}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$UHID_INPUT(r5, &(0x7f0000002480)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d17870cfcd5787e75bb123303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090020000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a4130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d09248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca197f000000c4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1f2cc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dc499dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae219737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3d9f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c3271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754b09cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42effff4449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080caf0100000000000080a1f0c4549820a73c880f4707000000000000001f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb28b315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05a1baeaadcf88bdefd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b721501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1eb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce809972c0b0000000000007c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff00", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r7, &(0x7f00000000c0)={0x2c, 0x5, r8, 0xffffffff}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010001fff0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000080000280012800b0001006272690280090007000000abaaaabb00000800030000000000f1648a92185cb1d9ba9f69aebe2101f8dceb315c30df54e780f1be4b337436d95625474cb07bfbb903fa0b5e61e805fe8a885bb59e718079eb350d8a3981764b0e64460c4076"], 0x48}}, 0x0) 1m1.776334509s ago: executing program 7 (id=325): unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x23008180, &(0x7f0000000500)="9ed350d97a113ed9038f2e2cd7017f9c9585e65f4d97beb32244118ac5ee103f8bcdbbe9d321cf6080b18340fac5dce63f55a0c653d72479c8ab9ba858cef267e289c93f1b7aaafffab0bc9a4223f1553ca4eebd50933dd65f149d159e6ca0a93374fb3dfca8da4974050eb180c63c70ef3d9a8b521ce946c84d764934a599594a0109971668449eee1149ab325863bad3e31a76af", 0x95, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="0e6e5026500a426f61926be217adbb6df0f7bd716e4e3c8858e8bf9fa06e6477afc1805af8d8a12dc14552b6771564d7c1d475a0277a1c02586967d98bd51dd3d01e4dea80c24bf38bd43ee2d36f0bceb5df85bf34f4bc624c388f272dbe9556eabb1b0025d01b840248029572b13ff5d56531c5386a418ee51140e5f4b2c01192be9e66cdff20457b30197dd7cef47439b36d2643c67da11d") r2 = socket$unix(0x1, 0x1, 0x0) accept$unix(r2, 0x0, &(0x7f0000002840)) (async) accept$unix(r2, 0x0, &(0x7f0000002840)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x357}}, './file0\x00'}) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "27c0a5f6182470a64d416bab8c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "27c0a5f6182470a64d416bab8c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r3, &(0x7f0000002800)={0x7, 0xfffffffffffffff5, r8, {0x1}}, 0x18) sendmmsg$unix(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="68ad54a9ec1e03be153bb294439026a6662ecca4c5fb79ecd4d9f4b1a38490b1426b795fef6f08624ef771ba4ea9936cf96839fc3b25fb134c5b72a168adacde3948b26d54285f7c6f240e0d55af12d4ca80028ade59667ca0b14e76c473b0d4a52eba2d5bca7b74e4ef414739462075431bbcb0f2dfbf7cc4893254d4ea5ede8f531f", 0x83}, {&(0x7f0000000140)="aa14578afdef3577e5e20536a2521190bdf393b302f40df339df903ff61a97acf76414f09d583e0adcb795", 0x2b}, {&(0x7f0000000180)="1246d0afd55e7b6cacb04fd5d0e8f1b90abf3d55e77483f6b93e6e0c4aef27250beb2852744965d28241b03bc4c48307412b9900634cc6c720e8f877947100edd637280b695dd3cbb77258c3dd2c3da4fba278a4b617e212594cd65f1863cf33c240d66404a5c238d823f030e66ada50fe6cc4e4c4b1da12651ace3d4aab15db1cb9ea8ad73457ff0391d1d5f9c24745f1294b5ab24b", 0x96}, {&(0x7f0000000240)="51f1d30bd1a96aabda5aa0823442b21d6e6df28b3817b4a85d2bcbbf25b29c6f9e9cd1", 0x23}, {&(0x7f0000000280)="6eba3bc6e535db79cf98a2db66e956397ebc8413af509e0033632f6abd0480dfeb5027aca381439c7666831415043ab4718b35a7ea50a1f5d83c038da23b8f17301eb1386f8f4de423cb57ddc1296b4ae007d3c3f0b64a53144bf67ba212a4d845ff54e59ad79ed24843fc9384f7f06fa7dd7aff4be2313bb7b20d0d676e1ca1d7b40cc3fa5a606c6064b571b8d557ef5a706018b8b2d642e54efd7ff1", 0x9d}, {&(0x7f0000000340)="1ac53947b8530bc65e26799b6f2571b3c8faf29c40601b8dfddb91f725501a8d35e6b120f433febcfd46dd0b5552e94d429fa0", 0x33}, {&(0x7f0000000380)="033af589c6ec12ddd5af5c810b06835f1198086544d55a80607b9588af986fdc34c885424414d32158dcdcb0214affa5b4d756200050df3d40cc8cddc39e15dda696c8782b0fd4ce235374a3b7975f0ac33f69e1100ea405b7ee3314b0a31cc89051f2257857df9607c493cbf2b1489b9f18b94bedd732d1f5bd73fa9a251c5fd1951e69", 0x84}, {&(0x7f0000000440)="dce51b3dc0c64f8879e89f28ffaad40af53183a971aa693c25d58d08c028de98bb", 0x21}], 0x8, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x1}}], 0x1, 0x80) (async) sendmmsg$unix(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="68ad54a9ec1e03be153bb294439026a6662ecca4c5fb79ecd4d9f4b1a38490b1426b795fef6f08624ef771ba4ea9936cf96839fc3b25fb134c5b72a168adacde3948b26d54285f7c6f240e0d55af12d4ca80028ade59667ca0b14e76c473b0d4a52eba2d5bca7b74e4ef414739462075431bbcb0f2dfbf7cc4893254d4ea5ede8f531f", 0x83}, {&(0x7f0000000140)="aa14578afdef3577e5e20536a2521190bdf393b302f40df339df903ff61a97acf76414f09d583e0adcb795", 0x2b}, {&(0x7f0000000180)="1246d0afd55e7b6cacb04fd5d0e8f1b90abf3d55e77483f6b93e6e0c4aef27250beb2852744965d28241b03bc4c48307412b9900634cc6c720e8f877947100edd637280b695dd3cbb77258c3dd2c3da4fba278a4b617e212594cd65f1863cf33c240d66404a5c238d823f030e66ada50fe6cc4e4c4b1da12651ace3d4aab15db1cb9ea8ad73457ff0391d1d5f9c24745f1294b5ab24b", 0x96}, {&(0x7f0000000240)="51f1d30bd1a96aabda5aa0823442b21d6e6df28b3817b4a85d2bcbbf25b29c6f9e9cd1", 0x23}, {&(0x7f0000000280)="6eba3bc6e535db79cf98a2db66e956397ebc8413af509e0033632f6abd0480dfeb5027aca381439c7666831415043ab4718b35a7ea50a1f5d83c038da23b8f17301eb1386f8f4de423cb57ddc1296b4ae007d3c3f0b64a53144bf67ba212a4d845ff54e59ad79ed24843fc9384f7f06fa7dd7aff4be2313bb7b20d0d676e1ca1d7b40cc3fa5a606c6064b571b8d557ef5a706018b8b2d642e54efd7ff1", 0x9d}, {&(0x7f0000000340)="1ac53947b8530bc65e26799b6f2571b3c8faf29c40601b8dfddb91f725501a8d35e6b120f433febcfd46dd0b5552e94d429fa0", 0x33}, {&(0x7f0000000380)="033af589c6ec12ddd5af5c810b06835f1198086544d55a80607b9588af986fdc34c885424414d32158dcdcb0214affa5b4d756200050df3d40cc8cddc39e15dda696c8782b0fd4ce235374a3b7975f0ac33f69e1100ea405b7ee3314b0a31cc89051f2257857df9607c493cbf2b1489b9f18b94bedd732d1f5bd73fa9a251c5fd1951e69", 0x84}, {&(0x7f0000000440)="dce51b3dc0c64f8879e89f28ffaad40af53183a971aa693c25d58d08c028de98bb", 0x21}], 0x8, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x1}}], 0x1, 0x80) 1m1.679955133s ago: executing program 35 (id=325): unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x23008180, &(0x7f0000000500)="9ed350d97a113ed9038f2e2cd7017f9c9585e65f4d97beb32244118ac5ee103f8bcdbbe9d321cf6080b18340fac5dce63f55a0c653d72479c8ab9ba858cef267e289c93f1b7aaafffab0bc9a4223f1553ca4eebd50933dd65f149d159e6ca0a93374fb3dfca8da4974050eb180c63c70ef3d9a8b521ce946c84d764934a599594a0109971668449eee1149ab325863bad3e31a76af", 0x95, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="0e6e5026500a426f61926be217adbb6df0f7bd716e4e3c8858e8bf9fa06e6477afc1805af8d8a12dc14552b6771564d7c1d475a0277a1c02586967d98bd51dd3d01e4dea80c24bf38bd43ee2d36f0bceb5df85bf34f4bc624c388f272dbe9556eabb1b0025d01b840248029572b13ff5d56531c5386a418ee51140e5f4b2c01192be9e66cdff20457b30197dd7cef47439b36d2643c67da11d") r2 = socket$unix(0x1, 0x1, 0x0) accept$unix(r2, 0x0, &(0x7f0000002840)) (async) accept$unix(r2, 0x0, &(0x7f0000002840)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x357}}, './file0\x00'}) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "27c0a5f6182470a64d416bab8c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "27c0a5f6182470a64d416bab8c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r3, &(0x7f0000002800)={0x7, 0xfffffffffffffff5, r8, {0x1}}, 0x18) sendmmsg$unix(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="68ad54a9ec1e03be153bb294439026a6662ecca4c5fb79ecd4d9f4b1a38490b1426b795fef6f08624ef771ba4ea9936cf96839fc3b25fb134c5b72a168adacde3948b26d54285f7c6f240e0d55af12d4ca80028ade59667ca0b14e76c473b0d4a52eba2d5bca7b74e4ef414739462075431bbcb0f2dfbf7cc4893254d4ea5ede8f531f", 0x83}, {&(0x7f0000000140)="aa14578afdef3577e5e20536a2521190bdf393b302f40df339df903ff61a97acf76414f09d583e0adcb795", 0x2b}, {&(0x7f0000000180)="1246d0afd55e7b6cacb04fd5d0e8f1b90abf3d55e77483f6b93e6e0c4aef27250beb2852744965d28241b03bc4c48307412b9900634cc6c720e8f877947100edd637280b695dd3cbb77258c3dd2c3da4fba278a4b617e212594cd65f1863cf33c240d66404a5c238d823f030e66ada50fe6cc4e4c4b1da12651ace3d4aab15db1cb9ea8ad73457ff0391d1d5f9c24745f1294b5ab24b", 0x96}, {&(0x7f0000000240)="51f1d30bd1a96aabda5aa0823442b21d6e6df28b3817b4a85d2bcbbf25b29c6f9e9cd1", 0x23}, {&(0x7f0000000280)="6eba3bc6e535db79cf98a2db66e956397ebc8413af509e0033632f6abd0480dfeb5027aca381439c7666831415043ab4718b35a7ea50a1f5d83c038da23b8f17301eb1386f8f4de423cb57ddc1296b4ae007d3c3f0b64a53144bf67ba212a4d845ff54e59ad79ed24843fc9384f7f06fa7dd7aff4be2313bb7b20d0d676e1ca1d7b40cc3fa5a606c6064b571b8d557ef5a706018b8b2d642e54efd7ff1", 0x9d}, {&(0x7f0000000340)="1ac53947b8530bc65e26799b6f2571b3c8faf29c40601b8dfddb91f725501a8d35e6b120f433febcfd46dd0b5552e94d429fa0", 0x33}, {&(0x7f0000000380)="033af589c6ec12ddd5af5c810b06835f1198086544d55a80607b9588af986fdc34c885424414d32158dcdcb0214affa5b4d756200050df3d40cc8cddc39e15dda696c8782b0fd4ce235374a3b7975f0ac33f69e1100ea405b7ee3314b0a31cc89051f2257857df9607c493cbf2b1489b9f18b94bedd732d1f5bd73fa9a251c5fd1951e69", 0x84}, {&(0x7f0000000440)="dce51b3dc0c64f8879e89f28ffaad40af53183a971aa693c25d58d08c028de98bb", 0x21}], 0x8, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x1}}], 0x1, 0x80) (async) sendmmsg$unix(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="68ad54a9ec1e03be153bb294439026a6662ecca4c5fb79ecd4d9f4b1a38490b1426b795fef6f08624ef771ba4ea9936cf96839fc3b25fb134c5b72a168adacde3948b26d54285f7c6f240e0d55af12d4ca80028ade59667ca0b14e76c473b0d4a52eba2d5bca7b74e4ef414739462075431bbcb0f2dfbf7cc4893254d4ea5ede8f531f", 0x83}, {&(0x7f0000000140)="aa14578afdef3577e5e20536a2521190bdf393b302f40df339df903ff61a97acf76414f09d583e0adcb795", 0x2b}, {&(0x7f0000000180)="1246d0afd55e7b6cacb04fd5d0e8f1b90abf3d55e77483f6b93e6e0c4aef27250beb2852744965d28241b03bc4c48307412b9900634cc6c720e8f877947100edd637280b695dd3cbb77258c3dd2c3da4fba278a4b617e212594cd65f1863cf33c240d66404a5c238d823f030e66ada50fe6cc4e4c4b1da12651ace3d4aab15db1cb9ea8ad73457ff0391d1d5f9c24745f1294b5ab24b", 0x96}, {&(0x7f0000000240)="51f1d30bd1a96aabda5aa0823442b21d6e6df28b3817b4a85d2bcbbf25b29c6f9e9cd1", 0x23}, {&(0x7f0000000280)="6eba3bc6e535db79cf98a2db66e956397ebc8413af509e0033632f6abd0480dfeb5027aca381439c7666831415043ab4718b35a7ea50a1f5d83c038da23b8f17301eb1386f8f4de423cb57ddc1296b4ae007d3c3f0b64a53144bf67ba212a4d845ff54e59ad79ed24843fc9384f7f06fa7dd7aff4be2313bb7b20d0d676e1ca1d7b40cc3fa5a606c6064b571b8d557ef5a706018b8b2d642e54efd7ff1", 0x9d}, {&(0x7f0000000340)="1ac53947b8530bc65e26799b6f2571b3c8faf29c40601b8dfddb91f725501a8d35e6b120f433febcfd46dd0b5552e94d429fa0", 0x33}, {&(0x7f0000000380)="033af589c6ec12ddd5af5c810b06835f1198086544d55a80607b9588af986fdc34c885424414d32158dcdcb0214affa5b4d756200050df3d40cc8cddc39e15dda696c8782b0fd4ce235374a3b7975f0ac33f69e1100ea405b7ee3314b0a31cc89051f2257857df9607c493cbf2b1489b9f18b94bedd732d1f5bd73fa9a251c5fd1951e69", 0x84}, {&(0x7f0000000440)="dce51b3dc0c64f8879e89f28ffaad40af53183a971aa693c25d58d08c028de98bb", 0x21}], 0x8, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x1}}], 0x1, 0x80) 58.685359115s ago: executing program 36 (id=227): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "43316ffb89b9279c965344edad905ea795a87224bdf9a940e1e653fcc7759680a2daa9d938967eaf84a5a953114370e20214611f3b7d35c1be533c685fc4d9c9", 0x34}, 0x48, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0x1a, 0x1, 0x407ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 55.631901409s ago: executing program 37 (id=259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x100, 0x8000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2086, 0x700ca}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 50.229810155s ago: executing program 4 (id=436): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) 49.756385915s ago: executing program 4 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8b5c2000) r1 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x10000) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"7470fbc1", 0x800, 0x5, 0x6, 0xffff8000, 0x2, "1221f702735ae85c21cf13b7153215", "2cc0ba28", "5a0e5de2", "8f6cde53", ["57f156a962c0711cf97c509d", "326c6cd483d99967ac2d954d", "84b36e13c9c17c483d5b1f25", "7cee1d77fd6887b4f55da8b5"]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000400)=@generic, 0x80, &(0x7f0000002180)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/162, 0xa2}], 0x5, &(0x7f0000002200)=""/220, 0xdc}, 0x8}, {{&(0x7f0000002300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002380)=""/124, 0x7c}, {&(0x7f0000002400)=""/209, 0xd1}], 0x2, &(0x7f0000000700)=""/61, 0x3d}, 0x9}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002580)=""/83, 0x53}, {&(0x7f0000002600)=""/123, 0x7b}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/192, 0xc0}, {&(0x7f00000027c0)=""/138, 0x8a}, {&(0x7f0000002880)=""/38, 0x26}, {&(0x7f00000028c0)=""/63, 0x3f}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003e80)=""/248, 0xf8}], 0x1, &(0x7f0000003fc0)=""/61, 0x3d}, 0xfffffffd}, {{&(0x7f0000004000)=@phonet, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/247, 0xf7}, {&(0x7f0000004180)=""/55, 0x37}, {&(0x7f00000041c0)=""/78, 0x4e}, {&(0x7f0000004240)=""/85, 0x55}], 0x4, &(0x7f0000000740)=""/158, 0x9e}, 0x7}, {{&(0x7f0000004440)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/133, 0x85}], 0x1, &(0x7f00000045c0)=""/199, 0xc7}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f00000046c0)=""/234, 0xea}, {&(0x7f00000047c0)=""/201, 0xc9}, {&(0x7f00000048c0)=""/131, 0x83}, {&(0x7f0000004980)=""/191, 0xbf}, {&(0x7f0000004a40)=""/213, 0xd5}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/81, 0x51}], 0x7, &(0x7f0000005c40)=""/211, 0xd3}, 0x58f02800}], 0x8, 0x2001, 0x0) mq_open(0x0, 0x40, 0x3b, &(0x7f0000000180)={0x2, 0x9, 0x5, 0x9}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r2}) setsockopt$inet_int(r4, 0x0, 0x0, 0x0, 0xfffffffffffffecb) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000002c0)=0x3f7, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x30080, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xd1{'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}], 0x2c}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000240), 0x1001) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', 0x141843, 0x32) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x21) sendfile(r6, r5, 0x0, 0x40001) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x8e, 0x180000504) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) 49.379530693s ago: executing program 4 (id=449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (rerun: 64) 49.283351438s ago: executing program 4 (id=452): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x280000c, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffae04320a91dbb2c67946b095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff"], 0x11, 0x2d1, &(0x7f0000000480)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r2, 0x9, 0x7, 0xf8550ed28b68e0b5) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 49.113704744s ago: executing program 4 (id=457): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="460a00000000000063113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x7, 0x5, 0x40, @empty, @local, 0x700, 0x20, 0x3, 0x6}}) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) (async) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) (async) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0xb, r1, 0x800}, 0xc) 48.528246844s ago: executing program 4 (id=467): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x21, 0x7, 0xe3) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000008000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) accept4$alg(r7, 0x0, 0x0, 0x80000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') readv(r8, &(0x7f0000000540)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) 48.521463221s ago: executing program 38 (id=467): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x21, 0x7, 0xe3) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000008000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) accept4$alg(r7, 0x0, 0x0, 0x80000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') readv(r8, &(0x7f0000000540)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) 5.72784806s ago: executing program 9 (id=863): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/233, 0xe9}], 0x1, &(0x7f0000000380)=""/32, 0x20}, 0x41) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x7ffffffd, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0xfffffffffffffffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x19, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000180)=@data_h2c={{0x6, 0xc}, 0xfffa, 0x5914, 0xf, 0x9c, "86d01582"}, 0x80, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r10, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) 4.764142808s ago: executing program 9 (id=867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(r0, 0x410, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001040)={0xb4e, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x4004000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x13, 0x300, 0x70bd26, 0x25dfdbfe, {0xb, 0x8, 0x8, 0x6, {0x4e20, 0x4e20, [0x6, 0x6, 0x9ae0, 0x6], [0x3, 0x6, 0x5, 0x2], 0x0, [0x8, 0xbc]}, 0xfffffffc, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x200000cc}, 0x4) ioctl$BLKRRPART(r5, 0x125f, 0x0) 4.58450306s ago: executing program 9 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r3, r5, 0xa, 0x0, @void}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000000, @local}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x67, &(0x7f0000000380)=""/103, 0x41000}, 0x94) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 4.083153239s ago: executing program 8 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000040) 3.138238436s ago: executing program 9 (id=874): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = memfd_create(&(0x7f0000000540)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1313, 0x7) fcntl$setstatus(r0, 0x4, 0x42000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) (async) pwrite64(r1, &(0x7f00000001c0)="00d32740dff4", 0x6, 0xffd) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x4, 0x1000000000000}) (async) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f00000000c0)={0xd6a5, 0x4, 0xf, 0x6, 0x4, 0x3, 0x10}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3.057972858s ago: executing program 9 (id=876): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0xa, 0x4, 0xcc, &(0x7f0000000100)}) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x31) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0xa, 0x4, 0xcc, &(0x7f0000000100)}) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x31) (async) 3.057337067s ago: executing program 8 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) 2.607461533s ago: executing program 2 (id=881): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x5961, 0x10000, 0x0, 0x404d}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0xfffffc00, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xf5c}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8600) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0xffffffffffffffc9, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000004000000080001000100000008000a0000000000080005"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) 2.524638133s ago: executing program 2 (id=883): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000084d000/0x4000)=nil) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000680)={r3, 0x1, 0x2, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x6, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.163501996s ago: executing program 1 (id=888): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e2a, 0x88, @loopback, 0x200001}}, 0x0, 0x0, 0x4, 0x0, "fbb3af84ff070000485142ed437596fa7f905c1990c91e0323ba5897af26ebf89b6b0412c139cf0b3453d27c8101f3fd0f9ac4d1345a21cbf66c9f22cdf058f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x6e22, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e000305000004000000000014000080080000000000096b9d8b48000008001f80b59d1e5d"], 0x24}], 0x1, 0x0, 0x0, 0xc084}, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) (async) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 2.121534083s ago: executing program 1 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)="de54"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)="16f7b33717"}) r1 = userfaultfd(0x800) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@sb={'sb', 0x3d, 0x1}}, {@norecovery}, {@nodioread_nolock}, {@discard}, {@data_journal}]}, 0x1, 0x61c, &(0x7f0000000d80)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c004084b83e9803000708000340fffff7210800034000070c0002000000000000000005000000000000000000000000000000e18415dc004367495add4983dc24f401d1c64660fb313635c35f40cce634ef0415adfb31977d1f5a79ab3fef4baaa65238f011f7bc11025f94f2989ef2b1dbf6566e920ea091a8444aeae5cc5818f7e2d4499191d84bb3f8611633a26ca3fd0e6ad4fed48cb73344b2213b118f2654ba774895350660e2cd642a0f34c605da80757e3fa1eb3c0836655c"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 2.033039267s ago: executing program 8 (id=890): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000102400000024000000020000000000000001000084000000000000000002000000000000050000000000000006020000000000531a49af0ac6ac0e578d440838f4ec2cf2d20b5807d18238156b4989d44b3845a13546623848d0d9845c2eec1daf124bdc843578aee5f725fd926775f61d7746c17383c889289d963beea18389968e8c4d7d34f52768756e6712bd3de52a22ef2419a53283c7b8a23ea34256a9bd89983fab793783cdf8c9e9f7c4b49f0e01b2eaddfa97e9b317d11f2a1a98ec03ad9dbe48847c34aed84c960dc4de382b3ddf1bbba69af6c76c931ff86db449"], 0x0, 0x3e, 0x0, 0x0, 0x8}, 0x28) (async) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x6c}) r6 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) (async) openat(r7, &(0x7f0000000040)='./file0\x00', 0x40001, 0xc0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") 1.824118403s ago: executing program 8 (id=893): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0x600, 0x0, 0x2}]) unshare(0x2a020400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x80000001}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 1.665223363s ago: executing program 8 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = landlock_create_ruleset(&(0x7f0000000340)={0x946, 0x0, 0x4}, 0x18, 0x7) sendfile(r3, r1, &(0x7f0000000380)=0x8000000000000001, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0xfc0, 0x8a040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r5}], 0x1, &(0x7f00000002c0), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000003c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000580)={"9ac66240beabaa22229ca09fff3a871b", 0x0, 0x0, {0x8000000000000000, 0xa}, {0x7, 0x82}, 0x8, [0xfffffffffffffff8, 0x9, 0x6, 0x8000000000000001, 0x9, 0x9, 0xa3f, 0x8, 0xc, 0x81, 0x3f3, 0x8, 0xc1d0, 0xffffffffb61da0f8, 0x3, 0x4]}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000680)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000780)={"39f445f43ac09de45597c67e708953a1", r6, r7, {0x9, 0x9}, {0x7fffffff, 0x8}, 0x100000001, [0x3, 0xc, 0x4, 0x0, 0x4, 0x3, 0x58, 0x3ff, 0x3, 0x8, 0x7, 0x4e, 0xee8, 0xa7d, 0x45, 0x1]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r8], 0x50) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x7f, 0x4, 0x8, 0x1, r9, 0x2}, 0x50) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r11, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x10001, 0x0, 0x7, 0x57}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x80c0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r12, 0x8004e500, &(0x7f0000000140)=r10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002180)=ANY=[@ANYBLOB="1c0000001d00070f2dbd70000300000007000000", @ANYRES32=r13], 0x1c}}, 0x0) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="2cc000000000", @ANYRES16=r14, @ANYBLOB="010028bd7000ffdbdf250a000000180001801400020076657468315f746f5f68737200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) 1.602438617s ago: executing program 2 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b393efc0b6a935573c2904eeb4ba4fe120b91be17f83871c579c18e340af9c1e78107697d4b07549fa1e2dd39556687194d610800084000000001"], 0x288}}, 0x20050800) 1.598591678s ago: executing program 5 (id=899): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvfrom$l2tp(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x402200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x2, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x10, 0x0, 0x5bc}}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x27, 0x4, 0x9, 0x7fff, 0x10003, r3, 0x2, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @value=r5}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1800000001010104e2ff0000000080000a00000504000280"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.540732241s ago: executing program 5 (id=900): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.54039091s ago: executing program 5 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000040) 1.539972873s ago: executing program 2 (id=902): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) shutdown(r0, 0x1) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 1.51585776s ago: executing program 5 (id=903): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1dba, 0x0, 0x4}) accept4(r0, &(0x7f0000000080)=@pppol2tpv3, &(0x7f0000000100)=0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.494861714s ago: executing program 5 (id=904): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x462900, 0x0) r1 = fanotify_init(0x200, 0x800) fanotify_mark(r1, 0x21, 0x4800003e, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004001}, 0x4c0d0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000000), 0x5005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x1000) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r5], 0x2, 0x1cf, &(0x7f0000000780)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000160001800000000000000000000000f1ff0000009caf5c2b4d4109dff7b2d22fffc6674bfec93ccba1dc2b24ab4fa276cd97198b4d1f0ac822ec4d1328f2dc170eb282c8c7f5cb42c8b774575a858fd771e7708ac476763d45e5eddcc38a"], 0x18}, 0x1, 0x0, 0x0, 0x4044004}, 0x24044074) 1.420552229s ago: executing program 2 (id=905): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0xea1}}, {@inode_readahead_blks}, {@nodelalloc}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbd9, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.191929932s ago: executing program 1 (id=906): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7cfd1f19}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/205, 0x28, 0xcd, 0x1}, 0x28) 1.134384057s ago: executing program 1 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="33052cbd7000ff10db25280000000a0001007770616e30000000060006000200000005002b0000000000b4a821a854c83393bb3cc571f7f528a8d7f0f343946cfd7d9b790689ed31490500fd00d4a4ad48722890ed7936fd51e97493472339f05212c1e6fe382742578cc17f33b8091f02c85cb8877e9688b8023b564caa4e729d06b7f0d9b249887dd0475b2ca5382807c2c4a2855a6b064e6d1840ff5d69b95737322c0a9690d391bbe7267f57912e1074d3fc22e111fb69fc36e5f09a3cb6adf323b78fd7dac24aad2a33a49352b7915086efc8812bcc18995a07693458106c45da25dd02468382fcd0345688dd4b47cdf728605440432118a369fa67f3ecab39fee202773ae361b96cbe4a3b305ab328e33865fcb914561d3f514b03c4f0ac6cf90be482a3f351381c8d65ffdd773be7d35ce8f24184ae9685d61ebd75eb30b879867c5e8b29dfb6c3d424c415d0560e00a228b78aeb000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc085}, 0x4004041) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8, 0x2}}, './bus\x00'}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) mq_notify(r12, &(0x7f0000000240)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f0000000480)=@multiplanar_mmap={0x3, 0x5, 0x4, 0x800014, 0x80000000, {}, {0x2, 0x0, 0x5, 0x5, 0x5, 0x6, "11020f52"}, 0x7fffffff, 0x1, {&(0x7f0000000400)=[{0xeffb, 0x9, {0x10}}, {0x1000, 0x7c36cc06, {}, 0x800}]}, 0xd9a, 0x0, r12}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x38, 0x2c, 0xf31, 0x0, 0x25dddbfe, {0x0, 0x0, 0x0, r13, {0xf}, {0xfff2, 0xffff}, {0xffff, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 912.48929ms ago: executing program 1 (id=908): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a00000006000000000000000800000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="ce013de2225d26400e25603f0798443b092d9132ea8dc640190000000000d2eda38bd9a8a9dfb3210f49c0998e047f27d51778f4201d078848374af7b5ad6d26df425c015cb328ac29b5572c84e765d9dc6846c8064b2dd0e3f5aa4d9e41d9ae79c3dafbfd791304c0f761a699fa3a76769e59d361c48c139f742f76bd25c5020000003b94d5f439b96d397f90d87d02ac81a6bc0000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x8cc501830ed4c398}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x80000, 0x39) getsockopt$MRT6(r5, 0x29, 0xcf, 0xffffffffffffffff, 0x0) fchown(r1, 0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200002, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c8014"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_bcm(r7, &(0x7f0000001500)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4}, 0x1) 314.80799ms ago: executing program 9 (id=909): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x575, &(0x7f0000000bc0)="$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") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@remote, @local}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x2}) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noinit_itable}, {@lazytime}, {@acl}, {@dioread_nolock}, {@quota}, {@nodiscard}]}, 0x81, 0x46f, &(0x7f00000001c0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YHafZ+bZnee7z7w8+zy7AXStoewhidgREb9GxEAju7jAUOPp+tXzkzeunp9MYmHhtT+SvNy1q+cny6Ll67YXmeE0Iv0wKXay2OzZcycn6vXamSI/OnfqrdHZs+eeeOfUxInaidrp8SNHDh8ae/qp8Sc7EmcW17V978/s3/viG5denjx26c0fv87qu6PY3hxHpwxlgf+5kGvd9mind1axnU3ppLfCirAqPRGRNVdffv4PRE/caryBeOGDSisHrKvs3rSl/eb5BWATS6LqGgDVKG/02fffcrlDXY8N4cqzjS9AWdzXi6WxpTfSokxfy/fbThqKiGPzf32eLbFO4xAAAM0+nvzsaH9EvHfjq5eyvsdARJTjQffkj7/lj7uKOZTBiPh/ROyOiLsiYk9E3F2UvTci7ltjfW7v/6SX1/iWy8r6f88Uc1uL+39l7y8Ge4rczjz+vuT4dL12sPhMhqNvS5YfW2Yf3z7/yyfttjX3/7Il23/ZFyzqcbm3ZYBuamJuIu+UdsCVixH7epeKP7k5E5BExN6I2Le6t95VJqYf+3J/u0Irx7+MDswzLXyRhTefxT8fLfGXkub5yenb5idHt0a9dnC0PCpu99PPH73abv9rir8DrtQaz03t31pkMGmer53t7P7/5fGf9iev5/PM/cW6dyfm5s6MRfQnR/P8ovXjt15b5svy2fE/fGDp83938Zos/vsjIjuIH4iIByPioaLuD0fEIxFxYJkYf3hu5fgjraj9L0ZMLXn9u3n8t7T/6hM9J7//pt3+/1n7H85Tw8Wa/Pq3gqWqk10uWiu4ls8OAAAA/ivS/DfwSTpyM52mIyON3/Dvif+l9ZnZucePz7x9eqrxW/nB6EvLka6BYjy0Pl2vjSXzxTs2xkfHi7Hicrz0UDFu/GnPtjw/MjlTn6o4duh229uc/5nfe6quHbDOti25drz/jlcEqEDrPHq6OHvhlXAxgM3K/7Whe61w/jf/DwbYZNz/oXstdf5faMmbC4DNyf0fupfzH7pU+l3VNQAq5P4PXWkt/+tfx8TWjVGNahIbtVHyRESZSDdEfSTWKVH1lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g4AAP//K2Lmiw==") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) write$tun(r4, &(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRES8=0x0, @ANYBLOB="94611bd806279545ea92fb82ebbcf49219c510736a2c45375935733c1cc6b66662289caf0906332e2ab80d528b3bb025b95bc75e71d51ec6df1961b9dbc7091a6ffb2e223cf7b5724822f125cc974967b51efa9b6fc78d5b4e14481180b5367b67f179e1ed2e5c6e1acb64eec2a796bcede7c2ceccd594a585bf0c268fcaa360be", @ANYRES32=r3, @ANYRES32, @ANYBLOB="d9848b0f1df8208861695c45a657373afd8a0d4fd4659037e877d0c66223e2313749427e946d1d0c0c6d2e799e0a93f90d74c6d3f9964b7b2d02894d6c5140461e4a3d4bb661bd60c80449f16ccb776b3e34ce117215b6e0e70323a72a3ecef3b19e91e44b27d69ecb330431415cfce9ea8e6d999f0eb44b1eb43d02903b9cf76d7326b612bfb3a3cdda081e9a87258b204aa33f47bd9db3d88b8ec7dcf658", @ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRESDEC=r6], 0xfce) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000006040)=[{{&(0x7f0000001e00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003300)=[{&(0x7f0000001e40)="15", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r8}, 0x10) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 314.269648ms ago: executing program 5 (id=910): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@mblk_io_submit}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 313.421968ms ago: executing program 8 (id=911): unshare(0x2040400) clock_adjtime(0x2, &(0x7f0000000380)={0x0, 0x800000000007, 0x2000000d, 0x5, 0x2000000000000, 0x51, 0x40, 0x1, 0x0, 0x80000000, 0x0, 0x9, 0x3f, 0xb, 0x0, 0x2000000, 0xfffffffffffffffd, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x20004, 0x0, 0x0, 0x0, 0x120000000003f89, 0x0, 0x18a9}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x5, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x38, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x804) write(r4, &(0x7f0000000500)='\x00', 0x1) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) sendfile(r4, r0, 0x0, 0x3ffff) sync_file_range(r0, 0x8, 0x1, 0x1) 572.106µs ago: executing program 2 (id=912): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) unshare(0x6020400) (async) unshare(0x6020400) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000340)={[{@grpid}, {@grpquota}], [{@uid_lt}, {@subj_role={'subj_role', 0x3d, 'grpid[z\xa7^T\xb6b\xf0\xcc\x04\xdf\xff\xad\xc3\x9f0cACA\r\x8db_l\xaf\xd2\x03W\xf9\xd7\'\xdc\x04C\x1e\xd1\x7fK\xc2|D\xe8\xc1\xb77\x7fi\xda\x9a\x82\x01b\xa6\x8fg:\x1c6\x97\xab\xb1eK\xeb\xe7\xef\x13\x06N\xf18\xfb9\'\x15\xef\xe7\x8231\xd8\xaa\xe89{\xc9\x83e'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_eq}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x212042, 0x0) fallocate(r2, 0x0, 0x1, 0x7fff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x2, 0xd6e, 0x2}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 0s ago: executing program 1 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140c, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000200)=""/44, &(0x7f0000000240)=0x2c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0xff, 0xd87, {0xffffffffffffffff}, {0xee00}, 0x9, 0xdf4}) sched_setscheduler(r4, 0x3, &(0x7f00000002c0)=0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x40080c1) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000004c0)={r6, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x8, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x14040890}, 0x20000010) syz_clone3(&(0x7f0000001800)={0xa000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0, {0x1c}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000001700)=""/158, &(0x7f00000017c0)=[r4], 0x1}, 0x58) sched_getaffinity(r8, 0x8, &(0x7f0000001880)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000018c0)) r9 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r9, &(0x7f0000001900)={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001980), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8040) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001ac0)={0x0, 0xc, 0x6, 0x7, 0x8, 0x2}, &(0x7f0000001b00)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001b40)={r11, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x9, 0x3, 0x3, 0xc, 0x36, 0x1ff, 0x4}, 0x9c) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000001c00), 0x28680) r13 = syz_open_dev$mouse(&(0x7f0000001c40), 0x9, 0x302) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)='%pK \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001f40)={'syztnl2\x00', &(0x7f0000001ec0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x2, 0x9, 0x10, @remote, @remote, 0x8, 0x8000, 0x10001, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x15, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xd6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x54}, @map_val={0x18, 0x5, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e00)='GPL\x00', 0x7f9, 0x58, &(0x7f0000001e40)=""/88, 0x41000, 0x50, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x5, 0xf, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002000)=[0x1], &(0x7f0000002040)=[{0x2, 0x2, 0x10, 0x4}, {0x4, 0x4, 0x1}], 0x10, 0x40}, 0x94) kernel console output (not intermixed with test programs): 93][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.898544][ T5482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.899102][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.899123][ T5482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.933304][ T5860] nbd: must specify an index to disconnect [ 51.039468][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.205'. [ 51.274119][ T4718] Bluetooth: hci0: command tx timeout [ 51.332910][ T5867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.433434][ T4394] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.539000][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.701892][ T5744] veth0_vlan: entered promiscuous mode [ 51.714950][ T5744] veth1_vlan: entered promiscuous mode [ 51.741058][ T5744] veth0_macvtap: entered promiscuous mode [ 51.745719][ T5744] veth1_macvtap: entered promiscuous mode [ 51.756306][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.762486][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.773210][ T5482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.773263][ T5482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.773295][ T5482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.773312][ T5482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.849476][ T5480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.849519][ T5480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.849715][ T5480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.849722][ T5480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.888191][ T5908] loop2: detected capacity change from 0 to 7 [ 51.895370][ T5908] Dev loop2: unable to read RDB block 7 [ 51.895412][ T5908] loop2: AHDI p1 p2 p3 [ 51.895430][ T5908] loop2: partition table partially beyond EOD, truncated [ 51.895831][ T5908] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.895857][ T5908] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.902531][ T5908] Bluetooth: MGMT ver 1.23 [ 51.907239][ T4394] 8021q: adding VLAN 0 to HW filter on device eth6 [ 52.005191][ T5913] loop4: detected capacity change from 0 to 128 [ 52.006198][ T5913] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 52.042776][ T5913] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 52.042821][ T5913] FAT-fs (loop4): Filesystem has been set read-only [ 52.049402][ T5913] syz.4.207: attempt to access beyond end of device [ 52.049402][ T5913] loop4: rw=0, sector=161, nr_sectors = 1 limit=128 [ 52.066981][ T5915] overlayfs: failed to clone upperpath [ 52.070737][ T5915] overlayfs: failed to clone upperpath [ 52.132590][ T5922] fuse: Bad value for 'fd' [ 52.155171][ T5925] loop6: detected capacity change from 0 to 256 [ 52.192532][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.210'. [ 52.235912][ T5925] loop6: detected capacity change from 0 to 256 [ 52.254163][ T5925] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.329602][ T5937] loop0: detected capacity change from 0 to 8192 [ 52.391925][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.391962][ T5938] FAT-fs (loop6): Filesystem has been set read-only [ 52.392000][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.392040][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.392058][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.392082][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.392099][ T5938] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.402550][ T5945] can: request_module (can-proto-0) failed. [ 52.504274][ T5937] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 52.504315][ T5937] FAT-fs (loop0): Filesystem has been set read-only [ 52.504530][ T5937] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 52.504571][ T5937] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 52.536180][ T4394] 8021q: adding VLAN 0 to HW filter on device eth7 [ 52.576779][ T5923] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 52.583219][ T4706] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 52.584664][ T5960] loop4: detected capacity change from 0 to 256 [ 52.596905][ T5960] FAT-fs (loop4): Directory bread(block 64) failed [ 52.596986][ T5960] FAT-fs (loop4): Directory bread(block 65) failed [ 52.597010][ T5960] FAT-fs (loop4): Directory bread(block 66) failed [ 52.597021][ T5960] FAT-fs (loop4): Directory bread(block 67) failed [ 52.597041][ T5960] FAT-fs (loop4): Directory bread(block 68) failed [ 52.597051][ T5960] FAT-fs (loop4): Directory bread(block 69) failed [ 52.597071][ T5960] FAT-fs (loop4): Directory bread(block 70) failed [ 52.597081][ T5960] FAT-fs (loop4): Directory bread(block 71) failed [ 52.597101][ T5960] FAT-fs (loop4): Directory bread(block 72) failed [ 52.597110][ T5960] FAT-fs (loop4): Directory bread(block 73) failed [ 52.711182][ T5968] loop0: detected capacity change from 0 to 512 [ 52.721508][ T5968] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.219: corrupted xattr block 95: invalid header [ 52.721557][ T5968] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.721772][ T5968] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.219: bg 0: block 7: invalid block bitmap [ 52.721786][ T5968] loop0: lost filesystem error report for type 5 error -117 [ 52.721919][ T5968] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 52.721927][ T5968] loop0: lost filesystem error report for type 5 error -117 [ 52.722042][ T5968] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.219: corrupted xattr block 95: invalid header [ 52.722053][ T5968] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.722161][ T5968] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 52.722191][ T5968] EXT4-fs (loop0): 1 orphan inode deleted [ 52.722633][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.755937][ T5971] binder: 5969:5971 ioctl c0306201 0 returned -14 [ 52.756386][ T5971] binder: 5969:5971 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.756417][ T5971] binder: 5971 RLIMIT_NICE not set [ 52.801917][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.811792][ T5975] binder: 5969:5975 ioctl c0306201 0 returned -14 [ 52.811994][ T5975] binder: 5969:5975 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.812025][ T5975] binder: 5975 RLIMIT_NICE not set [ 52.812858][ T5974] loop6: detected capacity change from 0 to 4096 [ 52.823729][ T5974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.331685][ T4723] Bluetooth: Wrong link type (-71) [ 53.377710][ T5983] loop0: detected capacity change from 0 to 4096 [ 53.418041][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.453355][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.471396][ T4723] Bluetooth: hci0: command tx timeout [ 53.635533][ T5999] vfat: Unknown parameter ' ' [ 53.721205][ T5744] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.050095][ T6033] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.230: inode has both inline data and extents flags [ 54.052974][ T6033] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.053345][ T6033] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.230: couldn't read orphan inode 15 (err -117) [ 54.057141][ T6033] loop4: lost filesystem error report for type 5 error -117 [ 54.057764][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.152862][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.251075][ T6043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.286437][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.559815][ T6069] tipc: Enabled bearer , priority 0 [ 54.560200][ T6069] syzkaller0: entered promiscuous mode [ 54.560230][ T6069] syzkaller0: entered allmulticast mode [ 54.566362][ T6069] syzkaller0: mtu less than device minimum [ 54.582544][ T6068] tipc: Resetting bearer [ 54.594319][ T6068] tipc: Disabling bearer [ 54.669147][ T6078] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 54.705151][ T6078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.740292][ T6078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.740499][ T6078] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 54.740971][ T6078] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 54.800226][ T6087] syzkaller0: entered promiscuous mode [ 54.800264][ T6087] syzkaller0: entered allmulticast mode [ 54.815936][ T6078] gretap1: entered promiscuous mode [ 54.829831][ T6078] bond3: (slave gretap1): making interface the new active one [ 54.830094][ T6078] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 54.834006][ T6078] macvlan2: entered promiscuous mode [ 54.834018][ T6078] macvlan2: entered allmulticast mode [ 54.834437][ T6078] bond3: entered promiscuous mode [ 54.841611][ T6078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.890110][ T6078] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 54.901382][ T6078] bond3: left promiscuous mode [ 55.031370][ T6104] tipc: Enabled bearer , priority 10 [ 55.047203][ T6110] fuse: Bad value for 'fd' [ 55.739134][ T4723] Bluetooth: hci0: command 0x0419 tx timeout [ 56.319654][ T6147] set_capacity_and_notify: 4 callbacks suppressed [ 56.324638][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 56.352592][ T6147] loop4: detected capacity change from 0 to 8192 [ 56.375560][ T6147] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.378680][ T6147] FAT-fs (loop4): Filesystem has been set read-only [ 56.529296][ T6158] loop0: detected capacity change from 0 to 512 [ 56.533322][ T6158] EXT4-fs: Ignoring removed nobh option [ 56.554623][ T6158] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 56.556573][ T6158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.255: invalid indirect mapped block 256 (level 1) [ 56.556618][ T6158] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.561125][ T6158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.255: invalid indirect mapped block 2683928664 (level 1) [ 56.561165][ T6158] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.561647][ T6158] EXT4-fs (loop0): 1 truncate cleaned up [ 56.562114][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.572498][ T6158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.255: invalid indirect mapped block 4294967295 (level 0) [ 56.574949][ T6158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.255: invalid indirect mapped block 4294967295 (level 0) [ 56.575148][ T6158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.255: invalid indirect mapped block 480848489 (level 1) [ 56.628109][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.393614][ T6183] loop4: detected capacity change from 0 to 512 [ 57.401616][ T6183] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.263: invalid block [ 57.401679][ T6183] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.403761][ T6183] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.263: invalid indirect mapped block 4294967295 (level 1) [ 57.403789][ T6183] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.403973][ T6183] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.263: invalid indirect mapped block 4294967295 (level 1) [ 57.403986][ T6183] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.404616][ T6183] EXT4-fs (loop4): 2 truncates cleaned up [ 57.405046][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.411798][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 57.412180][ T6183] veth1_macvtap: left promiscuous mode [ 57.450880][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.496890][ T6189] loop4: detected capacity change from 0 to 128 [ 57.504512][ T6189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.506507][ T6189] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.510686][ T6189] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.533324][ T6189] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 57.546283][ T6189] Bluetooth: MGMT ver 1.23 [ 57.585880][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.777153][ T6205] loop4: detected capacity change from 0 to 512 [ 57.814521][ T6205] EXT4-fs (loop4): 1 orphan inode deleted [ 57.829941][ T6211] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 57.907674][ T6214] lo speed is unknown, defaulting to 1000 [ 59.686256][ T6257] netlink: 'syz.5.283': attribute type 10 has an invalid length. [ 59.697883][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.708015][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.708619][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.710142][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.712936][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.714461][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.721212][ T6257] bond0: (slave team0): Enslaving as an active interface with an up link [ 59.883716][ T6283] loop4: detected capacity change from 0 to 4096 [ 59.884315][ T6259] lo speed is unknown, defaulting to 1000 [ 59.888397][ T6283] EXT4-fs: inline encryption not supported [ 59.896331][ T6283] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.896382][ T6283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.896598][ T6283] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 60.092596][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.092678][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.092753][ T6259] bridge_slave_0: entered allmulticast mode [ 60.093231][ T6259] bridge_slave_0: entered promiscuous mode [ 60.094171][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.094213][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.094269][ T6259] bridge_slave_1: entered allmulticast mode [ 60.094697][ T6259] bridge_slave_1: entered promiscuous mode [ 60.104669][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.105719][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.113521][ T6259] team0: Port device team_slave_0 added [ 60.115253][ T6259] team0: Port device team_slave_1 added [ 60.121855][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.122154][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.122180][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.122750][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.122758][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.122774][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.148707][ T5411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.151830][ T6292] xt_hashlimit: size too large, truncated to 1048576 [ 60.159045][ T6259] hsr_slave_0: entered promiscuous mode [ 60.159406][ T6259] hsr_slave_1: entered promiscuous mode [ 60.159628][ T6259] debugfs: 'hsr0' already exists in 'hsr' [ 60.159639][ T6259] Cannot create hsr debugfs directory [ 60.228027][ T5411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.247111][ T6259] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 60.249662][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.251598][ T6259] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 60.254390][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.254696][ T6259] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 60.258595][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.260451][ T6259] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 60.262833][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.289166][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.289216][ T6259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.289305][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.289350][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.313199][ T5411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.334788][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.342524][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.344323][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.352370][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.355978][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.356025][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.365660][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.365710][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.385566][ T5411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.399846][ T6259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.401838][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.475153][ T6308] Injecting memory failure for pfn 0x13dc36 at process virtual address 0x201bd000 [ 60.494715][ T6308] Memory failure: 0x13dc36: Sending SIGBUS to syz.5.290:6308 due to hardware memory corruption [ 60.496850][ T6308] Memory failure: 0x13dc36: recovery action for dirty LRU page: Recovered [ 60.498368][ T6308] Injecting memory failure for pfn 0x13dc37 at process virtual address 0x201be000 [ 60.500316][ T6308] Memory failure: 0x13dc37: Sending SIGBUS to syz.5.290:6308 due to hardware memory corruption [ 60.512377][ T6308] Memory failure: 0x13dc37: recovery action for dirty LRU page: Recovered [ 60.515691][ T6308] Injecting memory failure for pfn 0x13dcb0 at process virtual address 0x201bf000 [ 60.518435][ T6308] Memory failure: 0x13dcb0: Sending SIGBUS to syz.5.290:6308 due to hardware memory corruption [ 60.518502][ T6308] Memory failure: 0x13dcb0: recovery action for dirty LRU page: Recovered [ 60.547499][ T5411] bridge_slave_1: left allmulticast mode [ 60.547531][ T5411] bridge_slave_1: left promiscuous mode [ 60.547634][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.551764][ T5411] bridge_slave_0: left allmulticast mode [ 60.552804][ T5411] bridge_slave_0: left promiscuous mode [ 60.553817][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.687216][ T5411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.730332][ T5411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.751419][ T5411] bond0 (unregistering): Released all slaves [ 60.756754][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.872953][ T6339] loop4: detected capacity change from 0 to 512 [ 60.873717][ T6339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.880524][ T6339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.291: bg 0: block 384: padding at end of block bitmap is not set [ 60.880561][ T6339] loop4: lost filesystem error report for type 5 error -117 [ 60.884408][ T6339] EXT4-fs (loop4): Remounting filesystem read-only [ 60.884673][ T6339] EXT4-fs (loop4): 1 truncate cleaned up [ 60.961869][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8 [ 60.979489][ T6259] veth0_vlan: entered promiscuous mode [ 60.984480][ T6259] veth1_vlan: entered promiscuous mode [ 61.004564][ T6259] veth0_macvtap: entered promiscuous mode [ 61.015180][ T6259] veth1_macvtap: entered promiscuous mode [ 61.020604][ T6344] lo speed is unknown, defaulting to 1000 [ 61.101382][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.104012][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.108369][ T5396] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108433][ T5396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108456][ T5396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108473][ T5396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.187877][ T4394] 8021q: adding VLAN 0 to HW filter on device eth9 [ 61.192069][ T5411] hsr_slave_0: left promiscuous mode [ 61.193841][ T5411] hsr_slave_1: left promiscuous mode [ 61.194441][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.194452][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.195094][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.195104][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.197838][ T5411] veth1_macvtap: left promiscuous mode [ 61.197859][ T5411] veth0_macvtap: left promiscuous mode [ 61.197967][ T5411] veth1_vlan: left promiscuous mode [ 61.197982][ T5411] veth0_vlan: left promiscuous mode [ 61.307042][ T5411] team0 (unregistering): Port device team_slave_1 removed [ 61.317100][ T5411] team0 (unregistering): Port device team_slave_0 removed [ 61.366048][ T5480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.366137][ T5480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.393057][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.393093][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.583779][ T6372] Soft offlining pfn 0x137c00 at process virtual address 0x20000000 [ 61.655097][ T4394] 8021q: adding VLAN 0 to HW filter on device eth10 [ 61.916874][ T4723] Bluetooth: hci5: command tx timeout [ 62.095388][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095456][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095517][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095551][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095583][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095616][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095647][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095678][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095708][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.095740][ T6403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 62.146052][ T4394] 8021q: adding VLAN 0 to HW filter on device eth11 [ 62.314132][ T6425] loop4: detected capacity change from 0 to 8192 [ 62.333285][ T6422] futex_wake_op: syz.5.300 tries to shift op by 32; fix this program [ 62.535855][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536058][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536144][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536224][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536304][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536383][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536461][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536536][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536614][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 62.536692][ T6428] netlink: 'syz.5.300': attribute type 3 has an invalid length. [ 63.295184][ T6429] loop4: detected capacity change from 0 to 4096 [ 63.353698][ T6429] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.866674][ T6448] fuse: fd is not a fuse device [ 64.518685][ T4723] Bluetooth: hci5: command tx timeout [ 65.983454][ T6536] loop4: detected capacity change from 0 to 4096 [ 65.984962][ T6536] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.988731][ T6536] EXT4-fs mount: 6 callbacks suppressed [ 65.989765][ T6536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.242005][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.242066][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.857857][ T5384] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.950355][ T3878] cfg80211: failed to load regulatory.db [ 66.950580][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.982358][ T5384] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.024428][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.026585][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.027138][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.029956][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.030187][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.043733][ T5384] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.095843][ T5384] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.117640][ T6562] lo speed is unknown, defaulting to 1000 [ 67.127299][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.127601][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.129840][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.129885][ T6575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.129988][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.130047][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.132280][ T6575] team0: Port device bridge0 added [ 67.172691][ T6582] overlayfs: failed to clone upperpath [ 67.175361][ T6582] overlayfs: failed to clone upperpath [ 67.209764][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.210079][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.210191][ T6562] bridge_slave_0: entered allmulticast mode [ 67.212023][ T6562] bridge_slave_0: entered promiscuous mode [ 67.212932][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.212952][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.213010][ T6562] bridge_slave_1: entered allmulticast mode [ 67.213430][ T6562] bridge_slave_1: entered promiscuous mode [ 67.220576][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.226912][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.257213][ T6562] team0: Port device team_slave_0 added [ 67.258454][ T6562] team0: Port device team_slave_1 added [ 67.709715][ T5384] bridge_slave_1: left allmulticast mode [ 67.709754][ T5384] bridge_slave_1: left promiscuous mode [ 67.709847][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.714383][ T5384] bridge_slave_0: left allmulticast mode [ 67.714410][ T5384] bridge_slave_0: left promiscuous mode [ 67.714504][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.833069][ T5384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.872761][ T5384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.883930][ T5384] bond0 (unregistering): Released all slaves [ 67.890446][ T4394] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.894374][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.894401][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.899136][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.900030][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.900038][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.900054][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.932943][ T6562] hsr_slave_0: entered promiscuous mode [ 67.934020][ T6562] hsr_slave_1: entered promiscuous mode [ 67.934821][ T6562] debugfs: 'hsr0' already exists in 'hsr' [ 67.934833][ T6562] Cannot create hsr debugfs directory [ 67.980193][ T6622] loop4: detected capacity change from 0 to 8192 [ 68.009741][ T6622] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 68.014556][ T6622] FAT-fs (loop4): Filesystem has been set read-only [ 68.114438][ T6562] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 68.119982][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.121851][ T6562] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 68.127157][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.128989][ T6562] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 68.138122][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.139051][ T6562] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 68.142649][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.162731][ T6645] loop4: detected capacity change from 0 to 4096 [ 68.165862][ T6645] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.168753][ T4394] 8021q: adding VLAN 0 to HW filter on device eth13 [ 68.179307][ T6645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.314399][ T6650] wg1: left allmulticast mode [ 68.333235][ T867] lo speed is unknown, defaulting to 1000 [ 68.398768][ T5384] hsr_slave_0: left promiscuous mode [ 68.400221][ T5384] hsr_slave_1: left promiscuous mode [ 68.402210][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.403816][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.405632][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.407094][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.411828][ T5384] veth1_macvtap: left promiscuous mode [ 68.413562][ T5384] veth0_macvtap: left promiscuous mode [ 68.413613][ T5384] veth1_vlan: left promiscuous mode [ 68.413652][ T5384] veth0_vlan: left promiscuous mode [ 68.596342][ T5384] team0 (unregistering): Port device team_slave_1 removed [ 68.621936][ T5384] team0 (unregistering): Port device team_slave_0 removed [ 68.782426][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.803518][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.830788][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.830848][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.835774][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.835812][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.937888][ T6658] net_ratelimit: 44 callbacks suppressed [ 68.937931][ T6658] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 69.102786][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.121994][ T6675] netlink: 176 bytes leftover after parsing attributes in process `syz.5.340'. [ 69.173392][ T6678] loop4: detected capacity change from 0 to 8192 [ 69.230944][ T6678] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 69.230978][ T6678] FAT-fs (loop4): Filesystem has been set read-only [ 69.243095][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.273071][ T4394] 8021q: adding VLAN 0 to HW filter on device eth14 [ 69.277957][ T4718] Bluetooth: hci4: command tx timeout [ 69.314020][ T6697] bridge0: port 3(syz_tun) entered blocking state [ 69.317208][ T6697] bridge0: port 3(syz_tun) entered disabled state [ 69.317426][ T6697] syz_tun: entered allmulticast mode [ 69.319683][ T6697] syz_tun: entered promiscuous mode [ 69.320130][ T6697] bridge0: port 3(syz_tun) entered blocking state [ 69.320174][ T6697] bridge0: port 3(syz_tun) entered forwarding state [ 69.402913][ T6562] veth0_vlan: entered promiscuous mode [ 69.405968][ T6562] veth1_vlan: entered promiscuous mode [ 69.417402][ T6562] veth0_macvtap: entered promiscuous mode [ 69.430610][ T6562] veth1_macvtap: entered promiscuous mode [ 69.434397][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.439141][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.455186][ T5480] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.455448][ T5480] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.455529][ T5480] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.455585][ T5480] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.516478][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.516520][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.538207][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.538250][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.583576][ T6697] loop4: detected capacity change from 0 to 8192 [ 69.630777][ T4394] 8021q: adding VLAN 0 to HW filter on device eth15 [ 69.763433][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 69.763556][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.770155][ T6731] batadv_slave_0: entered promiscuous mode [ 69.778659][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 69.792660][ T6735] loop8: detected capacity change from 0 to 1024 [ 69.801231][ T6735] EXT4-fs: Mount option(s) incompatible with ext2 [ 69.884178][ T3878] kernel read not supported for file /vga_arbiter (pid: 3878 comm: kworker/0:2) [ 69.889157][ T6744] Injecting memory failure for pfn 0x13670f at process virtual address 0x20f0f000 [ 69.941491][ T6744] Memory failure: 0x13670f: recovery action for dirty LRU page: Recovered [ 69.958263][ T6744] loop4: detected capacity change from 0 to 512 [ 69.958778][ T6744] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.021667][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.023903][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.026236][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.029831][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.030151][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.035155][ T6753] loop8: detected capacity change from 0 to 4096 [ 70.035571][ T6753] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.056154][ T6753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.763023][ T6756] lo speed is unknown, defaulting to 1000 [ 70.927404][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.929233][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.931072][ T6756] bridge_slave_0: entered allmulticast mode [ 70.933343][ T6756] bridge_slave_0: entered promiscuous mode [ 70.935490][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.937340][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.939179][ T6756] bridge_slave_1: entered allmulticast mode [ 70.941097][ T6756] bridge_slave_1: entered promiscuous mode [ 70.953205][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.956714][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.972557][ T6756] team0: Port device team_slave_0 added [ 70.974704][ T6756] team0: Port device team_slave_1 added [ 70.984887][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.986667][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.991398][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.994990][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.996325][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.001750][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.173868][ T6798] overlayfs: failed to resolve './file1': -2 [ 71.287846][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.297825][ T6756] hsr_slave_0: entered promiscuous mode [ 71.298170][ T6756] hsr_slave_1: entered promiscuous mode [ 71.298372][ T6756] debugfs: 'hsr0' already exists in 'hsr' [ 71.298382][ T6756] Cannot create hsr debugfs directory [ 71.339967][ T6802] netlink: 376 bytes leftover after parsing attributes in process `syz.5.360'. [ 71.392909][ T6756] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 71.396196][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.398026][ T6756] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 71.400781][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.402617][ T6756] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 71.413751][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.414150][ T6756] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 71.418299][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.473322][ T6756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.482895][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.507152][ T6756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.507188][ T6756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.514862][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.514907][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.518836][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.518889][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.535235][ T4723] Bluetooth: hci4: command tx timeout [ 71.975411][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.093537][ T6847] loop8: detected capacity change from 0 to 128 [ 72.167838][ T6847] loop8: detected capacity change from 0 to 8 [ 72.175982][ T6847] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 72.176007][ T6847] unable to read xattr id index table [ 72.215787][ T4723] Bluetooth: hci5: command tx timeout [ 72.891038][ T6756] veth0_vlan: entered promiscuous mode [ 72.893997][ T4807] Process accounting resumed [ 72.910776][ T6756] veth1_vlan: entered promiscuous mode [ 72.997808][ T6756] veth0_macvtap: entered promiscuous mode [ 73.037281][ T6756] veth1_macvtap: entered promiscuous mode [ 73.040871][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.041951][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.045128][ T5411] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045220][ T5411] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045246][ T5411] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045377][ T5411] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.199572][ T5397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.199602][ T5397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.234127][ T5480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.235575][ T5480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.246557][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.248518][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.251781][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.254950][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.256904][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.453940][ T6894] futex_wake_op: syz.8.375 tries to shift op by 32; fix this program [ 73.768453][ T4723] Bluetooth: hci4: command tx timeout [ 73.813457][ T6897] loop8: detected capacity change from 0 to 128 [ 73.960785][ T6897] validate_nla: 42 callbacks suppressed [ 73.960811][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.960932][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.960949][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.960966][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.960981][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.961111][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.961187][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.961262][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.961337][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 73.961411][ T6897] netlink: 'syz.8.375': attribute type 3 has an invalid length. [ 74.482880][ T4723] Bluetooth: hci5: command tx timeout [ 74.576974][ T6871] lo speed is unknown, defaulting to 1000 [ 74.696404][ T6925] loop9: detected capacity change from 0 to 8 [ 74.702586][ T6925] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 74.704732][ T6925] unable to read xattr id index table [ 74.709387][ T6925] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.709418][ T6925] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.709439][ T6925] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.709452][ T6925] SQUASHFS error: Unable to read inode 0x127 [ 74.777802][ T5395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.846628][ T6940] lo speed is unknown, defaulting to 1000 [ 75.117265][ T4723] Bluetooth: hci2: connection err: -111 [ 75.141286][ T5395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.172338][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.174132][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.176500][ T6871] bridge_slave_0: entered allmulticast mode [ 75.180093][ T6871] bridge_slave_0: entered promiscuous mode [ 75.183742][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.185313][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.189890][ T6871] bridge_slave_1: entered allmulticast mode [ 75.192043][ T6871] bridge_slave_1: entered promiscuous mode [ 75.207100][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.217894][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.235804][ T6871] team0: Port device team_slave_0 added [ 75.238595][ T6871] team0: Port device team_slave_1 added [ 75.250332][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.252121][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.257471][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.260526][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.260534][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.260550][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.287159][ T6871] hsr_slave_0: entered promiscuous mode [ 75.288843][ T6871] hsr_slave_1: entered promiscuous mode [ 75.290615][ T6871] debugfs: 'hsr0' already exists in 'hsr' [ 75.292818][ T6871] Cannot create hsr debugfs directory [ 75.319261][ T5395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.512330][ T4723] Bluetooth: hci3: command tx timeout [ 75.608354][ T5395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.698902][ T6987] FAULT_INJECTION: forcing a failure. [ 75.698902][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.701681][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.8.389 Tainted: G L syzkaller #0 PREEMPT [ 75.701711][ T6987] Tainted: [L]=SOFTLOCKUP [ 75.701715][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 75.701721][ T6987] Call trace: [ 75.701724][ T6987] show_stack+0x2c/0x3c (C) [ 75.701746][ T6987] __dump_stack+0x30/0x40 [ 75.701757][ T6987] dump_stack_lvl+0xd8/0x12c [ 75.701767][ T6987] dump_stack+0x1c/0x28 [ 75.701776][ T6987] should_fail_ex+0x414/0x588 [ 75.701786][ T6987] should_fail+0x14/0x24 [ 75.701793][ T6987] should_fail_usercopy+0x20/0x30 [ 75.701802][ T6987] _inline_copy_from_user+0x40/0x180 [ 75.701811][ T6987] copy_msghdr_from_user+0xb8/0x194 [ 75.701818][ T6987] ___sys_sendmsg+0x14c/0x224 [ 75.701825][ T6987] __sys_sendmsg+0x160/0x214 [ 75.701832][ T6987] __arm64_sys_sendmsg+0x80/0x94 [ 75.701839][ T6987] invoke_syscall+0x98/0x244 [ 75.701849][ T6987] el0_svc_common+0xe8/0x23c [ 75.701859][ T6987] do_el0_svc+0x48/0x58 [ 75.701868][ T6987] el0_svc+0x64/0x260 [ 75.701876][ T6987] el0t_64_sync_handler+0x48/0x148 [ 75.701883][ T6987] el0t_64_sync+0x198/0x19c [ 75.771224][ T6994] loop4: detected capacity change from 0 to 256 [ 75.831639][ T7002] loop8: detected capacity change from 0 to 2048 [ 75.841586][ T7002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.857459][ T7002] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 75.858427][ T7002] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 1 with error 28 [ 75.858449][ T7002] EXT4-fs (loop8): This should not happen!! Data will be lost [ 75.858449][ T7002] [ 75.858457][ T7002] EXT4-fs (loop8): Total free blocks count 0 [ 75.858465][ T7002] EXT4-fs (loop8): Free/Dirty block details [ 75.858490][ T7002] EXT4-fs (loop8): free_blocks=4096 [ 75.858508][ T7002] EXT4-fs (loop8): dirty_blocks=16 [ 75.858516][ T7002] EXT4-fs (loop8): Block reservation details [ 75.858523][ T7002] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 75.859923][ T7002] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.892767][ T5395] bridge_slave_1: left allmulticast mode [ 75.892800][ T5395] bridge_slave_1: left promiscuous mode [ 75.892932][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.897478][ T5395] bridge_slave_0: left allmulticast mode [ 75.898555][ T5395] bridge_slave_0: left promiscuous mode [ 75.898646][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.905099][ T6562] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 75.930746][ T7010] loop8: detected capacity change from 0 to 128 [ 75.932682][ T7010] EXT4-fs (loop8): Test dummy encryption mode enabled [ 75.937761][ T7010] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.020851][ T4723] Bluetooth: hci4: command tx timeout [ 76.078969][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.177851][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.249863][ T5395] bond0 (unregistering): Released all slaves [ 76.421146][ T7037] hsr0: entered promiscuous mode [ 76.422821][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.399'. [ 76.423002][ T7037] hsr_slave_0: left promiscuous mode [ 76.425221][ T7037] hsr_slave_1: left promiscuous mode [ 76.435417][ T7037] hsr0 (unregistering): left promiscuous mode [ 76.622826][ T5395] hsr_slave_0: left promiscuous mode [ 76.624067][ T5395] hsr_slave_1: left promiscuous mode [ 76.624309][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.624319][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.625492][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.625503][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.634418][ T5395] veth1_macvtap: left promiscuous mode [ 76.634503][ T5395] veth0_macvtap: left promiscuous mode [ 76.634541][ T5395] veth1_vlan: left promiscuous mode [ 76.634569][ T5395] veth0_vlan: left promiscuous mode [ 76.714038][ T4723] Bluetooth: hci5: command tx timeout [ 76.759952][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 76.764258][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 76.894004][ T7093] netlink: 64 bytes leftover after parsing attributes in process `syz.5.405'. [ 76.903563][ T7095] loop9: detected capacity change from 0 to 512 [ 76.905751][ T7095] ext3: Bad value for 'commit' [ 76.968200][ T6562] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.980232][ T7102] loop9: detected capacity change from 0 to 128 [ 77.051763][ T7110] loop8: detected capacity change from 0 to 8192 [ 77.349482][ T7148] IPVS: set_ctl: invalid protocol: 0 172.20.20.55:20002 [ 77.531237][ T6871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.532531][ T7172] Injecting memory failure for pfn 0x13dce4 at process virtual address 0x20fff000 [ 77.541357][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.542317][ T6871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.554546][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.555127][ T6871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.561176][ T7172] Memory failure: 0x13dce4: Sending SIGBUS to syz.5.419:7172 due to hardware memory corruption [ 77.563124][ T7172] Memory failure: 0x13dce4: recovery action for dirty LRU page: Recovered [ 77.583240][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.587643][ T6871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.607067][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.653956][ T7190] binder: 7188:7190 ioctl 4018620d 0 returned -22 [ 77.661393][ T4394] 8021q: adding VLAN 0 to HW filter on device eth18 [ 77.710864][ T7110] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 77.710904][ T7110] FAT-fs (loop8): Filesystem has been set read-only [ 77.723348][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.735379][ T7208] binder: 7188:7208 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 77.735429][ T7208] binder: 7188:7208 ioctl c0306201 20000040 returned -22 [ 77.738585][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.750704][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.750753][ T5397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.754205][ T4723] Bluetooth: hci3: command tx timeout [ 77.781628][ T6871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.781667][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.793051][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.793109][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.910546][ T4394] 8021q: adding VLAN 0 to HW filter on device eth16 [ 77.913361][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.934458][ T6871] veth0_vlan: entered promiscuous mode [ 77.942022][ T6871] veth1_vlan: entered promiscuous mode [ 77.954233][ T7235] loop9: detected capacity change from 0 to 512 [ 77.965366][ T6871] veth0_macvtap: entered promiscuous mode [ 78.027307][ T7247] loop4: detected capacity change from 0 to 512 [ 78.031737][ T6871] veth1_macvtap: entered promiscuous mode [ 78.048605][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.067309][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.088472][ T5411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088534][ T5411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088571][ T5411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088595][ T5411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.261288][ T7273] Invalid ELF header type: 2 != 1 [ 78.273381][ T7273] x_tables: duplicate underflow at hook 1 [ 78.289178][ T7273] Invalid ELF header type: 3 != 1 [ 78.307517][ T5481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.307549][ T5481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.321440][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.322910][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.440116][ T4394] 8021q: adding VLAN 0 to HW filter on device eth17 [ 78.458702][ T7292] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.494895][ T7292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.634097][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.441'. [ 78.655113][ T7316] netlink: 92 bytes leftover after parsing attributes in process `syz.8.440'. [ 78.807847][ T7312] trusted_key: encrypted_key: insufficient parameters specified [ 78.818840][ T7313] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 78.818873][ T7313] FAT-fs (loop4): Filesystem has been set read-only [ 78.965669][ T4723] Bluetooth: hci5: command tx timeout [ 79.089255][ T7337] overlayfs: failed to resolve './bus': -2 [ 79.117310][ T7338] EXT4-fs: inline encryption not supported [ 79.121299][ T7338] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 79.124814][ T7338] EXT4-fs (loop8): Invalid default hash set in the superblock [ 79.131808][ T7336] overlayfs: failed to clone upperpath [ 79.401522][ T7362] set_capacity_and_notify: 4 callbacks suppressed [ 79.401559][ T7362] loop4: detected capacity change from 0 to 256 [ 79.408575][ T7362] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.426289][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.436662][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.515678][ T7375] loop2: detected capacity change from 0 to 512 [ 79.526758][ T4707] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 79.526808][ T4707] FAT-fs (loop4): Filesystem has been set read-only [ 79.527930][ T4707] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 79.591127][ T7375] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.591210][ T7375] EXT4-fs: Ignoring removed bh option [ 79.596191][ T7370] loop9: detected capacity change from 0 to 8192 [ 79.601277][ T7375] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.605583][ T7375] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.453: Directory hole found for htree leaf block 0 [ 79.608866][ T7375] EXT4-fs (loop2): Remounting filesystem read-only [ 79.681997][ T6871] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 79.713575][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'. [ 79.719089][ T7389] gretap0: entered promiscuous mode [ 79.719786][ T7389] macvlan2: entered allmulticast mode [ 79.719798][ T7389] gretap0: entered allmulticast mode [ 79.784991][ T7368] bridge0: port 3(syz_tun) entered disabled state [ 79.835282][ T7368] syz_tun (unregistering): left allmulticast mode [ 79.835324][ T7368] syz_tun (unregistering): left promiscuous mode [ 79.835354][ T7368] bridge0: port 3(syz_tun) entered disabled state [ 79.876986][ T7406] loop2: detected capacity change from 0 to 512 [ 79.890339][ T7406] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.907303][ T7406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 79.907374][ T7406] System zones: 1-12 [ 79.907496][ T7406] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.907936][ T7406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.462: invalid indirect mapped block 12 (level 1) [ 79.907949][ T7406] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.908813][ T7406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.462: invalid indirect mapped block 2 (level 2) [ 79.908835][ T7406] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.909242][ T7406] EXT4-fs (loop2): 1 truncate cleaned up [ 79.909695][ T7406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 79.977588][ T7392] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 79.977623][ T7392] FAT-fs (loop9): Filesystem has been set read-only [ 80.008490][ T4723] Bluetooth: hci3: command tx timeout [ 80.044596][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 80.209344][ T7438] loop9: detected capacity change from 0 to 512 [ 80.212713][ T7438] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 80.218875][ T7438] EXT4-fs (loop9): orphan file too big: 8388608 [ 80.219113][ T7438] EXT4-fs (loop9): mount failed [ 80.256808][ T7441] fuse: Unknown parameter '000000000000000000000050x0000000000000003' [ 80.257276][ T7441] overlayfs: failed to clone lowerpath [ 80.289274][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.292923][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.301998][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.305995][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.307725][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.344280][ T7455] loop9: detected capacity change from 0 to 512 [ 80.360354][ T7455] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 80.360395][ T7455] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 80.367054][ T7455] EXT4-fs error (device loop9): __ext4_get_inode_loc:4885: comm syz.9.471: Invalid inode table block 1 in block_group 0 [ 80.367167][ T7455] loop9: lost filesystem error report for type 5 error -117 [ 80.367570][ T7455] EXT4-fs (loop9): Remounting filesystem read-only [ 80.367632][ T7455] EXT4-fs (loop9): get root inode failed [ 80.367640][ T7455] EXT4-fs (loop9): mount failed [ 80.428876][ T7464] loop2: detected capacity change from 0 to 512 [ 80.443757][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.490664][ T7475] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.472: bg 0: block 217: padding at end of block bitmap is not set [ 80.504926][ T7475] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 80.520290][ T7447] lo speed is unknown, defaulting to 1000 [ 80.605466][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.840643][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.841052][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.841208][ T7447] bridge_slave_0: entered allmulticast mode [ 80.841707][ T7447] bridge_slave_0: entered promiscuous mode [ 80.844842][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 80.847330][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.847936][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.848066][ T7447] bridge_slave_1: entered allmulticast mode [ 80.849904][ T7447] bridge_slave_1: entered promiscuous mode [ 80.874291][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.876874][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.895439][ T7526] loop2: detected capacity change from 0 to 512 [ 80.911331][ T7526] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.922469][ T7526] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.929118][ T7526] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.933359][ T7447] team0: Port device team_slave_0 added [ 80.939234][ T7447] team0: Port device team_slave_1 added [ 80.962123][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.962149][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.962501][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.964239][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.964549][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.965527][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.995664][ T7447] hsr_slave_0: entered promiscuous mode [ 80.996090][ T7447] hsr_slave_1: entered promiscuous mode [ 80.996655][ T7447] debugfs: 'hsr0' already exists in 'hsr' [ 80.996669][ T7447] Cannot create hsr debugfs directory [ 81.209920][ T7534] futex_wake_op: syz.5.485 tries to shift op by 32; fix this program [ 81.622189][ T7536] validate_nla: 47 callbacks suppressed [ 81.622237][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622287][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622312][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622428][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622451][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622474][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622501][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622521][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622540][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 81.622557][ T7536] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 82.264965][ T7533] Set syz1 is full, maxelem 65536 reached [ 82.296159][ T7542] futex_wake_op: syz.8.486 tries to shift op by 32; fix this program [ 83.048326][ T7544] loop8: detected capacity change from 0 to 128 [ 83.153043][ T4718] Bluetooth: hci3: command tx timeout [ 83.153104][ T4718] Bluetooth: hci1: command tx timeout [ 83.703339][ T6871] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 83.760763][ T7548] loop9: detected capacity change from 0 to 2048 [ 83.774937][ T7548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.872931][ T7548] fs-verity (loop9, inode 13): Error -28 writing Merkle tree block 1 [ 83.874806][ T7548] fs-verity (loop9, inode 13): Error -28 building Merkle tree [ 83.901249][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.967585][ T7565] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 83.969351][ T7565] EXT4-fs (loop9): invalid journal inode [ 83.969391][ T7565] EXT4-fs (loop9): can't get journal size [ 83.972677][ T7561] lo speed is unknown, defaulting to 1000 [ 83.977864][ T7565] EXT4-fs (loop9): 1 truncate cleaned up [ 83.978535][ T7565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.204294][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.290418][ T7582] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 84.349207][ T7572] Injecting memory failure for pfn 0x1209c3 at process virtual address 0x20001000 [ 84.359706][ T7572] Memory failure: 0x1209c3: recovery action for clean LRU page: Recovered [ 84.359803][ T7572] Injecting memory failure for pfn 0x13dbfa at process virtual address 0x20002000 [ 84.361479][ T7572] Memory failure: 0x13dbfa: recovery action for clean LRU page: Recovered [ 84.361557][ T7572] Injecting memory failure for pfn 0x1207ce at process virtual address 0x20003000 [ 84.361644][ T7572] Memory failure: 0x1207ce: recovery action for clean LRU page: Recovered [ 84.856191][ T7579] bridge1: entered promiscuous mode [ 84.906127][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.498'. [ 84.906183][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.498'. [ 84.929084][ T5411] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.929164][ T5411] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.929200][ T5411] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.929221][ T5411] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.956659][ T5470] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.956703][ T5470] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.001169][ T7447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.012682][ T7447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.013067][ T7447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.017047][ T7447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.269024][ T7447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.275685][ T7447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.279737][ T7447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.286457][ T7447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.410800][ T4723] Bluetooth: hci1: command tx timeout [ 85.436064][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.442725][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.446123][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.446167][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.453313][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.453360][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.532219][ T7652] netlink: 44 bytes leftover after parsing attributes in process `syz.8.505'. [ 85.622610][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.504'. [ 86.712734][ T7675] overlayfs: failed to resolve './bus': -2 [ 87.057825][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.110843][ T7447] veth0_vlan: entered promiscuous mode [ 87.112971][ T7447] veth1_vlan: entered promiscuous mode [ 87.118186][ T7447] veth0_macvtap: entered promiscuous mode [ 87.140477][ T7447] veth1_macvtap: entered promiscuous mode [ 87.146758][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.147764][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.158931][ T5397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.158989][ T5397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.159011][ T5397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.159028][ T5397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.161943][ T7673] set_capacity_and_notify: 3 callbacks suppressed [ 87.161952][ T7673] loop2: detected capacity change from 0 to 8192 [ 87.221687][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.5.514'. [ 87.222708][ T7704] netlink: 44 bytes leftover after parsing attributes in process `syz.5.514'. [ 87.255208][ T7707] binder: 7705:7707 tried to acquire reference to desc 0, got 1 instead [ 87.257071][ T7707] binder: 7705:7707 got transaction with invalid offsets ptr [ 87.257132][ T7707] binder: 7705:7707 transaction call to 7705:0 failed 14/29201/-22, code 0 size 120-24 line 3738 [ 87.331583][ T5397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.331612][ T5397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.370686][ T5480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.370717][ T5480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.516507][ T7732] loop1: detected capacity change from 0 to 8192 [ 87.634353][ T4723] Bluetooth: hci1: command tx timeout [ 87.873696][ T7744] loop8: detected capacity change from 0 to 4096 [ 87.878284][ T7744] ext4: Unknown parameter 'hash' [ 87.918003][ T7744] loop8: detected capacity change from 0 to 512 [ 87.936229][ T7744] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.518: inode has both inline data and extents flags [ 87.936273][ T7744] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.936776][ T7744] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.518: couldn't read orphan inode 15 (err -117) [ 87.936795][ T7744] loop8: lost filesystem error report for type 5 error -117 [ 87.938631][ T7732] FAULT_INJECTION: forcing a failure. [ 87.938631][ T7732] name failslab, interval 1, probability 0, space 0, times 1 [ 87.938650][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT [ 87.938661][ T7732] Tainted: [L]=SOFTLOCKUP [ 87.938664][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.938669][ T7732] Call trace: [ 87.938671][ T7732] show_stack+0x2c/0x3c (C) [ 87.938693][ T7732] __dump_stack+0x30/0x40 [ 87.938703][ T7732] dump_stack_lvl+0xd8/0x12c [ 87.938713][ T7732] dump_stack+0x1c/0x28 [ 87.938722][ T7732] should_fail_ex+0x414/0x588 [ 87.938732][ T7732] should_failslab+0xc4/0x124 [ 87.938741][ T7732] kmem_cache_alloc_noprof+0x8c/0x610 [ 87.938750][ T7732] do_getname+0x48/0x230 [ 87.938757][ T7732] getname_flags+0x2c/0x3c [ 87.938764][ T7732] do_sys_openat2+0xd0/0x1e8 [ 87.938774][ T7732] do_sys_open+0xac/0xdc [ 87.938782][ T7732] __arm64_sys_openat+0x9c/0xb8 [ 87.938792][ T7732] invoke_syscall+0x98/0x244 [ 87.938802][ T7732] el0_svc_common+0xe8/0x23c [ 87.938811][ T7732] do_el0_svc+0x48/0x58 [ 87.938821][ T7732] el0_svc+0x64/0x260 [ 87.938829][ T7732] el0t_64_sync_handler+0x48/0x148 [ 87.938836][ T7732] el0t_64_sync+0x198/0x19c [ 87.939164][ T7744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.019701][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.098784][ T7747] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.098823][ T7747] FAT-fs (loop1): Filesystem has been set read-only [ 88.111161][ T7767] loop8: detected capacity change from 0 to 128 [ 88.185599][ T6793] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.201149][ T7767] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.212296][ T7767] overlayfs: missing 'workdir' [ 88.534473][ T6562] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.572914][ T7785] loop1: detected capacity change from 0 to 512 [ 88.590309][ T7785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.624240][ T7447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.671693][ T7804] autofs: Bad value for 'fd' [ 88.784662][ T7820] loop8: detected capacity change from 0 to 256 [ 88.788505][ T7820] vfat: Unknown parameter '00000000000000000000' [ 88.797986][ T7821] loop1: detected capacity change from 0 to 512 [ 88.799617][ T7821] journal_path: Non-blockdev passed as 'éq‰Y’3aK' [ 88.799633][ T7821] EXT4-fs: error: could not find journal device path [ 88.808371][ T7824] validate_nla: 93 callbacks suppressed [ 88.810813][ T7824] netlink: 'syz.5.531': attribute type 12 has an invalid length. [ 88.810859][ T7824] netlink: 'syz.5.531': attribute type 29 has an invalid length. [ 88.811153][ T7824] netlink: 148 bytes leftover after parsing attributes in process `syz.5.531'. [ 88.825152][ T7825] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.328623][ T7848] loop9: detected capacity change from 0 to 512 [ 89.344565][ T7848] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 89.344603][ T7848] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 89.366260][ T7848] EXT4-fs error (device loop9): __ext4_get_inode_loc:4885: comm syz.9.535: Invalid inode table block 1 in block_group 0 [ 89.366298][ T7848] loop9: lost filesystem error report for type 5 error -117 [ 89.370826][ T7848] EXT4-fs (loop9): get root inode failed [ 89.370861][ T7848] EXT4-fs (loop9): mount failed [ 89.414825][ T7848] loop9: detected capacity change from 0 to 512 [ 89.419224][ T7848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.881402][ T4718] Bluetooth: hci1: command tx timeout [ 90.084344][ T7874] EXT4-fs: Ignoring removed bh option [ 90.104988][ T7874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.624648][ T4718] Bluetooth: hci5: command 0x0406 tx timeout [ 90.695650][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.873683][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.542'. [ 90.873731][ T7902] netlink: 'syz.8.542': attribute type 5 has an invalid length. [ 90.873740][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.8.542'. [ 90.879549][ T7902] geneve2: entered promiscuous mode [ 90.879582][ T7902] geneve2: entered allmulticast mode [ 90.884023][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.984481][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 91.015470][ T7916] evm: overlay not supported [ 91.027517][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.076950][ T4723] Bluetooth: unknown link type 128 [ 91.080007][ T7916] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 91.170405][ T7926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.170490][ T7926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.176276][ T7926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.178586][ T7926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.178778][ T7926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.184358][ T7926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.187651][ T7926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.187706][ T7926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.190239][ T7926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.203014][ T7926] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 91.203053][ T7926] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 91.207763][ T7926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.207813][ T7926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.210558][ T7926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.213070][ T7926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.213121][ T7926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.220383][ T7926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.405449][ T7949] FAULT_INJECTION: forcing a failure. [ 91.405449][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 91.405489][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.2.550 Tainted: G L syzkaller #0 PREEMPT [ 91.405509][ T7949] Tainted: [L]=SOFTLOCKUP [ 91.405513][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.405520][ T7949] Call trace: [ 91.405524][ T7949] show_stack+0x2c/0x3c (C) [ 91.405543][ T7949] __dump_stack+0x30/0x40 [ 91.405553][ T7949] dump_stack_lvl+0xd8/0x12c [ 91.405563][ T7949] dump_stack+0x1c/0x28 [ 91.405572][ T7949] should_fail_ex+0x414/0x588 [ 91.405581][ T7949] should_failslab+0xc4/0x124 [ 91.405590][ T7949] kmem_cache_alloc_noprof+0x8c/0x610 [ 91.405599][ T7949] alloc_empty_file+0x6c/0x1cc [ 91.405607][ T7949] path_openat+0xd4/0x2a6c [ 91.405614][ T7949] do_file_open+0x1c4/0x2e4 [ 91.405622][ T7949] do_sys_openat2+0x114/0x1e8 [ 91.405631][ T7949] do_sys_open+0xac/0xdc [ 91.405640][ T7949] __arm64_sys_openat+0x9c/0xb8 [ 91.405649][ T7949] invoke_syscall+0x98/0x244 [ 91.405659][ T7949] el0_svc_common+0xe8/0x23c [ 91.405669][ T7949] do_el0_svc+0x48/0x58 [ 91.405678][ T7949] el0_svc+0x64/0x260 [ 91.405687][ T7949] el0t_64_sync_handler+0x48/0x148 [ 91.405694][ T7949] el0t_64_sync+0x198/0x19c [ 91.706436][ T7946] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 91.708084][ T7946] FAT-fs (loop2): Filesystem has been set read-only [ 92.470939][ T7982] netlink: 'syz.9.557': attribute type 1 has an invalid length. [ 92.470971][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.557'. [ 92.742372][ T7995] set_capacity_and_notify: 3 callbacks suppressed [ 92.742409][ T7995] loop9: detected capacity change from 0 to 512 [ 92.804635][ T8000] loop2: detected capacity change from 0 to 8192 [ 92.847867][ T8002] fuse: Bad value for 'fd' [ 92.892755][ T8006] FAULT_INJECTION: forcing a failure. [ 92.892755][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 92.892801][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.2.562 Tainted: G L syzkaller #0 PREEMPT [ 92.892816][ T8006] Tainted: [L]=SOFTLOCKUP [ 92.892819][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.892824][ T8006] Call trace: [ 92.892827][ T8006] show_stack+0x2c/0x3c (C) [ 92.892845][ T8006] __dump_stack+0x30/0x40 [ 92.892855][ T8006] dump_stack_lvl+0xd8/0x12c [ 92.892865][ T8006] dump_stack+0x1c/0x28 [ 92.892874][ T8006] should_fail_ex+0x414/0x588 [ 92.892884][ T8006] should_failslab+0xc4/0x124 [ 92.892892][ T8006] kmem_cache_alloc_noprof+0x8c/0x610 [ 92.892901][ T8006] security_file_alloc+0x38/0x2f8 [ 92.892911][ T8006] init_file+0x90/0x274 [ 92.892919][ T8006] alloc_empty_file+0x80/0x1cc [ 92.892925][ T8006] path_openat+0xd4/0x2a6c [ 92.892933][ T8006] do_file_open+0x1c4/0x2e4 [ 92.892941][ T8006] do_sys_openat2+0x114/0x1e8 [ 92.892950][ T8006] do_sys_open+0xac/0xdc [ 92.892959][ T8006] __arm64_sys_openat+0x9c/0xb8 [ 92.892968][ T8006] invoke_syscall+0x98/0x244 [ 92.892978][ T8006] el0_svc_common+0xe8/0x23c [ 92.892987][ T8006] do_el0_svc+0x48/0x58 [ 92.892997][ T8006] el0_svc+0x64/0x260 [ 92.893005][ T8006] el0t_64_sync_handler+0x48/0x148 [ 92.893012][ T8006] el0t_64_sync+0x198/0x19c [ 93.001978][ T8008] 9pnet_fd: p9_fd_create_tcp (8008): problem connecting socket to 127.0.0.1 [ 93.016223][ T8013] loop1: detected capacity change from 0 to 128 [ 93.060450][ T8013] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.091875][ T8013] fscrypt (loop1, inode 12): Unsupported log2_data_unit_size in encryption policy: 38 [ 93.095472][ T26] kernel read not supported for file / (pid: 26 comm: kworker/1:1) [ 93.130066][ T7447] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.201329][ T8026] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.201376][ T8026] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.225307][ T8029] loop9: detected capacity change from 0 to 8 [ 93.233994][ T8000] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 93.234028][ T8000] FAT-fs (loop2): Filesystem has been set read-only [ 93.258701][ T8029] SQUASHFS error: Unable to read directory block [6aa:8] [ 93.348223][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.349427][ T4723] Bluetooth: hci0: command 0x0419 tx timeout [ 93.434589][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.434642][ T4723] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.434680][ T4723] Bluetooth: hci5: command 0x0406 tx timeout [ 93.434703][ T4723] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.444443][ T8039] process 'syz.2.570' launched '/dev/fd/11' with NULL argv: empty string added [ 93.454736][ T8045] binder: 8036:8045 ioctl 4018620d 20000240 returned -22 [ 93.468214][ T8037] binder: 8036:8037 ioctl c0306201 200004c0 returned -14 [ 93.468773][ T8037] binder: 8036:8037 ioctl c0306201 200001c0 returned -14 [ 93.469040][ T8037] binder: 8036:8037 ioctl c0306201 20000180 returned -14 [ 93.479045][ T8037] binder: 8036:8037 ioctl c0306201 20004a40 returned -14 [ 93.703364][ T8067] loop9: detected capacity change from 0 to 128 [ 93.703767][ T8067] vfat: Unknown parameter 'ÿ' [ 93.786533][ T8072] loop9: detected capacity change from 0 to 4096 [ 93.788260][ T8072] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.794689][ T8072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.809007][ T8070] loop1: detected capacity change from 0 to 512 [ 93.825962][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.876084][ T8083] loop8: detected capacity change from 0 to 512 [ 93.896523][ T8083] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.576: bad orphan inode 15 [ 93.896568][ T8083] loop8: lost filesystem error report for type 5 error -117 [ 93.898530][ T8083] ext4_test_bit(bit=14, block=18) = 1 [ 93.898575][ T8083] is_bad_inode(inode)=0 [ 93.898589][ T8083] NEXT_ORPHAN(inode)=1023 [ 93.898601][ T8083] max_ino=32 [ 93.898605][ T8083] i_nlink=0 [ 93.907944][ T8083] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.576: corrupted xattr block 19: invalid header [ 93.908004][ T8083] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.910309][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 93.910325][ C0] EXT4-fs (loop8): initial error at time 90: ext4_orphan_get:1423 [ 93.910337][ C0] EXT4-fs (loop8): last error at time 90: ext4_xattr_delete_inode:2972: inode 15 [ 93.917825][ T8083] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 93.918392][ T8083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 94.301787][ T8039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.500652][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.562074][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.677593][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.577'. [ 94.681973][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 94.808676][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.817158][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 94.870987][ T8136] veth1_macvtap: left promiscuous mode [ 94.873183][ T8136] macsec0: entered promiscuous mode [ 94.884426][ T8136] veth1_macvtap: entered promiscuous mode [ 94.886742][ T8136] macsec0: left promiscuous mode [ 94.996772][ T8141] IPv4: Oversized IP packet from 127.202.26.0 [ 95.237820][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.580'. [ 95.624030][ T4723] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.625269][ T4718] Bluetooth: hci0: command 0x0419 tx timeout [ 95.686903][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.686949][ T4718] Bluetooth: hci5: command 0x0406 tx timeout [ 95.686982][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.687009][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.816848][ T8183] loop8: detected capacity change from 0 to 4096 [ 95.818440][ T8183] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.874723][ T8183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.070245][ T30] audit: type=1326 audit(92.021:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 96.070297][ T30] audit: type=1326 audit(92.021:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 96.074377][ T30] audit: type=1326 audit(92.021:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa0b79a98 code=0x7ffc0000 [ 96.074421][ T30] audit: type=1326 audit(92.021:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa0b5a96c code=0x7ffc0000 [ 96.074441][ T30] audit: type=1326 audit(92.021:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa0b5a96c code=0x7ffc0000 [ 96.074459][ T30] audit: type=1326 audit(92.021:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa0b5a96c code=0x7ffc0000 [ 96.074474][ T30] audit: type=1326 audit(92.021:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa0b5a96c code=0x7ffc0000 [ 96.074494][ T30] audit: type=1326 audit(92.021:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 96.074512][ T30] audit: type=1326 audit(92.021:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=75 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 96.074527][ T30] audit: type=1326 audit(92.021:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 96.196894][ T8212] loop2: detected capacity change from 0 to 8192 [ 96.222279][ T8219] 9p: Bad value for 'rfdno' [ 96.394933][ T8234] syzkaller0: entered promiscuous mode [ 96.394972][ T8234] syzkaller0: entered allmulticast mode [ 96.457820][ T8212] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 96.462882][ T8212] FAT-fs (loop2): Filesystem has been set read-only [ 96.465592][ T8212] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 96.637923][ T8245] netlink: 48 bytes leftover after parsing attributes in process `syz.5.600'. [ 97.158401][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.176055][ T6871] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 97.235615][ T8270] EXT4-fs: Ignoring removed oldalloc option [ 97.235643][ T8270] EXT4-fs: Ignoring removed orlov option [ 97.235667][ T8270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.262090][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.271472][ T8270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.605'. [ 97.285931][ T8270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.605'. [ 97.367368][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.508917][ T8293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 97.544815][ T8288] input: syz1 as /devices/virtual/input/input6 [ 97.659635][ T8297] x_tables: ip_tables: osf match: only valid for protocol 6 [ 97.691051][ T8283] netlink: 52 bytes leftover after parsing attributes in process `syz.8.607'. [ 97.746605][ T8302] binder: 8301:8302 got transaction to invalid handle, 1 [ 97.747947][ T8302] binder: 8301:8302 cannot find target node [ 97.750437][ T8302] binder: 8301:8302 transaction call to 0:0 failed 17/29201/-22, code 0 size 0-0 line 3236 [ 97.772240][ T8302] EXT4-fs: Ignoring removed nobh option [ 97.781423][ T8302] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.803009][ T8302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 97.803149][ T8302] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.807160][ T8302] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.613: attempt to clear invalid blocks 1024 len 1 [ 97.807200][ T8302] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.809650][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 97.809665][ C1] EXT4-fs (loop2): initial error at time 93: ext4_clear_blocks:876: inode 11 [ 97.809684][ C1] EXT4-fs (loop2): last error at time 93: ext4_clear_blocks:876: inode 11 [ 97.814375][ T8302] EXT4-fs (loop2): Remounting filesystem read-only [ 97.818366][ T8302] EXT4-fs (loop2): 1 truncate cleaned up [ 97.826894][ T8302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.853071][ T4723] Bluetooth: hci0: command 0x0419 tx timeout [ 97.853113][ T4723] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.878818][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 97.947803][ T8308] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.950622][ T4718] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.951461][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.951485][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.963829][ T8308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.172889][ T8314] set_capacity_and_notify: 4 callbacks suppressed [ 98.174411][ T8314] loop2: detected capacity change from 0 to 8192 [ 98.265116][ T8319] loop8: detected capacity change from 0 to 128 [ 98.286140][ T8319] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.350356][ T6562] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.643316][ T8335] tipc: Started in network mode [ 98.643353][ T8335] tipc: Node identity 2007ff, cluster identity 4711 [ 98.643364][ T8335] tipc: Node number set to 2099199 [ 99.230357][ T4885] IPVS: starting estimator thread 0... [ 99.271887][ T8355] loop8: detected capacity change from 0 to 2048 [ 99.285693][ T8355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.326115][ T8353] IPVS: using max 63 ests per chain, 151200 per kthread [ 99.525310][ T8359] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 99.525346][ T8359] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 99.525376][ T8359] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 99.693932][ T8361] loop2: detected capacity change from 0 to 8192 [ 99.822533][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.879650][ T8375] mmap: syz.5.632 (8375) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.901859][ T8379] loop9: detected capacity change from 0 to 512 [ 99.904937][ T8379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.920627][ T8379] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.631: invalid indirect mapped block 256 (level 2) [ 99.920667][ T8379] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.923727][ T8379] EXT4-fs (loop9): 2 truncates cleaned up [ 99.924209][ T8379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.951522][ T5470] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:36: bg 0: block 5: invalid block bitmap [ 99.954111][ T5470] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 99.954164][ T5470] EXT4-fs (loop9): This should not happen!! Data will be lost [ 99.954164][ T5470] [ 99.954179][ T5470] EXT4-fs (loop9): Total free blocks count 0 [ 99.954192][ T5470] EXT4-fs (loop9): Free/Dirty block details [ 99.957479][ T5470] EXT4-fs (loop9): free_blocks=0 [ 99.957516][ T5470] EXT4-fs (loop9): dirty_blocks=2 [ 99.957525][ T5470] EXT4-fs (loop9): Block reservation details [ 99.957531][ T5470] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 99.958436][ T6756] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 99.959228][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.229619][ T3878] IPVS: starting estimator thread 0... [ 101.262994][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.320837][ T8399] IPVS: using max 63 ests per chain, 151200 per kthread [ 101.409514][ T8422] loop8: detected capacity change from 0 to 512 [ 101.420722][ T8422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.446566][ T8422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.472641][ T8429] loop9: detected capacity change from 0 to 7 [ 101.486734][ T8429] Dev loop9: unable to read RDB block 7 [ 101.486774][ T8429] loop9: AHDI p2 p3 [ 101.486798][ T8429] loop9: partition table partially beyond EOD, truncated [ 101.486924][ T8429] loop9: p2 size 150995456 extends beyond EOD, truncated [ 101.503908][ T8431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'. [ 101.505726][ T8431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'. [ 101.537582][ T8439] loop9: detected capacity change from 0 to 512 [ 101.539187][ T8439] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.543156][ T8439] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 101.587512][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 101.595231][ T8439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 101.595349][ T8439] EXT4-fs (loop9): orphan cleanup on readonly fs [ 101.595674][ T8439] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.651: bg 0: block 361: padding at end of block bitmap is not set [ 101.595692][ T8439] loop9: lost filesystem error report for type 5 error -117 [ 101.596645][ T8439] EXT4-fs (loop9): Remounting filesystem read-only [ 101.596896][ T8439] EXT4-fs (loop9): 1 truncate cleaned up [ 101.597760][ T8439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 102.417478][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.547858][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.599598][ T8453] loop2: detected capacity change from 0 to 512 [ 102.607935][ T8456] loop9: detected capacity change from 0 to 512 [ 102.633506][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.655'. [ 102.639469][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.653533][ T8456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.673974][ T8456] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.654: iget: bad i_size value: 2533274857506816 [ 102.676567][ T8456] EXT4-fs (loop9): Remounting filesystem read-only [ 102.720003][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.735831][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 102.758941][ T8473] FAT-fs (loop9): Directory bread(block 64) failed [ 102.758984][ T8473] FAT-fs (loop9): Directory bread(block 65) failed [ 102.759013][ T8473] FAT-fs (loop9): Directory bread(block 66) failed [ 102.759024][ T8473] FAT-fs (loop9): Directory bread(block 67) failed [ 102.759045][ T8473] FAT-fs (loop9): Directory bread(block 68) failed [ 102.759055][ T8473] FAT-fs (loop9): Directory bread(block 69) failed [ 102.759075][ T8473] FAT-fs (loop9): Directory bread(block 70) failed [ 102.759085][ T8473] FAT-fs (loop9): Directory bread(block 71) failed [ 102.759105][ T8473] FAT-fs (loop9): Directory bread(block 72) failed [ 102.759115][ T8473] FAT-fs (loop9): Directory bread(block 73) failed [ 102.786276][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.885839][ T8486] netlink: 48 bytes leftover after parsing attributes in process `syz.9.661'. [ 102.951283][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 102.960263][ T4723] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 102.964039][ T8495] lo speed is unknown, defaulting to 1000 [ 103.050067][ T8502] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.073081][ T8502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.105836][ T5480] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.105886][ T5480] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.105907][ T5480] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.105922][ T5480] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.001327][ T8534] set_capacity_and_notify: 2 callbacks suppressed [ 104.001367][ T8534] loop8: detected capacity change from 0 to 8192 [ 104.038606][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.108889][ T8545] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 104.108921][ T8545] netlink: 'syz.2.677': attribute type 4 has an invalid length. [ 104.108944][ T8545] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.677'. [ 104.181023][ T8551] loop9: detected capacity change from 0 to 1024 [ 104.223959][ T8551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.271088][ T8550] vhci_hcd vhci_hcd.0: invalid port number 186 [ 104.540959][ T8551] netlink: 'syz.9.678': attribute type 1 has an invalid length. [ 104.541002][ T8551] netlink: 1 bytes leftover after parsing attributes in process `syz.9.678'. [ 104.733718][ T8566] PKCS7: Unknown OID: [4] 0.0 [ 104.733749][ T8566] PKCS7: Only support pkcs7_signedData type [ 104.795256][ T8573] netlink: 144 bytes leftover after parsing attributes in process `syz.8.685'. [ 104.987579][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.8.686'. [ 105.848669][ T8583] loop2: detected capacity change from 0 to 4096 [ 105.851807][ T8583] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.865008][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.887467][ T8583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.192468][ T8595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.239464][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.300650][ T8612] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 106.478117][ T8611] loop8: detected capacity change from 0 to 1024 [ 106.485446][ T8611] EXT4-fs (loop8): inodes count not valid: 150994976 vs 32 [ 107.298326][ T4723] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 107.298463][ T4723] Bluetooth: hci1: Injecting HCI hardware error event [ 107.300170][ T4723] Bluetooth: hci1: hardware error 0x00 [ 107.471236][ T8634] loop8: detected capacity change from 0 to 512 [ 107.503449][ T8634] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.701: inode has both inline data and extents flags [ 107.503492][ T8634] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.505121][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.506102][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 107.506116][ C0] EXT4-fs (loop8): initial error at time 102: ext4_orphan_get:1397: inode 15 [ 107.506132][ C0] EXT4-fs (loop8): last error at time 102: ext4_orphan_get:1397: inode 15 [ 107.506334][ T8634] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.701: couldn't read orphan inode 15 (err -117) [ 107.506350][ T8634] loop8: lost filesystem error report for type 5 error -117 [ 107.507278][ T8634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.507998][ T8634] netlink: 'syz.8.701': attribute type 12 has an invalid length. [ 107.508008][ T8634] netlink: 'syz.8.701': attribute type 29 has an invalid length. [ 107.508018][ T8634] netlink: 148 bytes leftover after parsing attributes in process `syz.8.701'. [ 107.527753][ T8634] EXT4-fs error (device loop8): ext4_check_dx_root:2201: inode #2: comm syz.8.701: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 107.566333][ T8640] overlayfs: failed to resolve './file0': -2 [ 107.574822][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.617436][ T8646] Unsupported ieee802154 address type: 0 [ 107.643711][ T8651] loop9: detected capacity change from 0 to 128 [ 107.650954][ T8651] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.693562][ T4718] Bluetooth: hci2: Malformed LE Event: 0x0d [ 107.709926][ T6756] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.715510][ T8655] futex_wake_op: syz.2.703 tries to shift op by 32; fix this program [ 107.874295][ T8663] loop2: detected capacity change from 0 to 128 [ 108.575641][ T8660] loop8: detected capacity change from 0 to 8192 [ 108.624328][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.710'. [ 108.682575][ T8660] Dev loop8: unable to read RDB block 8 [ 108.682648][ T8660] loop8: unable to read partition table [ 108.682751][ T8660] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 108.745327][ T8671] loop9: detected capacity change from 0 to 4096 [ 108.746935][ T8671] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.767652][ T8671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.783213][ T8677] binder: tried to use weak ref as strong ref [ 108.783250][ T8677] binder: 8676:8677 Acquire 1 refcount change on invalid ref 0 ret -22 [ 108.783450][ T8677] binder: 8676:8677 got transaction to invalid handle, 1 [ 108.783513][ T8677] binder: 8676:8677 cannot find target node [ 108.783529][ T8677] binder: 8676:8677 transaction call to 0:0 failed 20/29201/-22, code 0 size 72-4 line 3236 [ 108.785008][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.917312][ T8701] loop8: detected capacity change from 0 to 512 [ 108.917766][ T8701] ext2: Unknown parameter 'subj_type' [ 109.551284][ T4723] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.699902][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.723317][ T8733] syzkaller0: entered promiscuous mode [ 109.723364][ T8733] syzkaller0: entered allmulticast mode [ 110.069412][ T8746] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 110.078133][ T8737] tipc: Started in network mode [ 110.078165][ T8737] tipc: Node identity ac14140f, cluster identity 4711 [ 110.078312][ T8737] tipc: New replicast peer: 255.255.255.255 [ 110.078563][ T8737] tipc: Enabled bearer , priority 10 [ 110.099475][ T4885] IPVS: starting estimator thread 0... [ 110.113489][ T8746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.153184][ T8752] xt_TCPMSS: Only works on TCP SYN packets [ 110.171522][ T8746] bond1: (slave ip6gretap1): making interface the new active one [ 110.176461][ T8746] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.211975][ T8745] IPVS: using max 63 ests per chain, 151200 per kthread [ 110.231339][ T8771] loop9: detected capacity change from 0 to 128 [ 110.259633][ T8746] loop2: detected capacity change from 0 to 8192 [ 110.285786][ T8766] loop8: detected capacity change from 0 to 8192 [ 110.364791][ T8780] loop9: detected capacity change from 0 to 128 [ 110.422163][ T8780] loop9: detected capacity change from 0 to 8 [ 110.433382][ T8780] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 110.433416][ T8780] unable to read xattr id index table [ 110.444805][ T8780] unable to read fragment index table [ 110.483421][ T8787] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 110.483447][ T8787] FAT-fs (loop8): Filesystem has been set read-only [ 110.484343][ T8766] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 110.484538][ T8766] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 110.484580][ T8766] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 110.624771][ T8804] netlink: 256 bytes leftover after parsing attributes in process `syz.1.739'. [ 110.631091][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 110.889865][ T6562] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 110.987727][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'. [ 110.987772][ T8817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.742'. [ 111.285362][ T26] tipc: Node number set to 2886997007 [ 111.293611][ T8822] netlink: 'syz.8.741': attribute type 1 has an invalid length. [ 111.300757][ T8822] netlink: 'syz.8.741': attribute type 2 has an invalid length. [ 111.352629][ T8826] loop8: detected capacity change from 0 to 8192 [ 111.456768][ T8840] syzkaller0: entered promiscuous mode [ 111.456801][ T8840] syzkaller0: entered allmulticast mode [ 111.470361][ T8840] tc action pedit offset 4096 out of bounds [ 111.470394][ T8840] tc action pedit offset 4096 out of bounds [ 111.470417][ T8840] tc action pedit offset 4096 out of bounds [ 111.470429][ T8840] tc action pedit offset 4096 out of bounds [ 111.470442][ T8840] tc action pedit offset 4096 out of bounds [ 111.470453][ T8840] tc action pedit offset 4096 out of bounds [ 111.470463][ T8840] tc action pedit offset 4096 out of bounds [ 111.470473][ T8840] tc action pedit offset 4096 out of bounds [ 111.470487][ T8840] tc action pedit offset 4096 out of bounds [ 111.470496][ T8840] tc action pedit offset 4096 out of bounds [ 111.470538][ T8840] TC_ACT_REPEAT abuse ? [ 111.564407][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.748'. [ 111.620858][ T8850] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.622602][ T8850] overlayfs: failed to set xattr on upper [ 111.624642][ T8850] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.626074][ T8850] overlayfs: ...falling back to uuid=null. [ 111.633954][ T8856] overlayfs: failed to clone upperpath [ 111.820331][ T8864] netlink: 'syz.8.754': attribute type 14 has an invalid length. [ 112.652771][ T8876] loop2: detected capacity change from 0 to 4096 [ 112.665419][ T8876] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.697493][ T8876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.818987][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.763'. [ 112.835676][ T8894] loop8: detected capacity change from 0 to 512 [ 113.094595][ T8894] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 113.095989][ T8894] EXT4-fs: failed to create workqueue [ 113.096029][ T8894] EXT4-fs (loop8): mount failed [ 113.101622][ T8901] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 113.105696][ T8904] loop9: detected capacity change from 0 to 512 [ 113.118082][ T8904] EXT4-fs (loop9): orphan cleanup on readonly fs [ 113.119784][ T8904] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, [ 113.119792][ T8901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.119814][ T8904] inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 113.125627][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 113.125662][ C0] EXT4-fs (loop9): initial error at time 107: mb_free_blocks:2049: inode 11: block 64 [ 113.125705][ C0] EXT4-fs (loop9): last error at time 107: mb_free_blocks:2049: inode 11: block 64 [ 113.130146][ T8904] EXT4-fs (loop9): Remounting filesystem read-only [ 113.130274][ T8904] EXT4-fs (loop9): 1 truncate cleaned up [ 113.137179][ T8904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.144192][ T8910] No control pipe specified [ 113.184905][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.208032][ T8918] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 113.212520][ T8918] syz_tun: entered promiscuous mode [ 113.216213][ T8918] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.511015][ T8936] loop9: detected capacity change from 0 to 8192 [ 113.627182][ T8929] futex_wake_op: syz.8.769 tries to shift op by 32; fix this program [ 113.950367][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.644949][ T8980] binder: 8979:8980 got transaction to invalid handle, 1 [ 115.644987][ T8980] binder: 8979:8980 cannot find target node [ 115.645016][ T8980] binder: 8979:8980 transaction call to 0:0 failed 25/29201/-22, code 0 size 120-24 line 3236 [ 115.691876][ T8982] set_capacity_and_notify: 2 callbacks suppressed [ 115.706956][ T8982] loop2: detected capacity change from 0 to 4096 [ 115.713605][ T8982] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.721020][ T8982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.753128][ T4885] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.809038][ T8986] netlink: 28 bytes leftover after parsing attributes in process `syz.9.786'. [ 115.809086][ T8986] netlink: 'syz.9.786': attribute type 7 has an invalid length. [ 115.809117][ T8986] netlink: 'syz.9.786': attribute type 8 has an invalid length. [ 115.809130][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.786'. [ 115.838479][ T8986] loop9: detected capacity change from 0 to 2048 [ 115.841191][ T8986] EXT4-fs: Ignoring removed i_version option [ 115.867962][ T8986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.034643][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.736097][ T9068] netlink: 52 bytes leftover after parsing attributes in process `syz.9.799'. [ 117.813175][ T9075] loop9: detected capacity change from 0 to 128 [ 117.834578][ T9075] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.849358][ T9075] fscrypt (loop9, inode 12): Unsupported encryption flags (0x10) [ 117.851613][ T9075] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.802'. [ 117.876734][ T6756] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.982902][ T9089] netlink: 80 bytes leftover after parsing attributes in process `syz.5.806'. [ 117.984702][ T9089] netem: incorrect gi model size [ 117.985837][ T9089] netem: change failed [ 118.012100][ T9091] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 118.074750][ T9091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.076730][ T9091] bond2: (slave bond3): making interface the new active one [ 118.077429][ T9091] bond2: (slave bond3): Enslaving as an active interface with an up link [ 118.094677][ T9091] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 118.196552][ T9102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.313589][ T9105] overlayfs: missing 'lowerdir' [ 118.509561][ T9111] loop8: detected capacity change from 0 to 512 [ 118.562906][ T4885] IPVS: starting estimator thread 0... [ 118.567925][ T9122] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 118.660816][ T9121] IPVS: using max 63 ests per chain, 151200 per kthread [ 118.780857][ T9138] loop8: detected capacity change from 0 to 8192 [ 118.792890][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.110696][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.8.821'. [ 119.206031][ T9165] loop2: detected capacity change from 0 to 512 [ 119.238629][ T9162] netlink: 12960 bytes leftover after parsing attributes in process `syz.8.826'. [ 119.282620][ T9165] loop2: detected capacity change from 0 to 8192 [ 119.290954][ T9175] No such timeout policy "syz1" [ 119.306305][ T9175] No such timeout policy "syz1" [ 119.351576][ T9177] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 119.369072][ T9180] fuse: Bad value for 'fd' [ 119.389956][ T9177] bond2: (slave gretap1): making interface the new active one [ 119.392835][ T9177] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 119.395959][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 119.396253][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 119.399606][ T9182] sctp: [Deprecated]: syz.8.833 (pid 9182) Use of int in maxseg socket option. [ 119.399606][ T9182] Use struct sctp_assoc_value instead [ 119.463251][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 119.463287][ T30] audit: type=1400 audit(113.624:98): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lo" requested=r pid=9185 comm="syz.8.835" path="/102/file1" dev="tmpfs" ino=581 [ 119.465886][ T9186] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 119.879711][ T9199] overlayfs: failed to resolve './cgroup': -2 [ 119.921074][ T9202] overlayfs: failed to clone upperpath [ 119.968010][ T9208] bond3: option arp_validate: invalid value (18446744072468401834) [ 119.970618][ T9208] bond3 (unregistering): Released all slaves [ 120.240352][ T9229] loop9: detected capacity change from 0 to 2048 [ 120.286839][ T9229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.455459][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.9.847'. [ 120.614102][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.617309][ T9245] loop2: detected capacity change from 0 to 512 [ 120.899819][ T9245] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 120.900105][ T9245] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.851: corrupted in-inode xattr: e_value size too large [ 120.900120][ T9245] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.900255][ T9245] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.851: couldn't read orphan inode 15 (err -117) [ 120.900267][ T9245] loop2: lost filesystem error report for type 5 error -117 [ 120.900915][ T9245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.021195][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.028927][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.032413][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.386928][ T9264] netlink: 'syz.9.852': attribute type 4 has an invalid length. [ 121.826240][ T4718] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 121.833858][ T9281] futex_wake_op: syz.8.858 tries to shift op by 32; fix this program [ 121.999687][ T9283] loop8: detected capacity change from 0 to 128 [ 122.735174][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 122.735217][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.856'. [ 122.735247][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 122.777329][ T9290] futex_wake_op: syz.1.859 tries to shift op by 32; fix this program [ 122.938133][ T9295] loop8: detected capacity change from 0 to 512 [ 122.940309][ T9295] EXT4-fs (loop8): Test dummy encryption mode enabled [ 122.942094][ T9295] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.950264][ T9295] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 122.960956][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 122.960986][ C0] EXT4-fs (loop8): initial error at time 116: ext4_mb_generate_buddy:1317 [ 122.961007][ C0] EXT4-fs (loop8): last error at time 116: ext4_mb_generate_buddy:1317 [ 122.978960][ T9295] EXT4-fs (loop8): 1 truncate cleaned up [ 123.261937][ T9295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.283276][ T9295] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 123.287911][ T9295] xt_HMARK: spi-set and port-set can't be combined [ 123.291422][ T9295] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.8.862: path /106/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 123.310319][ T6562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.348083][ T9299] syzkaller0: entered promiscuous mode [ 123.350459][ T9299] syzkaller0: entered allmulticast mode [ 123.809415][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.865'. [ 123.960432][ T9311] xt_hashlimit: size too large, truncated to 1048576 [ 123.960565][ T9311] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 124.582575][ T9327] futex_wake_op: syz.5.872 tries to shift op by 32; fix this program [ 125.612994][ T9337] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 125.638118][ T5480] Bluetooth: hci6: Frame reassembly failed (-84) [ 125.652879][ T9339] syzkaller0: entered promiscuous mode [ 125.653913][ T9339] syzkaller0: entered allmulticast mode [ 125.684308][ T9346] netlink: 76 bytes leftover after parsing attributes in process `syz.5.878'. [ 125.700070][ T9339] tipc: Started in network mode [ 125.700105][ T9339] tipc: Node identity 5aaea15fa01d, cluster identity 4711 [ 125.701165][ T9339] tipc: Enabled bearer , priority 0 [ 125.736757][ T9338] tipc: Resetting bearer [ 125.746445][ T9338] tipc: Disabling bearer [ 126.061420][ T9361] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 126.061462][ T9361] netlink: 2 bytes leftover after parsing attributes in process `syz.2.881'. [ 126.061532][ T9361] bond0: entered promiscuous mode [ 126.061545][ T9361] bond_slave_0: entered promiscuous mode [ 126.061637][ T9361] bond_slave_1: entered promiscuous mode [ 126.061938][ T9361] bridge0: port 3(bond0) entered blocking state [ 126.062009][ T9361] bridge0: port 3(bond0) entered disabled state [ 126.062171][ T9361] bond0: entered allmulticast mode [ 126.062179][ T9361] bond_slave_0: entered allmulticast mode [ 126.062189][ T9361] bond_slave_1: entered allmulticast mode [ 126.063626][ T9361] bridge0: port 3(bond0) entered blocking state [ 126.063657][ T9361] bridge0: port 3(bond0) entered forwarding state [ 126.084628][ T9365] overlayfs: missing 'workdir' [ 126.532411][ T9385] binder: 9384:9385 ioctl 4018620d 0 returned -22 [ 126.533961][ T9385] binder: 9384:9385 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 126.533991][ T9385] binder: 9385 RLIMIT_NICE not set [ 126.589217][ T9386] binder: 9384:9386 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 126.589253][ T9386] binder: 9386 RLIMIT_NICE not set [ 126.905360][ T9410] fuse: fd is not a fuse device [ 127.049049][ T9417] netlink: 392 bytes leftover after parsing attributes in process `syz.2.898'. [ 127.201564][ T9434] loop2: detected capacity change from 0 to 4096 [ 127.202383][ T9434] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.206953][ T9434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.614021][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 128.117852][ T9447] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 128.121590][ T9447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.281761][ T4723] Bluetooth: hci6: command 0x1003 tx timeout [ 128.290781][ T4718] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 128.379890][ T9451] loop9: detected capacity change from 0 to 1024 [ 128.382902][ T9451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.386300][ T9451] EXT4-fs warning (device loop9): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 128.649487][ T6871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.656885][ T9451] loop9: detected capacity change from 0 to 512 [ 128.698678][ T9451] [ 128.699085][ T9451] ====================================================== [ 128.700248][ T9451] WARNING: possible circular locking dependency detected [ 128.701543][ T9451] syzkaller #0 Tainted: G L [ 128.702525][ T9451] ------------------------------------------------------ [ 128.703702][ T9451] syz.9.909/9451 is trying to acquire lock: [ 128.704741][ T9451] ffff0000da85ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8 [ 128.706456][ T9451] [ 128.706456][ T9451] but task is already holding lock: [ 128.707713][ T9451] ffff0000f12c2620 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x33c/0x810 [ 128.709478][ T9451] [ 128.709478][ T9451] which lock already depends on the new lock. [ 128.709478][ T9451] [ 128.711242][ T9451] [ 128.711242][ T9451] the existing dependency chain (in reverse order) is: [ 128.712807][ T9451] [ 128.712807][ T9451] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 128.714068][ T9451] down_write+0x50/0xc0 [ 128.714835][ T9451] ext4_destroy_inline_data+0x30/0x114 [ 128.715883][ T9451] ext4_do_writepages+0x474/0x3ac8 [ 128.716823][ T9451] ext4_writepages+0x194/0x2d8 [ 128.717741][ T9451] do_writepages+0x270/0x468 [ 128.718602][ T9451] filemap_writeback+0x230/0x2bc [ 128.719592][ T9451] file_write_and_wait_range+0xb0/0x138 [ 128.720641][ T9451] mmb_fsync_noflush+0x80/0x1bc [ 128.721589][ T9451] ext4_sync_file+0x36c/0xef0 [ 128.722491][ T9451] vfs_fsync_range+0x120/0x140 [ 128.723404][ T9451] ext4_buffered_write_iter+0x24c/0x310 [ 128.724454][ T9451] ext4_file_write_iter+0x1d8/0x1390 [ 128.725501][ T9451] vfs_write+0x52c/0xa14 [ 128.726325][ T9451] ksys_pwrite64+0x118/0x1b0 [ 128.727217][ T9451] __arm64_sys_pwrite64+0x9c/0xb4 [ 128.728108][ T9451] invoke_syscall+0x98/0x244 [ 128.728948][ T9451] el0_svc_common+0xe8/0x23c [ 128.729830][ T9451] do_el0_svc+0x48/0x58 [ 128.730650][ T9451] el0_svc+0x64/0x260 [ 128.731433][ T9451] el0t_64_sync_handler+0x48/0x148 [ 128.732347][ T9451] el0t_64_sync+0x198/0x19c [ 128.733139][ T9451] [ 128.733139][ T9451] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 128.734664][ T9451] __lock_acquire+0x1780/0x2f44 [ 128.735577][ T9451] lock_acquire+0x140/0x368 [ 128.736390][ T9451] percpu_down_read_internal+0x5c/0x294 [ 128.737469][ T9451] ext4_writepages+0x16c/0x2d8 [ 128.738407][ T9451] do_writepages+0x270/0x468 [ 128.739338][ T9451] __writeback_single_inode+0x144/0x1808 [ 128.740427][ T9451] writeback_single_inode+0x3b8/0xaa0 [ 128.741503][ T9451] write_inode_now+0x170/0x208 [ 128.742401][ T9451] iput+0x6bc/0xb90 [ 128.743105][ T9451] ext4_xattr_block_set+0x12dc/0x2188 [ 128.744030][ T9451] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 128.745120][ T9451] __ext4_expand_extra_isize+0x29c/0x370 [ 128.746124][ T9451] __ext4_mark_inode_dirty+0x3a4/0x810 [ 128.747144][ T9451] ext4_evict_inode+0x7a0/0xfc4 [ 128.748089][ T9451] evict+0x4b8/0x740 [ 128.748837][ T9451] iput+0x858/0xb90 [ 128.749583][ T9451] ext4_process_orphan+0x240/0x2b4 [ 128.750487][ T9451] ext4_orphan_cleanup+0x7b8/0xd30 [ 128.751501][ T9451] ext4_fill_super+0x45a4/0x4d60 [ 128.752500][ T9451] get_tree_bdev_flags+0x380/0x434 [ 128.753519][ T9451] get_tree_bdev+0x2c/0x3c [ 128.754411][ T9451] ext4_get_tree+0x28/0x38 [ 128.755292][ T9451] vfs_get_tree+0x90/0x28c [ 128.756123][ T9451] fc_mount+0x24/0xac [ 128.756935][ T9451] do_new_mount+0x2a4/0x540 [ 128.757835][ T9451] path_mount+0x5d0/0xa68 [ 128.758699][ T9451] do_mount+0xe8/0x148 [ 128.759480][ T9451] __arm64_sys_mount+0x334/0x380 [ 128.760447][ T9451] invoke_syscall+0x98/0x244 [ 128.761419][ T9451] el0_svc_common+0xe8/0x23c [ 128.762238][ T9451] do_el0_svc+0x48/0x58 [ 128.763076][ T9451] el0_svc+0x64/0x260 [ 128.763829][ T9451] el0t_64_sync_handler+0x48/0x148 [ 128.764767][ T9462] loop2: detected capacity change from 0 to 512 [ 128.765773][ T9451] el0t_64_sync+0x198/0x19c [ 128.766600][ T9451] [ 128.766600][ T9451] other info that might help us debug this: [ 128.766600][ T9451] [ 128.768280][ T9451] Possible unsafe locking scenario: [ 128.768280][ T9451] [ 128.768421][ T9462] ext4: Unknown parameter 'uid<00000000000000000000' [ 128.770632][ T9451] CPU0 CPU1 [ 128.771550][ T9451] ---- ---- [ 128.772478][ T9451] lock(&ei->xattr_sem); [ 128.773233][ T9451] lock(&sbi->s_writepages_rwsem); [ 128.774596][ T9451] lock(&ei->xattr_sem); [ 128.775784][ T9451] rlock(&sbi->s_writepages_rwsem); [ 128.776699][ T9451] [ 128.776699][ T9451] *** DEADLOCK *** [ 128.776699][ T9451] [ 128.778082][ T9451] 3 locks held by syz.9.909/9451: [ 128.778924][ T9451] #0: ffff0000d5cb80d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x220/0x8bc [ 128.780614][ T9451] #1: ffff0000d5cb8600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfc4 [ 128.782238][ T9451] #2: ffff0000f12c2620 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x33c/0x810 [ 128.783946][ T9451] [ 128.783946][ T9451] stack backtrace: [ 128.784945][ T9451] CPU: 1 UID: 0 PID: 9451 Comm: syz.9.909 Tainted: G L syzkaller #0 PREEMPT [ 128.786650][ T9451] Tainted: [L]=SOFTLOCKUP [ 128.787389][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.789179][ T9451] Call trace: [ 128.789760][ T9451] show_stack+0x2c/0x3c (C) [ 128.790492][ T9451] __dump_stack+0x30/0x40 [ 128.791231][ T9451] dump_stack_lvl+0xd8/0x12c [ 128.792038][ T9451] dump_stack+0x1c/0x28 [ 128.792739][ T9451] print_circular_bug+0x328/0x330 [ 128.793580][ T9451] check_noncircular+0x158/0x174 [ 128.794384][ T9451] __lock_acquire+0x1780/0x2f44 [ 128.795257][ T9451] lock_acquire+0x140/0x368 [ 128.796038][ T9451] percpu_down_read_internal+0x5c/0x294 [ 128.796949][ T9451] ext4_writepages+0x16c/0x2d8 [ 128.797746][ T9451] do_writepages+0x270/0x468 [ 128.798528][ T9451] __writeback_single_inode+0x144/0x1808 [ 128.799499][ T9451] writeback_single_inode+0x3b8/0xaa0 [ 128.800383][ T9451] write_inode_now+0x170/0x208 [ 128.801198][ T9451] iput+0x6bc/0xb90 [ 128.801876][ T9451] ext4_xattr_block_set+0x12dc/0x2188 [ 128.802804][ T9451] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 128.803760][ T9451] __ext4_expand_extra_isize+0x29c/0x370 [ 128.804724][ T9451] __ext4_mark_inode_dirty+0x3a4/0x810 [ 128.805703][ T9451] ext4_evict_inode+0x7a0/0xfc4 [ 128.806565][ T9451] evict+0x4b8/0x740 [ 128.807236][ T9451] iput+0x858/0xb90 [ 128.807857][ T9451] ext4_process_orphan+0x240/0x2b4 [ 128.808702][ T9451] ext4_orphan_cleanup+0x7b8/0xd30 [ 128.809589][ T9451] ext4_fill_super+0x45a4/0x4d60 [ 128.810486][ T9451] get_tree_bdev_flags+0x380/0x434 [ 128.811402][ T9451] get_tree_bdev+0x2c/0x3c [ 128.812191][ T9451] ext4_get_tree+0x28/0x38 [ 128.813040][ T9451] vfs_get_tree+0x90/0x28c [ 128.813802][ T9451] fc_mount+0x24/0xac [ 128.814504][ T9451] do_new_mount+0x2a4/0x540 [ 128.815266][ T9451] path_mount+0x5d0/0xa68 [ 128.815999][ T9451] do_mount+0xe8/0x148 [ 128.816711][ T9451] __arm64_sys_mount+0x334/0x380 [ 128.817580][ T9451] invoke_syscall+0x98/0x244 [ 128.818394][ T9451] el0_svc_common+0xe8/0x23c [ 128.819180][ T9451] do_el0_svc+0x48/0x58 [ 128.819888][ T9451] el0_svc+0x64/0x260 [ 128.820554][ T9451] el0t_64_sync_handler+0x48/0x148 [ 128.821419][ T9451] el0t_64_sync+0x198/0x19c [ 128.830788][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.909: iget: bad extra_isize 90 (inode size 256) [ 128.830822][ T9451] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.831012][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.909: error while reading EA inode 11 err=-117 [ 128.831029][ T9451] loop9: lost filesystem error report for type 5 error -117 [ 128.831167][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.909: iget: bad extra_isize 90 (inode size 256) [ 128.831180][ T9451] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.831290][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.909: error while reading EA inode 11 err=-117 [ 128.831301][ T9451] loop9: lost filesystem error report for type 5 error -117 [ 128.831474][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.909: iget: bad extra_isize 90 (inode size 256) [ 128.831489][ T9451] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 128.831608][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.909: error while reading EA inode 18 err=-117 [ 128.831619][ T9451] loop9: lost filesystem error report for type 5 error -117 [ 128.831721][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.909: iget: bad extra_isize 90 (inode size 256) [ 128.831733][ T9451] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 128.831815][ C1] EXT4-fs (loop9): error count since last fsck: 7 [ 128.831825][ C1] EXT4-fs (loop9): initial error at time 122: ext4_xattr_inode_iget:441: inode 11 [ 128.831843][ C1] EXT4-fs (loop9): last error at time 122: ext4_xattr_inode_iget:441: inode 18 [ 128.832104][ T9451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.909: error while reading EA inode 18 err=-117 [ 128.832115][ T9451] loop9: lost filesystem error report for type 5 error -117 [ 128.832255][ T9451] EXT4-fs (loop9): 1 orphan inode deleted [ 128.841643][ T9451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.950287][ T6756] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.774993][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.775678][ T1592] ieee802154 phy1 wpan1: encryption failed: -22