last executing test programs: 28.741416524s ago: executing program 4 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a060400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x2000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 28.628058869s ago: executing program 4 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') exit(0xbfc0035) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='algo=zstd dict=dict0 level=1', 0x1c) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"b9c23bcc0203aa317eaa0f9b76a8faef9511324351dac783e1588278a659333a", r1}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0}, &(0x7f0000000100)=0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@typedef={0xe, 0x0, 0x0, 0x8, 0x8}, @struct={0x1, 0x7, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x1, 0x5}, {0xb, 0x0, 0x95}, {0x1, 0x1, 0x6}, {0x1, 0x4}, {0xd, 0x2, 0xb3}, {0xc, 0x3, 0x7fffffff}, {0xc, 0x5, 0xffffff80}]}, @enum64={0x8, 0x1, 0x0, 0x13, 0x1, 0xc, [{0xc, 0x7f, 0xfffffff5}]}]}}, 0x0, 0x9e, 0x0, 0x0, 0x100000}, 0x28) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000580)={0x9, {{0x2, 0x4e21, @local}}}, 0x88) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) 28.324338146s ago: executing program 3 (id=28): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000480)={[{@grpquota}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000ec0)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@usrquota}, {@test_dummy_encryption_v1}, {@data_err_ignore}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa8203, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076001f4ca3bd7000fbdbdf250800000000000000080001"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef1e3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x2, 0x200000000000, 0xc, 0xffffffff, 0x9, {0xfffffffffffffffe, 0xd, 0x1, 0x6221, 0x800000000db4, 0x2, 0x6, 0x6, 0x800, 0x1000, 0xe44, 0x0, 0x0, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0x0]) write$FUSE_STATX(r0, &(0x7f0000000340)={0x130, 0x0, 0x0, {0x5, 0x1c000000, 0x0, '\x00', {0x200, 0xb, 0x0, 0x2f, 0x0, r6, 0x4000, '\x00', 0xd, 0x7, 0x0, 0x2, {0x9, 0xd3}, {0x9, 0xfffffff8}, {0x6, 0x7}, {0x8, 0x9}, 0x7fff, 0x2, 0x0, 0x9}}}, 0x130) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) 27.720661014s ago: executing program 4 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xf, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r12, @ANYBLOB="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"/345], 0xd0}, 0x1, 0x0, 0x0, 0x44084}, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.48432374s ago: executing program 3 (id=33): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) (async) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x1000, 0x5}, 0x90) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r7 = dup(r5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2, 0x15}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) 27.372512242s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0xa8c00, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20004841) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x238, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c47f1c38d5e3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x200, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x40, 0x7}}, @perr={0x84, 0xe2, {0xd, 0xe, [{{0x0, 0x1}, @device_a, 0x8000, @value, 0x1b}, {{}, @device_a, 0xf9, @void, 0x2d}, {{}, @device_a, 0x0, @void, 0x17}, {{}, @broadcast, 0xe76, @void, 0xd}, {{0x0, 0x1}, @device_b, 0xffffffff, @value=@broadcast, 0xb}, {{}, @device_a, 0x6, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x401, @value=@device_b, 0x36}, {{}, @device_a, 0x4, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x574290cd, @value, 0x7}, {{}, @device_a, 0x6, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x933, @value=@device_b, 0x13}, {{0x0, 0x1}, @device_a, 0x101, @value=@device_b, 0x3a}, {{}, @device_b, 0x0, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x401, @value, 0x24}]}}, @perr={0x84, 0x109, {0x1, 0x11, [{{}, @device_a, 0x5ba2, @void, 0x19}, {{}, @device_a, 0x31, @void, 0x34}, {{}, @broadcast, 0x8, @void, 0x40}, {{0x0, 0x1}, @device_a, 0x10001}, {{}, @broadcast, 0x7, @void, 0x22}, {{}, @device_a, 0x6, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x29}, {{}, @broadcast, 0x9, @void, 0x22}, {{0x0, 0x1}, @device_a, 0x6f4c, @value=@broadcast, 0x28}, {{}, @device_b, 0x3, @void, 0x22}, {{0x0, 0x1}, @broadcast, 0xa84, @value=@device_b, 0xc}, {{}, @device_b, 0x4, @void, 0x2b}, {{}, @device_b, 0x4, @void, 0x14}, {{}, @device_a, 0xffffffff, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0xc}, {{0x0, 0x1}, @broadcast, 0x100, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x6}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x238}}, 0x8003) 27.372030532s ago: executing program 1 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x300000000000000, 0x4000}, 0x0) 27.354241484s ago: executing program 1 (id=37): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x25, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) 27.072617717s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_io_uring_complete(r2, r3) r5 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r1, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, r5}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000400)={0x80, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2a}, &(0x7f0000000140)=""/60, 0x3c, &(0x7f0000000240)=""/146, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, r0, r5, r6], 0x5, {r7}}, 0x58) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r8, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/4096, 0x1000}, {0x0}], 0x2) 26.996559507s ago: executing program 1 (id=39): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140), &(0x7f00000001c0)='./proc/file0\x00', 0xd, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000800000006000000020000060400000002000006000000000b0000000050000000004f5f305f2e"], &(0x7f0000000d40)=""/35, 0x3c, 0x23, 0x1, 0x7}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000013c0)) r3 = syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffff9, 0x444, 0x6, 0x4}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0052ccf5c60000feffffff81800000000000000000000014000200200100"/48], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x1}, {0x9b1, 0x5f, 0x2, 0x9}, {0x6, 0x80, 0xf7, 0x7fffffff}, {0x8, 0x5, 0xd, 0x5}]}) rt_tgsigqueueinfo(r3, 0x0, 0x21, &(0x7f0000000480)={0x9, 0x44, 0xa391}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f00000006c0), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r6, &(0x7f00000000c0)}, 0x20) 26.974879811s ago: executing program 1 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES64, @ANYRES8=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xf, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.592950647s ago: executing program 3 (id=46): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000480)={[{@grpquota}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa8203, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{0x0, 0x3938700}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xa, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket(0x15, 0x5, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1040010, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@noextend}, {@noextend}, {@access_client}, {@access_uid}, {@access_user}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x35, 0x9, 0x62, 0x39, 0x36, 0x36, 0x65], 0x2d, [0x66, 0x63, 0x7d, 0x63], 0x2d, [0x66, 0x66, 0x63, 0x57], 0x2d, [0x38, 0x61, 0xb, 0x64], 0x2d, [0x51, 0x63, 0x37, 0x34, 0x35, 0x6, 0x38, 0x63]}}}, {@smackfsdef}, {@flag='ro'}]}}) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef1e3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) 26.064057074s ago: executing program 4 (id=52): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@fat=@check_strict}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f00000006c0), &(0x7f0000000740)=r0}, 0x20) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000000)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000040)={0x18, 0x0, 0x30e, 0x1}) io_setup(0x8001, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f00000000c0)}, 0x20) 25.958411969s ago: executing program 4 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xa7b134416d5b84a8}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x170bd26, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 25.697498376s ago: executing program 3 (id=56): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1001a, &(0x7f0000000100)={[{@nodioread_nolock}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@grpjquota}]}, 0x1, 0x42e, &(0x7f00000003c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) lseek(r1, 0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6155cd8b5d991188) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40441, 0x3ca) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x40430a) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x182044, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/88, 0x58) 25.61260549s ago: executing program 4 (id=57): r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3e5}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0x3d5) (async, rerun: 32) llistxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=""/29, 0x1d) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10004}]}, 0x90) (async, rerun: 32) r3 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x4}}}}}}, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000) (async, rerun: 32) open_by_handle_at(r0, &(0x7f0000000100)=@reiserfs_6={0x18, 0x6, {0x3, 0xa, 0xfffffff9, 0x1000, 0x6, 0x2}}, 0x1a5280) 25.52426168s ago: executing program 32 (id=57): r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3e5}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0x3d5) (async, rerun: 32) llistxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=""/29, 0x1d) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10004}]}, 0x90) (async, rerun: 32) r3 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x4}}}}}}, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000) (async, rerun: 32) open_by_handle_at(r0, &(0x7f0000000100)=@reiserfs_6={0x18, 0x6, {0x3, 0xa, 0xfffffff9, 0x1000, 0x6, 0x2}}, 0x1a5280) 25.48063395s ago: executing program 3 (id=59): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) (fail_nth: 6) 25.192764152s ago: executing program 3 (id=62): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x1000000, 0x0, 0x0}, 0x20) 25.07592138s ago: executing program 33 (id=62): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x1000000, 0x0, 0x0}, 0x20) 23.036279653s ago: executing program 2 (id=77): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000480)={[{@grpquota}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}}, 0x4000) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa8203, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef1e3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) 22.117838116s ago: executing program 2 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x179e, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x2, 0x6}) 21.248428571s ago: executing program 2 (id=84): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pB \x00'}, 0x20) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x21a4c2, 0x0) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r1, 0x24, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0xfd6f15de37db339f, 0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000640)=""/86, 0x31, 0x56, 0x1, 0x6638}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x301e, '\x00', r2, r3, 0x0, 0x1, 0x5}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x3a) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x43bd, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast2, 0x9}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) socket$alg(0x26, 0x5, 0x0) connect(r5, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 21.246913504s ago: executing program 2 (id=85): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000740)={[{}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@bh}, {@minixdf}]}, 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x78) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x20000021) close(r3) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x8) shutdown(r1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff030}, {0x6}]}, 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x4, 0x7, 0x2, r8}, &(0x7f0000000240)=0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000005c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 21.00847891s ago: executing program 2 (id=87): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) pread64(r3, 0x0, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000100), 0x0, 0x12141, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0xa, 0x6, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x1ff, 0x33ba8, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) 19.754079297s ago: executing program 2 (id=91): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd9f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x4, @empty, 0x1ff}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)="827e81f3b60162dfccf909403f138ae294b0cb2f9836e4fe884491a1da852a4a9c0da73fe4997d0ddf28069bac8b6424ebc4704a0ed27b04abdb245c760e610dd4ee27f1e6703a8f3984ea197a905e46f6982811e278a2fcdfe4feaeb49e3dcd186b6e2f04cb8b53810f7f28fee36dd195270a538cdf806b87078bfa714e63cee79a93d1b016362766424c55fbd5269f5fc56c661b112a37e96071699af1a4015489cea5424d828e2c817b06bb76f77b993e0182e7a489faf8a446c8f85f166e589488dc3f505917342f2dc4"}, {&(0x7f0000000700)="0a5ecee539ab43b7b0bbf32ef1909a903e4dca52cac42a3443d5aa7cc052dc94aaa8415f185064d957c73c528150dee3e8bc87786ed4e6f7fe85e44c3506a44f12c8e6e81d6b94b07ed3d4bd0ac2b27b70"}, {&(0x7f0000000780)="b1387867f76758035db21b32cc56b49a6f5df23aeb79f87b6648f47d6597a177c1b72d4140eb552db36510a9691c9ce80ea85c4aa9e08320898c934046875aefb3a32c09504fa1775153b497a32432c0336efdbd01a246f5f6e5f04c0d", 0x2}, {&(0x7f0000000800)="32b5983478297fd59ccf3d99aca0b9aeef15565f8396163f607531f9fa697f1921bbb3543d0e65baf37db4dad7d5ead9e34a123e10b99282512a8e6446c23d6558a2d19ff727f7c5043363a4f912ec1ec0080243777eed02da0d1aa0e1011198019a51d34a3c6fedea10ad4eca7cd41db70916aae6f1676f80f671668d03ae0a1e3e0d9f20f2a2f470432a70770d66d98fff2b19dea71d7580f7b26dbe7c30070d8cffb9cb29196990dbf2176ec6c5b1462e8bb511c36539332e75f8861d4cbf071612365fec8c7abb30caaa2b4bc4"}]}}], 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000005c0)=[r5, r5], 0x2, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x7, 0x7}) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000cc}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x144, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={r5, r6, 0x0, 0x6d, 0x7f, 0x8, 0x1, 0xc832, 0xfffffffe, 0x2, 0x6, 0x61c9}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000040000000000000000000000081120400000000009500000000000000be26bd3b469adbb71dc2d9919325aa5108905732e6a89790"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.639614189s ago: executing program 34 (id=91): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd9f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x4, @empty, 0x1ff}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)="827e81f3b60162dfccf909403f138ae294b0cb2f9836e4fe884491a1da852a4a9c0da73fe4997d0ddf28069bac8b6424ebc4704a0ed27b04abdb245c760e610dd4ee27f1e6703a8f3984ea197a905e46f6982811e278a2fcdfe4feaeb49e3dcd186b6e2f04cb8b53810f7f28fee36dd195270a538cdf806b87078bfa714e63cee79a93d1b016362766424c55fbd5269f5fc56c661b112a37e96071699af1a4015489cea5424d828e2c817b06bb76f77b993e0182e7a489faf8a446c8f85f166e589488dc3f505917342f2dc4"}, {&(0x7f0000000700)="0a5ecee539ab43b7b0bbf32ef1909a903e4dca52cac42a3443d5aa7cc052dc94aaa8415f185064d957c73c528150dee3e8bc87786ed4e6f7fe85e44c3506a44f12c8e6e81d6b94b07ed3d4bd0ac2b27b70"}, {&(0x7f0000000780)="b1387867f76758035db21b32cc56b49a6f5df23aeb79f87b6648f47d6597a177c1b72d4140eb552db36510a9691c9ce80ea85c4aa9e08320898c934046875aefb3a32c09504fa1775153b497a32432c0336efdbd01a246f5f6e5f04c0d", 0x2}, {&(0x7f0000000800)="32b5983478297fd59ccf3d99aca0b9aeef15565f8396163f607531f9fa697f1921bbb3543d0e65baf37db4dad7d5ead9e34a123e10b99282512a8e6446c23d6558a2d19ff727f7c5043363a4f912ec1ec0080243777eed02da0d1aa0e1011198019a51d34a3c6fedea10ad4eca7cd41db70916aae6f1676f80f671668d03ae0a1e3e0d9f20f2a2f470432a70770d66d98fff2b19dea71d7580f7b26dbe7c30070d8cffb9cb29196990dbf2176ec6c5b1462e8bb511c36539332e75f8861d4cbf071612365fec8c7abb30caaa2b4bc4"}]}}], 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000005c0)=[r5, r5], 0x2, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x7, 0x7}) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000cc}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x144, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={r5, r6, 0x0, 0x6d, 0x7f, 0x8, 0x1, 0xc832, 0xfffffffe, 0x2, 0x6, 0x61c9}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000040000000000000000000000081120400000000009500000000000000be26bd3b469adbb71dc2d9919325aa5108905732e6a89790"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.698984275s ago: executing program 7 (id=92): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000480)={[{@grpquota}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000ec0)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000005140)=[{&(0x7f00000002c0)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="14", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x18, 0x24040000}], 0x1, 0x240000c0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(r1, 0xc0086f3c, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa8203, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000940)=[{&(0x7f0000000000)=""/129, 0x81}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/137, 0x89}], 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e36, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}], 0x1c) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000008, 0x204031, r5, 0x42795000) socket$kcm(0x23, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 16.532656487s ago: executing program 7 (id=121): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x80001, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001340)={0x400, 0x3, 0x1, 0xd3, &(0x7f00000010c0)=""/211, 0x0, 0x0, 0x0, 0x0}) 16.438307028s ago: executing program 7 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001a40)={0x0, 0x0}) statx(r0, &(0x7f0000001ac0)='./proc\x00', 0x400, 0x80, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000001c40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000019c0)=[{&(0x7f0000000240)={0x354, 0x25, 0x300, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x82, 0x0, 0x0, @fd=r0}, @generic="50c7768d48f88cc701e99c9f0bdfda8515334157529849c90bdbf301a29b840ee503c1e6a7d92d6f52be0d7955797c6d9edf332360d54247582a14592c9da59032989d", @nested={0x132, 0x134, 0x0, 0x1, [@nested={0x4, 0x125}, @nested={0x4, 0x12d}, @nested={0x4, 0x144}, @typed={0x8, 0x13a, 0x0, 0x0, @uid}, @generic="c87dfc3e57f005b398e57fb9b640c856e691c9e8576a33b9fdb57ebd42a92c40311aa786b62af802bb51ddc6868a051700a447bf9856428bd2f0f5591871eaa5a1ba108eb64bbf7ce244e1d9950ce37bdfcdb04a283fa4e0e58446ad46251a3786735b9d2c458ff66999a0b1b3333f9ed19165304ccabca59eae61a8c2a943403f5f34d46f0ba9697cba5308d96828e39a72df2cadd7f47954e1e3ff85ee9e55a12c30c53a0669f7c3e924ddaf5c20d468ccd027ca6ef52a134dd0c45cba8ec63e5adf9ed2b012952cf787bc450322814eb18469c9c59dd5c6f33164dc1b0f11992152c8574b51e47769110a8f10cf173d", @nested={0x4, 0x9}, @typed={0x9, 0x89, 0x0, 0x0, @str='proc\x00'}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="a9c016ce91"]}, @nested={0x1d, 0x13e, 0x0, 0x1, [@generic="f72d3cce8d45c0f518b3df6eef94e5cf654eafd60c", @nested={0x4, 0x11c}]}, @nested={0x8, 0x165, 0x0, 0x1, [@nested={0x4, 0xd7}]}, @typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="e0adaa028fc23ace418bd9629974f221026eff9618b1155c9a9ba25a1c4d8384bf5c66990a2f17da1a383dad4b047e52c424d2dfd5d243", @generic="f8dd142af2c13d6062c8e9320420eb2ea07c9aa79d09500844f1b3717cff66df5255e6f46d15053e90ea83384d2375a89f23ebf93489b67565d91c7515536bf2d05fca7a2bf8b2683e3e6afcca384ed11090bb8c877d28b3c03bc004d0fc8fe6394232fcf93364bbecb77effc6fabfa9abfa756f5ba738f527e910ff7cb47cbf83f57b5824be0834a4ee73034b6a8838f636cae6303adeb586ee7a8ef9f58c9f331ac785628a59f0b7441ca66fb02c165e8f86ae39603427721bedf5b7fefa035df3be57d741", @typed={0x8, 0xfa, 0x0, 0x0, @pid=r1}, @generic="16ac528fce0b92ec13a151293fcca75a18859efe261990a3d74567ba793f19be18223191b2c477de5b595231706f0799bc6276b4dba5f57dfe33594f6351eba8d33e2bfc4f60b394488451e746eb0a1049ce1039fc477d2d222b5c6265fbfb6a21f405cff9b97754ca06054c3b505ad4ea9349ef58db54d23da60b3b2395a743fc24de8c"]}, 0x354}, {&(0x7f0000000600)={0xe4, 0x14, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x8e, 0x0, 0x0, @pid=r2}, @generic="8924ae0fb9d11d60aa1df0428a3f9f97775cd41ddd2dc0e707fd13495a6d969995306f502ec66f9e7b34eb91a70e06ce268b2d0160c599d3bd693e73997104357b90ad4041914b135a7ee37faa51c738d9d046a7d10f8bbdd2aa6550769dfb470548f28635c5ff03130e4b4ae410c7f23c3097282ac75f64ff758263eee86a9c474decbc53a07f8ef5941da4ddc50a6db31d1d52ceb22a61356744e187ad6a651c94be", @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@remote}, @generic="bedd4a339fd9480f451652b1febd3cb1953cb79a26d8105c0fc447c097cc7c96a1"]}, 0xe4}, {&(0x7f0000000700)={0x10ec, 0x2b, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x10dc, 0x11b, 0x0, 0x1, [@generic="2d6f748a85151c0d16b6de766a4b75103b112f10a1d7c3790ddd647a1a7f28c382d193718f39d8c9e53ee6cef8d2f205680b08f1d7a84556af809df7e967512a0381274b49363504b30cd708d4c6ab8fa8ce1baccb8cf6c87fc6a25473701fde6c8ebe3c5ba0988954a864415b9166d42d81f63fa826ada8e0edf8cb0d454e42048649147247cad148fa142c4dfe4f70848c5bf4aaaea2184c276577674229f4725dfc8228b03ee2547b8b7433eb3b9f32086442ad4e607b282fe7d4b3573e4c5b49feab48999d39a386d04ab816dfd2", @nested={0x4, 0x48}, @generic="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", @nested={0x4, 0x14c}]}]}, 0x10ec}, {&(0x7f0000001800)={0x17c, 0x33, 0x200, 0x8, 0x25dfdbfd, "", [@typed={0x64, 0x148, 0x0, 0x0, @binary="3f700d853db2831846317ca06496881445eb7f97edad4fd2caaff5699572557ed2fd0ca5b14d425405d7b0d0fd96f52099289cd5e4f3d4544f6480f4f2a54cabefc7dc247b8deb9a0e245cabc741478e1cb8e52b16456abfb035ebf9d297e9cd"}, @generic="6d7f21d9288b0e9ba7211f8db87554ac3a3337d862cc66aa71d26e38372de5a0845a936c821068b5e5061625e1374ded616eae31e5b42d3aca3caf96e42cfeb0bbd04302a97bd6d9cc2996c727948eee977b2e123c76884c51d9dec640c29387aa7d7f2393ae9e372642a59597733c2b57b5fda4bc58e30cabf33c199b763ef1900e7bfe79c17e623b7e709590972ee13cfee99a71cb6b2227e3be156a0602a82c67a2f0746f3cf7e0d2c2a1de53b06390", @typed={0x47, 0xaf, 0x0, 0x0, @binary="4558ae6c0979fe5891861a613fb82caa4d5127debf8f20c6a9dd1a370d5cbb818ddbdf2cd93b1200a01827f35ccbe7ede2396fe2d0e97a563684172740f0f8e7574b3b"}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x50000000000000}]}, 0x17c}, {&(0x7f0000001c80)=ANY=[@ANYBLOB="10000000411c000226bd7000ffdbdf255d80c73be3d2d17ed46e4802f7b68939d2991cd02869e7083013794352ffa4ed9760e04e1c4b6446fdf1599b00d0676e2d2b464d726d054b6226dda98bbb74070cea07f99dac97217efe219fb9e0bdc0024639b90a621f72e53d00563ab61177fad97db8e6f1d0a1c0ee0ad6ca6eb86661dda15aadcd98898c44560d52a78732cdd96c2a94bc882802661abacd0d2b6c2c6f8fd4059b0debb08fe927db2f6b41903481903b52466c426569b95cabd478f6f72025cbceb5d8807a30425ffcdcb156b75d330d3be6"], 0x10}], 0x5, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}], 0x20, 0x801}, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) 16.308764697s ago: executing program 7 (id=127): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='i2c-gpio\n\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='pcspkr\n\x00', 0x7) nanosleep(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='bq24190 0x6', 0xb) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @rand_addr, @empty, @dev}}}}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000000)=0x5) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 16.08306691s ago: executing program 7 (id=132): r0 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003d40)=[{0xffffffffffffff5c, 0x0, 0x0}], 0x1) r2 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000240)=ANY=[], 0x10, 0x122d, &(0x7f00000005c0)="$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") r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x7, 0x1010, r1, 0x20000000) r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0x10000, 0x2000000, 0x40010, r0, 0x8269c80e) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000001900)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x4004, @fd=r2, 0x2, &(0x7f0000000580)=[{&(0x7f00000003c0)="6b111fd0ae3b5c6df4b0e9c0a930ac7f4901c8ece934e0b66eee51cf04a1005a24ad81a01095b4b6007798c7c7bb0685c705c875d4510265db6d96c83c8b53f250b60e24ff5e8e110c3f4786fcc23174bab3602330135180ddae977e583647ebdd7f3c45f3cf3c72df4f96cdbe748e1e0e91c3851e343521f26fc2006febc620cbfbe521efe60d98e63d871f7642ca5949efddd225db0387f4d690aa7b19479a62b2a8a2ae95ebf48b8d48c7a74bd347146747d49c70a1444d45620d7e8eebb7671393874c7b06ff05109ebd70cef4a354c514812a23b760bc39e4be6b8ac4d8d86c", 0xe2}, {&(0x7f00000004c0)="1590da798510f57e7cf7277e36bd77c0cc89c4385655a972646f9a6af64fca98a50eaea0288b98c1592df25dec5619fdae437fcb6c2850846509eb2ee8e2e1e454d339f57092bc74771677d019c2b5743c990acc4196369ac39b3665b51b851153b52a1692d0984c52bdf1353f95cd576ae8f57f40ee1f1aaacc8331f4519376196bf3", 0x83}], 0x2, 0x3, 0x1, {0x2, 0x0, 0xc, '\x00', &(0x7f00000018c0)={0x1ff, 0x1, 0x6e, &(0x7f0000001840)="9d9e3729f7255fd6754cfb45f8c80f41733b5b8b870be282f521cac3cb73d60fbce79554732c3976d9cc65bdccdf3eb5539cf63f734aad1503e932d26cc2f849d594a8b928c6a8271c4894acec037af59721388120a2d0eb0ffef219dd6aff21b4cf185ac8cd6cabb819f1813658", 0x669}, 0x5}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 11.651466173s ago: executing program 35 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES64, @ANYRES8=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xf, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.767682902s ago: executing program 0 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000007000000b704000000000000850000003300000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]}) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8, 0x1, 0x3a4, 0x3ff}, {0x7, 0x7, 0xa, 0x5}}}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000500)={{r1, &(0x7f0000000140)='vti\x00', 0x80040, &(0x7f0000000180)={@_ha_fsid={[0xfbaf, 0xffffff80]}, {0x24a, 0x4, 0x0, 0xba}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000440)=0xfff}, {[0xffffff01, 0x81, 0x400, 0xa9]}, 0x1, 0x45, &(0x7f0000000480)=""/69}) sendmsg$kcm(r9, &(0x7f0000001ac0)={&(0x7f0000000600)=@xdp={0x2c, 0x3, r8, 0x1c}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="2c5c6b0dfd54ab3bef8fd465315d0ee7bba38d9417e86f4961b16864908c910ae8d5f311b4c73380002468834824e0391a12ced047cbce3b5042f5b107df875eaae048dfb38629ed18feaa48fc6362d6a21cb877929d758ccb52878ccc868fc18f1c8abe75c90a987d45e8c373fd796171bb21e875f34e994e49d78c1574cb61791e5f3b59c13c7b59044cc3a5589a9683c01d3b0cf4505024a90a83263f09b7a5fd0adfdfcc97", 0xa7}, {&(0x7f0000001a00)="6e87afceef4cfddf9450e3ee51d24edc25fd037684e3bdfbf92663aaf68f376407776a7669291c2c30829c3e0017e99f6a5c5d146b50b3e107e2d80c3a8469d1ee1e2dba1fc2c2f7a586ff595bc545cb5c49501b189965ac6b156ed8b2890ca003767848724f9464dc131445c4ed7350", 0x70}], 0x3}, 0x4008800) 2.978044507s ago: executing program 5 (id=250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x2810, @mcast2, 0x7ff}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000000bc0)="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") (async) setresuid(0x0, 0xee00, 0x0) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) (async, rerun: 64) io_uring_setup(0x5605, &(0x7f00000002c0)={0x0, 0x7f12, 0x200, 0x3, 0xfefffffd}) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async, rerun: 32) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") (async) mkdirat(0xffffffffffffff9c, 0x0, 0x777) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x10, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101}}}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) 1.935793818s ago: executing program 5 (id=255): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1d6000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") (async) syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) (async) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1d6000) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async) 1.817184814s ago: executing program 8 (id=256): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$inet6(0xa, 0x800, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.732609522s ago: executing program 5 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x155000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$cgroup_ro(r2, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x8}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044080) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)="be2770a7d4dcb846e982926852476bd02c8da91e6423b3b4bcb9347e4514a44bb54e5e2a11fb5f125691f928f2b5661e0b86af3baaf8a35b090585e7ecf081c4a19320e3e2aa1d8e8889f619b29dec53274a93cde2b97d6ebb96ed878455cb67a887d8bd1968820eaadf871455bcf6ee78735d49cf7de6a2e24c3f98f918a51f6b6eb9718a", 0x85}, {&(0x7f0000000380)="fe30f58389af818fa1c5d78269147285f702f5", 0x13}, {&(0x7f00000003c0)="1dad5bb182c6452d2a823afc54b6875c300d2b2dd7008bb220707557a17e8b57d9f65ab21207bbb7aec3778fdba816f2acf8a979961c59e14028fea4fe27b8b0accde7d354bb75c9c6e49cee09f97241f67475479e2014162fc0217a3bfd5fa8d1ada7a3d0e4ccfe180047f060ffe6e8c040132fa9b4381f97e534cb1303495db23264cd779900972cab299d88e327776e8e9a590c7166f2907a0a915ea4c793dc51af2ae61bdd1c5e2e7787c0e7a2336f9df94f72923a3ddce618fcbcd3cadf417542ff", 0xc4}, {&(0x7f00000004c0)="0dc0a1009146721b6507da6dca6364618bf64706c4d4063f97cd62cbdb44560942064bfecb5e911eafe1b1f098e18ea9299b62cda43b331f98cae3b5c7a562c0336b8a4cb09bec5ce8a8f15b9de5090f81aafc18a16e7dd0b5ea53022e689409b71a22c040e8992be9c96c5dff7223b94bbc9f63cb574045f1540e3632f71a606a339d197543c82d01b245291391c032610217352cd54b69c52e29411185d234d8e998cca006d53546b07b2291fde9992c2e4598d1d6861b", 0xb8}], 0x4, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @private=0xa010102}}}], 0x20}, 0x4000094) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r6, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567812345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8765432187654321}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002301000034020000170000004c0006800c0003000123456789abcdef3c00040067636d280100"], 0x60}}, 0x0) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000075, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0x5c2c}, 0x1c) 1.636549512s ago: executing program 0 (id=258): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101002) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r8, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000020) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x208, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @mon_options]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004000) socket$inet6_udp(0xa, 0x2, 0x0) r10 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0xfffffffe, 0x1dd}) close_range(r10, r10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r9], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.63558014s ago: executing program 8 (id=259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x2, 0x34005}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.579212399s ago: executing program 8 (id=260): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000ac0)={&(0x7f0000000380), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4ff00, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000dce598fa5ce9e9000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]}, 0x108) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x7, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xfce1) 1.578731263s ago: executing program 5 (id=261): r0 = socket(0xb, 0x1, 0x80000000) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) 1.468582143s ago: executing program 5 (id=263): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r1, 0xf6, 0xa, &(0x7f00000000c0)="ccfa6b9a8b546546", 0x8) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x3, 0x9, 0xa, 0x1}, 0x2a, [0x2, 0xac, 0x200, 0x8001, 0x9, 0x2, 0x8, 0x6, 0x0, 0x8000, 0x3ff, 0xf, 0x1, 0x2, 0x3, 0x6, 0x5, 0xda0, 0x3, 0x55f6baa7, 0x4, 0x10, 0xffffffff, 0x8001, 0x7, 0xf, 0x5, 0x9, 0x0, 0xffffffff, 0x4, 0xfffffffb, 0x3, 0x0, 0x3, 0x8, 0x5, 0x22b, 0x2, 0x8, 0x80000001, 0x7, 0x2, 0xffff, 0x70, 0x5, 0x3, 0x80000000, 0x8, 0xdf77, 0x0, 0x7, 0x4, 0x6, 0x4, 0xb0, 0x38, 0x4, 0xb19, 0xdae, 0x0, 0xf, 0x6], [0xc, 0x80, 0x0, 0xe, 0x4, 0x5, 0x8001, 0x1, 0x10001, 0x7, 0x8, 0x81, 0xf1, 0x2, 0x0, 0x0, 0x4, 0x3, 0xb6, 0x8, 0x3, 0x10001, 0x81, 0x3, 0x81, 0x3ff, 0x2d, 0x8, 0x6, 0x0, 0x9, 0x0, 0x4, 0x200, 0x2, 0xfffffc00, 0x5, 0xfffffffc, 0x2, 0x62e, 0x6, 0xa, 0x9, 0xfff, 0xfffffffa, 0x55, 0x2, 0x4, 0xa, 0x0, 0x4206, 0x5, 0x0, 0x9, 0x800, 0x7fffffff, 0xb, 0x3, 0x2, 0x5, 0xc25e, 0x5, 0xfff, 0x8], [0x80, 0x14, 0x12c5, 0x2, 0x7, 0x2, 0x7, 0xbfaf, 0x4, 0x7, 0x6, 0x0, 0x8000, 0x3, 0x8001, 0x9, 0xffff0000, 0x8000, 0x15, 0x850e, 0x72c, 0x1, 0x7fff, 0x8, 0x7, 0x0, 0x2, 0x0, 0x7ff, 0x5ee6, 0xd, 0x1ff, 0x4, 0xea, 0x800, 0x8, 0x1ff, 0x4db, 0xe6, 0x5, 0x9, 0x5, 0x3ff, 0x7, 0x0, 0x22, 0x9, 0x8, 0x8, 0xb2c6, 0x1, 0x8, 0xe6a40000, 0x40, 0x100, 0x1, 0x3, 0x1, 0x25, 0xba, 0x1, 0x10, 0x8, 0x85b], [0x4, 0x3, 0x9, 0xe23d, 0x3e9, 0x5, 0x9, 0x5, 0x3, 0x80, 0x6, 0x7, 0xa1, 0xb, 0x6, 0x7, 0x7, 0x1ff, 0x2, 0x66, 0xe, 0x0, 0x2, 0x0, 0x14c4, 0x7, 0x9, 0x4, 0x0, 0x1ff, 0x1a25565, 0xc91, 0x7, 0x1, 0xfff, 0x4, 0x21, 0xfffffffa, 0x4, 0x100000, 0x1, 0x3, 0x4, 0x5, 0x10001, 0x8a, 0x3, 0x5, 0x4, 0x7, 0xdd83, 0x9, 0x80000000, 0x5, 0x8, 0x2, 0x3, 0x200, 0x80000000, 0x8c62, 0x9, 0x6, 0x9, 0x8]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b40200001fffffff6111490000000000850000001c00400095000000000000000cee0d4361cfbb95ab39f6eecfb119baa5afb3b85dac84bfba3473f9387cc80ac0f213fcb1a1d8fc15094d7c356f707ec9ded01de67b4b3aeeb9073bbb00"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1099}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x6, 0x100, 0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_FRAME={0x30, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0x2, 0xb3}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x8, {0x0, 0x8, @val=0x1, @val=0x38, @void}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6937}, @device_a, @device_b, @initial, {0x7, 0x8}}, 0x1f, @void}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40804}, 0x48004) 1.467727955s ago: executing program 8 (id=264): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) preadv(r0, &(0x7f0000002700)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/135, 0x87}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/144, 0x90}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/238, 0xee}, {&(0x7f00000025c0)=""/25, 0x19}, {&(0x7f0000002600)=""/245, 0xf5}], 0x9, 0x8000, 0x4) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0xc4, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x7fff, 0x1}, 0x8, 0x0, 0x200, 0x0, 0x0, 0x20000, 0x0}) 1.388505678s ago: executing program 6 (id=266): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) sendfile(r0, r1, 0x0, 0x4000) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 1.24416185s ago: executing program 8 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") (async, rerun: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r3, &(0x7f0000000940)=""/229, 0xe5) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, 0x0) (rerun: 32) pread64(r4, 0x0, 0x0, 0x5) socket$netlink(0x10, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffff9, 0x0, 0x0, 0x0, 0xce0251}, 0x9c) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000640)={0x0, 0x9436, 0x400, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6e, 0x1000, 0x40040001, 0x800334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x2a4, 0x0, r8}}], 0x1, 0x0, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x2}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 1.243675593s ago: executing program 0 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0xfffffe2e, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.168564673s ago: executing program 5 (id=269): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) sendmmsg(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000240)=@nfc={0x27, r8, 0x0, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="f0751098fe9d621dfa4a275f8a2d164dad4ea51d4712b9b8", 0x18}, {&(0x7f0000000540)="eefcb9a54dcd7d7596ace8520cb4961c35915f41c22c5fb8b164d7c6a615e9547f3aa30c7e131d949b97e941999b169f5d2fdce77296030ed1", 0x39}, {&(0x7f0000000580)="66910ad728321d0b7ef044e965bd1eda0094074a7f6e17ca64ce3a447264430ccc19bf72e16c32c5c76ee9f48638b5f0a3c67898b6887701577562c217c0f7ff8b6fe0d8af0c2f6d69a895913826254f47b98e1838b4cf80b78594aed6c34589c758b3da5c51ad4eb2932fb083c25d6aa37d7e214b9e6726b15be275f2e87a4a0cb5bb07e70656d08c54c829be0fea9e89f2b967c8670db236f4cb2df130dfed5733a94963926baf2bf55f5213c07c815b91b69ee24141b1", 0xb8}, {&(0x7f0000000640)="4c04ffd8c29a3a786cd77a06c1b18968be13c2ade2cca3ff0d558660dee21446af0696572ba9eae105160135b1a77c2891fb92e59fec52e1e3a4ab44739fc750c92f46", 0x43}], 0x4, &(0x7f0000000700)=[{0x48, 0x109, 0x35f2ace5, "b24889d76f68e3793eab23f5c9371fe1a56e588740914bbe4db4a6f54dcb99da2478d4e62709132fe3c8689a2827d929bc6ca056cf"}, {0xb8, 0x117, 0x3d69, "8db9176638666552fb42b151cd9a8da0220d66ecba88f2fe84166b84be654b2aa99104db6b9938be4bba3fcad8cd64677be8f0ac191bf371bb4caf2d04a9bfc4e26e33b2d8955b8cbec81e37d0db004f8939be4d136921c85c471c8b626a0bac5741dc98b4ae9041acd93b9d21e23ced12c3b706c9e02c323ad580bcc0b491f00cdc3162a99c8e81a254abcde6197502f68fd8bc28a7004c9b9e274f7b71d62b6a798b3839"}, {0x100, 0x104, 0x3, "117b1dc1a55a5c6315d7e9c8cda9fc4852d6385242664497863f705e8733edc366c3c66b2189c60b29998c752071ed5a0474bcd1f18c817a145ea7b1a25f803a62296561ad20aef7e5fc35bf101bc257823fb4fe3ed5b1d012e0068f3af7912e567db6ec3571b757aa3c6000d02ccd2e95eba17b7eb61f562d43f67aaf918b7e0b9c8bfd37a1320722b2d1f2f5bb7b93ddff327167ae71905534d20ca72d8f19a09d927a631f413ef11ef7ef438718958e68c2ee8ececaefb576330b62142ac2be86b3928ae76742c0f12f9c9907c460ba0f5e621e2c7b3c0ea82cbefa07cd694df8f3e2873336f157ab6063956b"}, {0xb0, 0x10a, 0x2, "cc798cce073dd3a58074cd0cf7e865903fbfd820c245e527a4b05d5f0256ee46a661dce8a0904337c0bfaeb2590317ce004452320b6a0091c273184dccff6bdb52d99f22cd4b1bd83b098bbd07a234fea3a55a3a97424bd31b45ce10a520c07648af2c7c9e5e2371304a5304f5290c4b23295580c4ec3f1b06c6e59965731dda4c737380e1759a26b5d57ded3acb6ac64c7a0f8f55d40a606432a6"}, {0x30, 0x113, 0x7, "b2271ceaac611fb0a1bd42c45b6e1138447934a659b5f8b3c98593"}, {0xb0, 0x3a, 0x4, "ceaea916c1c973cbe1b7c9c860556c508b8ffe2420258d7a31fa74676c2bdba2ff0b7c391fecf75b585ac2a4c6924cbb2ca6bb1d8ec3af20c99834716bbf9568280c0a4f8f27f814961831714880fcc15166c1a679a63c19fb7641a581d33a68676328e38221817be199a8542134449df1115cf592997054ef1f1925df0288524cd5757300b777f000ef9e3e224642b595c3f7a282a0c303eb1dc4"}], 0x390}}], 0x1, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x178, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x79, 0xfc, "19ef7ca7b683084ea45b92ab2d71b97539c3e20937e03942981913dc6de5e378a3a85b0cee77b4b92af719d760ba6ac65b30f9cdf88247e5144c34ff3f6b1f00f4785caef89ebda7c588a57c8724d95b6ebe413c04913477b1101209f4e11c563508bbc635dd9343995833db8d212ea5823e92d663"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "e21f590b83cc0c91ee25d0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x62}, @NL80211_ATTR_FILS_ERP_REALM={0x27, 0xfa, "ca42b3790889fa696e7c59502779c72abcbb8e4296e8c5c7ba884f6f630fb82f51ac3d"}, @NL80211_ATTR_FILS_ERP_RRK={0x5a, 0xfc, "476d9d3dc8e08afc4394b0cbd5eb87e245c4858afd6e924183e01b350ecb03407a25c98e3c90cc74e7a74b41e9d73335e758b9eee1a4fd0fd2f8759c0ec1e6a01a459994390de1c4c34a633b29f5f219b4cea92a2051"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x6, 0x0, {0x8000000000000001, 0xf, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0xffffffa0}}]}, 0x178}, 0x1, 0x0, 0x0, 0x54000}, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x0, "00000100"}, 0x80, &(0x7f0000000540)}, 0x20040891) 917.001544ms ago: executing program 0 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r2, 0x9, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x4090002) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 836.953843ms ago: executing program 36 (id=132): r0 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003d40)=[{0xffffffffffffff5c, 0x0, 0x0}], 0x1) r2 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000240)=ANY=[], 0x10, 0x122d, &(0x7f00000005c0)="$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") r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x7, 0x1010, r1, 0x20000000) r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0x10000, 0x2000000, 0x40010, r0, 0x8269c80e) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000001900)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x4004, @fd=r2, 0x2, &(0x7f0000000580)=[{&(0x7f00000003c0)="6b111fd0ae3b5c6df4b0e9c0a930ac7f4901c8ece934e0b66eee51cf04a1005a24ad81a01095b4b6007798c7c7bb0685c705c875d4510265db6d96c83c8b53f250b60e24ff5e8e110c3f4786fcc23174bab3602330135180ddae977e583647ebdd7f3c45f3cf3c72df4f96cdbe748e1e0e91c3851e343521f26fc2006febc620cbfbe521efe60d98e63d871f7642ca5949efddd225db0387f4d690aa7b19479a62b2a8a2ae95ebf48b8d48c7a74bd347146747d49c70a1444d45620d7e8eebb7671393874c7b06ff05109ebd70cef4a354c514812a23b760bc39e4be6b8ac4d8d86c", 0xe2}, {&(0x7f00000004c0)="1590da798510f57e7cf7277e36bd77c0cc89c4385655a972646f9a6af64fca98a50eaea0288b98c1592df25dec5619fdae437fcb6c2850846509eb2ee8e2e1e454d339f57092bc74771677d019c2b5743c990acc4196369ac39b3665b51b851153b52a1692d0984c52bdf1353f95cd576ae8f57f40ee1f1aaacc8331f4519376196bf3", 0x83}], 0x2, 0x3, 0x1, {0x2, 0x0, 0xc, '\x00', &(0x7f00000018c0)={0x1ff, 0x1, 0x6e, &(0x7f0000001840)="9d9e3729f7255fd6754cfb45f8c80f41733b5b8b870be282f521cac3cb73d60fbce79554732c3976d9cc65bdccdf3eb5539cf63f734aad1503e932d26cc2f849d594a8b928c6a8271c4894acec037af59721388120a2d0eb0ffef219dd6aff21b4cf185ac8cd6cabb819f1813658", 0x669}, 0x5}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 800.341908ms ago: executing program 6 (id=272): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) setfsuid(0xee00) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@data_journal}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x5, 0x8ffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x1, 0x3, 0x5331355c, 0x4, 0xa, [{0x7, 0xe}, {0xffffffb1}, {0x79, 0xb}, {0x6e, 0x7fffffff}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0xffffffff}, {0x27d2, 0x10000}], 0x2, 0x38, 0x1, 0x2, 0x6}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xa, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000081000000850000004500000095"], &(0x7f00000011c0)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x5) 556.616948ms ago: executing program 0 (id=273): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x44, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x113}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}}, 0x4008094) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000), 0x0, 0x4b4, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x222440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r2) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$alg(0x26, 0x5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x2, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8204, 0x2000, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6916, 0x40, 0x80000002, 0xfffffffb}}], 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8) 452.223069ms ago: executing program 8 (id=274): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='m'}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000580)) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000280)='\x00', &(0x7f0000000140)='\\{\x00']}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x8, 0x100000001, 0x3, 0x5, 0xfffffffffffffffc}, &(0x7f0000000100)={0x5, 0x8, 0x3, 0x3, 0x0, 0x2, 0xfffffffffffffff7, 0x7}, &(0x7f0000000140)={0x2, 0x8fe8, 0x100000001, 0xd, 0x6, 0x5, 0x7}, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x808f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xd, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) 327.351124ms ago: executing program 6 (id=275): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000ac0)={&(0x7f0000000380), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4ff00, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000dce598fa5ce9e9000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]}, 0x108) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x7, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xfce1) 168.45652ms ago: executing program 0 (id=276): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000200000000000000000100073013f000000000095", @ANYRES64=0x0, @ANYRES16=r4, @ANYBLOB="b6430297480bbf1ac11b8a960644234c96b8f4eb6536ab4dc74d751f7473d4e7b20d0fa65ad312f97aab69ef80164333e86ff6cf07869b973b782c1304cb610315b3d1a810ce754b5aaabf772a4b44d5de710f", @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000680)="7b23ab0a0cea69ab435a26ec82fe3ccc5a843026f0200012b67fe45faa5faf399e6eb8540f094f63bf3c38ca8d1d0a3787af83f6", 0x34) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x3, 0x5e0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x86) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x86) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) (async) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r7, r7}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f0000000000)={&(0x7f0000000340)={'sha1\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000440)="0ba4797e83e9a1f93d746ed0eaff466bc1bdd6078da90920a21547913993b57dd13fa7efa2584500a914f8083fa735011e7366155795be9bb3f4eca4f81201a418d5dd701a03a7d569ad91d825dba34a7224e4693f07a94dbb14f91b954d5cd36052dee0e2e16b9f7fa744b4b2723e5ae1c19add31e36d17016965d56e7bf62846c09ac6a44f9710d9429932de95fccac2d0fb2a8f99c6265a8027a64da496a6cd01ec6d922c69daa75e74865deab4ad031f7bf5c439cd496c7a205fc75941017062020d11f164d199c67bb6d618e6ac22dfc24d992f7906d1b54474c961e331212d9453f139888d05e614c77a3243856969", 0xf2, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, 0x0, r8}, &(0x7f0000000580)=""/109, 0x6d, &(0x7f0000000640)={&(0x7f0000000600)={'sha512-arm64\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, 0x0, r8}, &(0x7f0000000580)=""/109, 0x6d, &(0x7f0000000640)={&(0x7f0000000600)={'sha512-arm64\x00'}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x8) fallocate(r9, 0x10, 0x6, 0x10001) 143.010867ms ago: executing program 6 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='cgroup\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) write(r0, &(0x7f0000000000)='3', 0x4e) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x1000000000000, 0x0, 0x2, @thr={0x0, 0x0}}) 81.706318ms ago: executing program 6 (id=278): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x156d, 0x0, 0x0, &(0x7f0000008800), &(0x7f0000008840)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0xa, 0x20, "9b33fdf6102225dda40872458c8bd9911dd4a6518d248128b10ee461e94e6830", 0x30314752}) 0s ago: executing program 6 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x34, 0x58, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048890}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f00000001c0), {[{{@arp={@remote, @empty, 0xff000000, 0xff, 0xf, 0xf, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x1, 0x100, 0xf, 0x53, 'sit0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @multicast2, @multicast1, 0x4, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff, 0x0, 0x3, 0xa, {@mac=@multicast, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x735, 0x40, 0xb424, 0x4, 0xd, 0xa89, 'veth1_to_bridge\x00', 'vcan0\x00', {}, {}, 0x0, 0x25e}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$DVB_DEMUX_DMX_REQBUFS(r1, 0xc0086f3c, &(0x7f0000000680)={0x7, 0xa}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000006c0)={0x1d, r2, 0x1, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$cgroup_freezer_state(r1, &(0x7f0000000700), 0x2, 0x0) r4 = open_tree(r1, &(0x7f0000000740)='./file0\x00', 0x8900) ioctl$sock_ifreq(r4, 0xff, &(0x7f0000000780)={'vlan0\x00', @ifru_ivalue=0x8}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000880)={@dev, 0x0}, &(0x7f00000008c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r4, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000009c0)={@dev, 0x0}, &(0x7f0000000a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001240)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000ac0)={0x734, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x0, 0x10, 0xc}, {0x7, 0x3, 0x10, 0x1}, {0xbfc1, 0x7, 0x1, 0x8}, {0x0, 0x81, 0xb, 0x25c90b82}, {0x8, 0x0, 0x3b, 0x8}]}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2000000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x28e}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x77a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd5d3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x17}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x8, 0x7, 0x6}, {0xe, 0x55, 0x3, 0xcf5}, {0x5, 0xc, 0x8, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r11}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}]}, 0x734}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000010) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x4004010, r0, 0x32b48000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001280)=0x4) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000012c0)={0x0, 0x5c63, 0x10, 0x0, 0x2, 0x0, r1}, &(0x7f0000001340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71e1, 0x20000, 0x0, 0x215, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93d4, 0x40, 0x1, 0x2c7}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x307c, 0x800, 0x1, 0x3df, 0x0, r4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68c5, 0x80000, 0x3, 0x1b8, 0x0, r1}, 0xffffffffffffffff}], 0x4, &(0x7f00000025c0)={0x2e, 0x13, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, '\x00', {0x1, 0x348, 0x0, &(0x7f00000015c0)=@buf_1k="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"}}, &(0x7f0000002640)) r16 = io_uring_setup(0x1481, &(0x7f0000002680)={0x0, 0x1710, 0x80, 0x0, 0x22e, 0x0, r13}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44005) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000002800)=0x7) syz_ublk_setup_io_uring(0x5725, &(0x7f0000002840)={0x0, 0x27cd, 0x40, 0x3, 0x300, 0x0, r14}, &(0x7f00000028c0)=0x0, &(0x7f0000002900), &(0x7f0000002940)) syz_ublk_setup_io_uring(0x5fc4, &(0x7f0000002980)={0x0, 0xae43, 0x40, 0x1, 0x8a, 0x0, r16}, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)=0x0) syz_io_uring_submit(r17, r12, r18, &(0x7f0000002b40)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, r4, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r15}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 28.265548][ T4691] cgroup: Unknown subsys name 'net' [ 28.366825][ T4691] cgroup: Unknown subsys name 'cpuset' [ 28.369035][ T4691] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.516602][ T4691] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.131257][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.140843][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.141770][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.142215][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.142451][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.142766][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.143115][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.143200][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.143399][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.143553][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.143793][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.143953][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.144580][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.144701][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.145692][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.145907][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.146797][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.147257][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.147577][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.149333][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.149663][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.149856][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.159306][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.160084][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.160131][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.526223][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527987][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.528089][ T4709] bridge_slave_0: entered allmulticast mode [ 30.531080][ T4709] bridge_slave_0: entered promiscuous mode [ 30.546287][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.546330][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.546490][ T4709] bridge_slave_1: entered allmulticast mode [ 30.546921][ T4709] bridge_slave_1: entered promiscuous mode [ 30.573003][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.586032][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.607102][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.607180][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.607281][ T4703] bridge_slave_0: entered allmulticast mode [ 30.607685][ T4703] bridge_slave_0: entered promiscuous mode [ 30.617191][ T4709] team0: Port device team_slave_0 added [ 30.620072][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.620132][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.620191][ T4703] bridge_slave_1: entered allmulticast mode [ 30.620776][ T4703] bridge_slave_1: entered promiscuous mode [ 30.629908][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.634362][ T4709] team0: Port device team_slave_1 added [ 30.650181][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.657476][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.658794][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.663399][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.665297][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.665307][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.665323][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.665728][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.665793][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.665854][ T4704] bridge_slave_0: entered allmulticast mode [ 30.666273][ T4704] bridge_slave_0: entered promiscuous mode [ 30.668068][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.668109][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.668159][ T4704] bridge_slave_1: entered allmulticast mode [ 30.668601][ T4704] bridge_slave_1: entered promiscuous mode [ 30.681327][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.681355][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.681411][ T4702] bridge_slave_0: entered allmulticast mode [ 30.682209][ T4702] bridge_slave_0: entered promiscuous mode [ 30.683434][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.683458][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.683516][ T4702] bridge_slave_1: entered allmulticast mode [ 30.683981][ T4702] bridge_slave_1: entered promiscuous mode [ 30.702256][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.703193][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.707482][ T4703] team0: Port device team_slave_0 added [ 30.708291][ T4703] team0: Port device team_slave_1 added [ 30.728977][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.735976][ T4704] team0: Port device team_slave_0 added [ 30.736742][ T4704] team0: Port device team_slave_1 added [ 30.739650][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.739676][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.739691][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.740295][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.740302][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.740317][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.747194][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.753677][ T4702] team0: Port device team_slave_0 added [ 30.754861][ T4702] team0: Port device team_slave_1 added [ 30.754953][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.754981][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.755039][ T4705] bridge_slave_0: entered allmulticast mode [ 30.755464][ T4705] bridge_slave_0: entered promiscuous mode [ 30.756189][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.756214][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.756298][ T4705] bridge_slave_1: entered allmulticast mode [ 30.756678][ T4705] bridge_slave_1: entered promiscuous mode [ 30.763092][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.763982][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.782299][ T4703] hsr_slave_0: entered promiscuous mode [ 30.784173][ T4703] hsr_slave_1: entered promiscuous mode [ 30.789456][ T4709] hsr_slave_0: entered promiscuous mode [ 30.789760][ T4709] hsr_slave_1: entered promiscuous mode [ 30.789960][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.789997][ T4709] Cannot create hsr debugfs directory [ 30.790469][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.790476][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.790490][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.796098][ T4705] team0: Port device team_slave_0 added [ 30.796924][ T4705] team0: Port device team_slave_1 added [ 30.797438][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.797447][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.797460][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.800286][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.800295][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.800309][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.800845][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.800851][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.800864][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.836433][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.837822][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.842723][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.853180][ T4702] hsr_slave_0: entered promiscuous mode [ 30.854571][ T4702] hsr_slave_1: entered promiscuous mode [ 30.854800][ T4702] debugfs: 'hsr0' already exists in 'hsr' [ 30.854811][ T4702] Cannot create hsr debugfs directory [ 30.861230][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.861655][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.861685][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.874579][ T4704] hsr_slave_0: entered promiscuous mode [ 30.874913][ T4704] hsr_slave_1: entered promiscuous mode [ 30.875118][ T4704] debugfs: 'hsr0' already exists in 'hsr' [ 30.875127][ T4704] Cannot create hsr debugfs directory [ 30.912595][ T4705] hsr_slave_0: entered promiscuous mode [ 30.912905][ T4705] hsr_slave_1: entered promiscuous mode [ 30.913093][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 30.913103][ T4705] Cannot create hsr debugfs directory [ 30.990393][ T4703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.993478][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.006386][ T4703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.009069][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.009393][ T4703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.011553][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.016774][ T4703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.019094][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.034237][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.034307][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.034468][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.034505][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.041520][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.043913][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.045984][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.048997][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.053357][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.055923][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.057590][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.059702][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.081941][ T4702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.084851][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.089005][ T4702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.091875][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.098301][ T4702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.100534][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.102754][ T4702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.105380][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.110519][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.111804][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.111830][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.111923][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.111971][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.123599][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.123639][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.123727][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.123763][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.131290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.132753][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.136045][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.137794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.140498][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.142415][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.150583][ T4704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.152987][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.154920][ T4704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.157113][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.157683][ T4704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.159454][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.161582][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.166125][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.166177][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.166685][ T4704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.168433][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.180489][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.180539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.198579][ T4703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.200899][ T4703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.231891][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.237114][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.240526][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.243815][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.258285][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.258336][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.258902][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.258922][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.259524][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.259550][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.259896][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.259915][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.260775][ T4705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.262522][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.262843][ T4705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.265636][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.273950][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.288242][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.288830][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.291504][ T4705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.293323][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.293834][ T4705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.297054][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.308168][ T4702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.308202][ T4702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.315951][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.318173][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.318210][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.346808][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.346916][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.368797][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.373253][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.393294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.393347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.401237][ T4704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.403812][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.413472][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.414676][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.417554][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.417577][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.439086][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.460857][ T4703] veth0_vlan: entered promiscuous mode [ 31.467825][ T4703] veth1_vlan: entered promiscuous mode [ 31.475907][ T4703] veth0_macvtap: entered promiscuous mode [ 31.477339][ T4703] veth1_macvtap: entered promiscuous mode [ 31.489721][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.493075][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.535356][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.535583][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.535721][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.535864][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.563526][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.563563][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.583732][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.583765][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.617297][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.631702][ T4703] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.640693][ T4709] veth0_vlan: entered promiscuous mode [ 31.649561][ T4709] veth1_vlan: entered promiscuous mode [ 31.661791][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.689105][ T4709] veth0_macvtap: entered promiscuous mode [ 31.694450][ T4709] veth1_macvtap: entered promiscuous mode [ 31.704986][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.707833][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.710960][ T4702] veth0_vlan: entered promiscuous mode [ 31.716646][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.719582][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.719675][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.719702][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.719727][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.739992][ T4702] veth1_vlan: entered promiscuous mode [ 31.749918][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.779286][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.779321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.790443][ T4702] veth0_macvtap: entered promiscuous mode [ 31.791533][ T4702] veth1_macvtap: entered promiscuous mode [ 31.802627][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.810511][ T4704] veth0_vlan: entered promiscuous mode [ 31.812484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.812520][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.815376][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.822061][ T4704] veth1_vlan: entered promiscuous mode [ 31.847651][ T4704] veth0_macvtap: entered promiscuous mode [ 31.851201][ T4704] veth1_macvtap: entered promiscuous mode [ 31.855957][ T4705] veth0_vlan: entered promiscuous mode [ 31.867891][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.868908][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.875169][ T4705] veth1_vlan: entered promiscuous mode [ 31.910508][ T4705] veth0_macvtap: entered promiscuous mode [ 31.914149][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.914408][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916686][ T4705] veth1_macvtap: entered promiscuous mode [ 31.920512][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.921800][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.928704][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.928733][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.944646][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.944849][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.944961][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.945101][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.945183][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962123][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.962161][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.964722][ T4853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.965143][ T4853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.965355][ T4853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.965485][ T4853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.965503][ T4853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977130][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.977172][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.992474][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.992509][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.016208][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.017952][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.031729][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.033374][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.118567][ T4895] loop1: detected capacity change from 0 to 512 [ 32.121630][ T4895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.121674][ T4895] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.140925][ T4895] EXT4-fs error (device loop1): __ext4_iget:5592: inode #11: block 2: comm syz.1.2: invalid block [ 32.143810][ T4895] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.146023][ T4895] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2: couldn't read orphan inode 11 (err -117) [ 32.153312][ T4895] loop1: lost filesystem error report for type 5 error -117 [ 32.154155][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 32.154182][ C0] EXT4-fs (loop1): initial error at time 32: __ext4_iget:5592: inode 11: block 2 [ 32.154231][ C0] EXT4-fs (loop1): last error at time 32: ext4_orphan_get:1408 [ 32.161430][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.164848][ T4711] Bluetooth: hci4: command tx timeout [ 32.174373][ T4711] Bluetooth: hci1: command tx timeout [ 32.212200][ T4896] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 32.220249][ T4902] loop2: detected capacity change from 0 to 1024 [ 32.237353][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.244475][ T4902] EXT4-fs error (device loop2): ext4_lookup:1787: comm syz.2.3: inode #12: comm syz.2.3: iget: illegal inode # [ 32.248398][ T4711] Bluetooth: hci3: command tx timeout [ 32.248422][ T4719] Bluetooth: hci0: command tx timeout [ 32.248645][ T4711] Bluetooth: hci2: command tx timeout [ 32.285920][ T4902] EXT4-fs (loop2): Remounting filesystem read-only [ 32.984020][ T40] IPVS: starting estimator thread 0... [ 33.005938][ T4913] FAULT_INJECTION: forcing a failure. [ 33.005938][ T4913] name failslab, interval 1, probability 0, space 0, times 1 [ 33.009906][ T4913] CPU: 1 UID: 0 PID: 4913 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 33.009936][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.009944][ T4913] Call trace: [ 33.009948][ T4913] show_stack+0x2c/0x3c (C) [ 33.009969][ T4913] __dump_stack+0x30/0x40 [ 33.009984][ T4913] dump_stack_lvl+0xd8/0x12c [ 33.009997][ T4913] dump_stack+0x1c/0x28 [ 33.010009][ T4913] should_fail_ex+0x41c/0x590 [ 33.010023][ T4913] should_failslab+0xc4/0x120 [ 33.010034][ T4913] __kmalloc_noprof+0x108/0x6c8 [ 33.010042][ T4913] bitmap_zalloc+0x34/0x44 [ 33.010052][ T4913] io_alloc_file_tables+0x60/0xbc [ 33.010062][ T4913] io_sqe_files_register+0x1c8/0x630 [ 33.010071][ T4913] __arm64_sys_io_uring_register+0x84c/0x13fc [ 33.010080][ T4913] invoke_syscall+0x98/0x244 [ 33.010091][ T4913] el0_svc_common+0xec/0x23c [ 33.010100][ T4913] do_el0_svc+0x4c/0x5c [ 33.010110][ T4913] el0_svc+0x64/0x260 [ 33.010119][ T4913] el0t_64_sync_handler+0x44/0x104 [ 33.010128][ T4913] el0t_64_sync+0x198/0x19c [ 33.080301][ T4702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.096248][ T4911] IPVS: using max 59 ests per chain, 141600 per kthread [ 33.144719][ T4915] loop4: detected capacity change from 0 to 1024 [ 33.181533][ T4920] FAULT_INJECTION: forcing a failure. [ 33.181533][ T4920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.181570][ T4920] CPU: 0 UID: 0 PID: 4920 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT [ 33.181587][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.181593][ T4920] Call trace: [ 33.181597][ T4920] show_stack+0x2c/0x3c (C) [ 33.181618][ T4920] __dump_stack+0x30/0x40 [ 33.181631][ T4920] dump_stack_lvl+0xd8/0x12c [ 33.181643][ T4920] dump_stack+0x1c/0x28 [ 33.181655][ T4920] should_fail_ex+0x41c/0x590 [ 33.181669][ T4920] should_fail+0x14/0x24 [ 33.181680][ T4920] should_fail_usercopy+0x20/0x30 [ 33.181693][ T4920] _inline_copy_from_user+0x3c/0x174 [ 33.181705][ T4920] io_sqe_files_register+0x238/0x630 [ 33.181716][ T4920] __arm64_sys_io_uring_register+0x84c/0x13fc [ 33.181729][ T4920] invoke_syscall+0x98/0x244 [ 33.181741][ T4920] el0_svc_common+0xec/0x23c [ 33.181754][ T4920] do_el0_svc+0x4c/0x5c [ 33.181765][ T4920] el0_svc+0x64/0x260 [ 33.181777][ T4920] el0t_64_sync_handler+0x44/0x104 [ 33.181788][ T4920] el0t_64_sync+0x198/0x19c [ 33.248940][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 33.251215][ T4926] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 33.298677][ T4928] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 33.498064][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.271008][ T4711] Bluetooth: hci1: command tx timeout [ 34.271053][ T4711] Bluetooth: hci4: command tx timeout [ 34.324594][ T51] Bluetooth: hci0: command tx timeout [ 34.324633][ T51] Bluetooth: hci2: command tx timeout [ 34.324663][ T51] Bluetooth: hci3: command tx timeout [ 34.427200][ T4932] loop0: detected capacity change from 0 to 8 [ 34.427568][ T4932] squashfs: Unknown parameter '' [ 34.428757][ T4932] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 34.430523][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430549][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430565][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430579][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430592][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430605][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430617][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430629][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430641][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.430653][ T4816] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 34.437765][ T4816] hid-generic 0005:10CF:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 34.570633][ T4940] cgroup: Invalid name [ 34.731721][ T4932] team0 (unregistering): Port device team_slave_0 removed [ 34.736396][ T4932] team0 (unregistering): Port device team_slave_1 removed [ 34.836723][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.975973][ T4968] FAULT_INJECTION: forcing a failure. [ 34.975973][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.976014][ T4968] CPU: 0 UID: 0 PID: 4968 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT [ 34.976029][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.976035][ T4968] Call trace: [ 34.976040][ T4968] show_stack+0x2c/0x3c (C) [ 34.976059][ T4968] __dump_stack+0x30/0x40 [ 34.976073][ T4968] dump_stack_lvl+0xd8/0x12c [ 34.976083][ T4968] dump_stack+0x1c/0x28 [ 34.976093][ T4968] should_fail_ex+0x41c/0x590 [ 34.976104][ T4968] should_fail+0x14/0x24 [ 34.976114][ T4968] should_fail_usercopy+0x20/0x30 [ 34.976124][ T4968] _inline_copy_from_user+0x3c/0x174 [ 34.976133][ T4968] io_sqe_files_register+0x238/0x630 [ 34.976142][ T4968] __arm64_sys_io_uring_register+0x84c/0x13fc [ 34.976152][ T4968] invoke_syscall+0x98/0x244 [ 34.976162][ T4968] el0_svc_common+0xec/0x23c [ 34.976172][ T4968] do_el0_svc+0x4c/0x5c [ 34.976181][ T4968] el0_svc+0x64/0x260 [ 34.976191][ T4968] el0t_64_sync_handler+0x44/0x104 [ 34.976199][ T4968] el0t_64_sync+0x198/0x19c [ 35.000427][ T4966] syzkaller1: entered allmulticast mode [ 35.031134][ T4974] FAULT_INJECTION: forcing a failure. [ 35.031134][ T4974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.031174][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT [ 35.031189][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.031195][ T4974] Call trace: [ 35.031199][ T4974] show_stack+0x2c/0x3c (C) [ 35.031218][ T4974] __dump_stack+0x30/0x40 [ 35.031230][ T4974] dump_stack_lvl+0xd8/0x12c [ 35.031242][ T4974] dump_stack+0x1c/0x28 [ 35.031254][ T4974] should_fail_ex+0x41c/0x590 [ 35.031267][ T4974] should_fail+0x14/0x24 [ 35.031278][ T4974] should_fail_usercopy+0x20/0x30 [ 35.031290][ T4974] _inline_copy_from_user+0x3c/0x174 [ 35.031302][ T4974] io_sqe_files_register+0x238/0x630 [ 35.031313][ T4974] __arm64_sys_io_uring_register+0x84c/0x13fc [ 35.031325][ T4974] invoke_syscall+0x98/0x244 [ 35.031337][ T4974] el0_svc_common+0xec/0x23c [ 35.031349][ T4974] do_el0_svc+0x4c/0x5c [ 35.031361][ T4974] el0_svc+0x64/0x260 [ 35.031372][ T4974] el0t_64_sync_handler+0x44/0x104 [ 35.031383][ T4974] el0t_64_sync+0x198/0x19c [ 35.045135][ T4976] tipc: Started in network mode [ 35.045150][ T4976] tipc: Node identity 12a4c5c28f9b, cluster identity 4711 [ 35.045217][ T4976] tipc: Enabled bearer , priority 0 [ 35.045510][ T4976] syzkaller0: entered promiscuous mode [ 35.045521][ T4976] syzkaller0: entered allmulticast mode [ 35.061722][ T4978] block nbd4: Device being setup by another task [ 35.181477][ T4989] tipc: Resetting bearer [ 35.213521][ T4991] loop3: detected capacity change from 0 to 512 [ 35.221820][ T4991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.228293][ T4991] EXT4-fs error (device loop3): __ext4_iget:5592: inode #11: block 2: comm syz.3.28: invalid block [ 35.228330][ T4991] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.228504][ T4991] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.28: couldn't read orphan inode 11 (err -117) [ 35.228517][ T4991] loop3: lost filesystem error report for type 5 error -117 [ 35.229283][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.233065][ T4992] loop1: detected capacity change from 0 to 1024 [ 35.238753][ T4992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.238774][ T4992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.249924][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.256653][ T4992] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 16: comm syz.1.27: path /8/file0: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 35.260889][ T4992] EXT4-fs (loop1): Remounting filesystem read-only [ 35.288954][ T4991] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.28: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 35.592104][ T49] IPVS: starting estimator thread 0... [ 35.704250][ T4999] IPVS: using max 46 ests per chain, 110400 per kthread [ 35.739475][ T4962] block nbd4: shutting down sockets [ 35.861046][ T5002] Cannot find set identified by id 0 to match [ 35.866905][ T4975] tipc: Resetting bearer [ 35.873254][ T4975] tipc: Disabling bearer [ 35.888559][ T5002] tipc: Started in network mode [ 35.889718][ T5002] tipc: Node identity f29f70dc9fa9, cluster identity 4711 [ 35.891753][ T5002] tipc: Enabled bearer , priority 0 [ 35.894278][ T5002] syzkaller0: entered promiscuous mode [ 35.895483][ T5002] syzkaller0: entered allmulticast mode [ 35.904376][ T5002] tipc: Resetting bearer [ 35.908082][ T5001] tipc: Resetting bearer [ 35.911814][ T5001] tipc: Disabling bearer [ 35.988032][ T4702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.995537][ T5005] ======================================================= [ 35.995537][ T5005] WARNING: The mand mount option has been deprecated and [ 35.995537][ T5005] and is ignored by this kernel. Remove the mand [ 35.995537][ T5005] option from the mount to silence this warning. [ 35.995537][ T5005] ======================================================= [ 36.003022][ T5005] fuse: Bad value for 'fd' [ 36.070355][ T4703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.107238][ T5012] FAULT_INJECTION: forcing a failure. [ 36.107238][ T5012] name failslab, interval 1, probability 0, space 0, times 0 [ 36.109978][ T5012] CPU: 0 UID: 0 PID: 5012 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT [ 36.110007][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.110013][ T5012] Call trace: [ 36.110017][ T5012] show_stack+0x2c/0x3c (C) [ 36.110040][ T5012] __dump_stack+0x30/0x40 [ 36.110054][ T5012] dump_stack_lvl+0xd8/0x12c [ 36.110066][ T5012] dump_stack+0x1c/0x28 [ 36.110076][ T5012] should_fail_ex+0x41c/0x590 [ 36.110088][ T5012] should_failslab+0xc4/0x120 [ 36.110099][ T5012] __kmalloc_noprof+0x108/0x6c8 [ 36.110106][ T5012] io_cache_alloc_new+0x58/0x114 [ 36.110117][ T5012] io_rsrc_node_alloc+0x13c/0x240 [ 36.110125][ T5012] io_sqe_files_register+0x288/0x630 [ 36.110134][ T5012] __arm64_sys_io_uring_register+0x84c/0x13fc [ 36.110144][ T5012] invoke_syscall+0x98/0x244 [ 36.110154][ T5012] el0_svc_common+0xec/0x23c [ 36.110163][ T5012] do_el0_svc+0x4c/0x5c [ 36.110173][ T5012] el0_svc+0x64/0x260 [ 36.110182][ T5012] el0t_64_sync_handler+0x44/0x104 [ 36.110191][ T5012] el0t_64_sync+0x198/0x19c [ 36.162339][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162380][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162396][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162410][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162422][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162434][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162446][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.162457][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.324861][ T51] Bluetooth: hci1: command tx timeout [ 36.325370][ T4711] Bluetooth: hci4: command tx timeout [ 36.454914][ T4711] Bluetooth: hci3: command tx timeout [ 36.454945][ T4711] Bluetooth: hci2: command tx timeout [ 36.454965][ T4711] Bluetooth: hci0: command tx timeout [ 36.531375][ T5030] FAULT_INJECTION: forcing a failure. [ 36.531375][ T5030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.535414][ T5030] CPU: 0 UID: 0 PID: 5030 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT [ 36.535431][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.535437][ T5030] Call trace: [ 36.535440][ T5030] show_stack+0x2c/0x3c (C) [ 36.535466][ T5030] __dump_stack+0x30/0x40 [ 36.535480][ T5030] dump_stack_lvl+0xd8/0x12c [ 36.535493][ T5030] dump_stack+0x1c/0x28 [ 36.535504][ T5030] should_fail_ex+0x41c/0x590 [ 36.535517][ T5030] should_fail+0x14/0x24 [ 36.535529][ T5030] should_fail_usercopy+0x20/0x30 [ 36.535541][ T5030] bpf_verifier_vlog+0x478/0xbc0 [ 36.535554][ T5030] __btf_verifier_log+0xe8/0x13c [ 36.535563][ T5030] __btf_verifier_log_type+0x464/0x5e4 [ 36.535571][ T5030] btf_enum_check_meta+0x194/0x628 [ 36.535580][ T5030] btf_parse_type_sec+0x36c/0x17a8 [ 36.535589][ T5030] btf_new_fd+0x33c/0xa24 [ 36.535601][ T5030] bpf_btf_load+0x144/0x190 [ 36.535611][ T5030] __sys_bpf+0x7f0/0x82c [ 36.535620][ T5030] __arm64_sys_bpf+0xd0/0xec [ 36.535628][ T5030] invoke_syscall+0x98/0x244 [ 36.535641][ T5030] el0_svc_common+0xec/0x23c [ 36.535652][ T5030] do_el0_svc+0x4c/0x5c [ 36.535664][ T5030] el0_svc+0x64/0x260 [ 36.535674][ T5030] el0t_64_sync_handler+0x44/0x104 [ 36.535684][ T5030] el0t_64_sync+0x198/0x19c [ 36.758390][ T5049] fuse: fd is not a fuse device [ 36.761755][ T5049] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 36.780905][ T5049] loop0: detected capacity change from 0 to 2048 [ 36.792858][ T5051] loop2: detected capacity change from 0 to 512 [ 36.799128][ T5051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.811849][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.815520][ T5051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.851236][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.876409][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.002414][ T5064] loop3: detected capacity change from 0 to 512 [ 37.005967][ T5064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.012827][ T5064] EXT4-fs error (device loop3): __ext4_iget:5592: inode #11: block 2: comm syz.3.46: invalid block [ 37.018661][ T5064] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.019736][ T5064] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.46: couldn't read orphan inode 11 (err -117) [ 37.023796][ T5064] loop3: lost filesystem error report for type 5 error -117 [ 37.026450][ T5064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.137636][ T5069] FAULT_INJECTION: forcing a failure. [ 37.137636][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.137676][ T5069] CPU: 0 UID: 0 PID: 5069 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT [ 37.137687][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.137693][ T5069] Call trace: [ 37.137697][ T5069] show_stack+0x2c/0x3c (C) [ 37.137717][ T5069] __dump_stack+0x30/0x40 [ 37.137732][ T5069] dump_stack_lvl+0xd8/0x12c [ 37.137742][ T5069] dump_stack+0x1c/0x28 [ 37.137751][ T5069] should_fail_ex+0x41c/0x590 [ 37.137764][ T5069] should_fail+0x14/0x24 [ 37.137774][ T5069] should_fail_usercopy+0x20/0x30 [ 37.137784][ T5069] _inline_copy_from_user+0x3c/0x174 [ 37.137795][ T5069] io_sqe_files_register+0x238/0x630 [ 37.137804][ T5069] __arm64_sys_io_uring_register+0x84c/0x13fc [ 37.137814][ T5069] invoke_syscall+0x98/0x244 [ 37.137824][ T5069] el0_svc_common+0xec/0x23c [ 37.137834][ T5069] do_el0_svc+0x4c/0x5c [ 37.137843][ T5069] el0_svc+0x64/0x260 [ 37.137853][ T5069] el0t_64_sync_handler+0x44/0x104 [ 37.137861][ T5069] el0t_64_sync+0x198/0x19c [ 37.520842][ T5082] loop4: detected capacity change from 0 to 256 [ 37.596097][ T4705] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 37.601172][ T4705] FAT-fs (loop4): Filesystem has been set read-only [ 37.603550][ T4705] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 37.865824][ T4703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.899621][ T5092] loop3: detected capacity change from 0 to 512 [ 37.907112][ T5092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.918157][ T5092] EXT4-fs (loop3): 1 truncate cleaned up [ 37.919829][ T5092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.978188][ T5092] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.56: invalid fast symlink length 39 [ 37.986427][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.008730][ T4703] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 38.047460][ T4703] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 38.048398][ T4703] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 38.065361][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.079941][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.081771][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.083418][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.085671][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.086284][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.123636][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.184811][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.299413][ T4703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.404399][ T4711] Bluetooth: hci4: command tx timeout [ 38.435097][ T49] bridge_slave_1: left allmulticast mode [ 38.435140][ T49] bridge_slave_1: left promiscuous mode [ 38.435510][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.441964][ T49] bridge_slave_0: left allmulticast mode [ 38.443882][ T49] bridge_slave_0: left promiscuous mode [ 38.447648][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.487004][ T4711] Bluetooth: hci0: command tx timeout [ 38.487043][ T4711] Bluetooth: hci3: command tx timeout [ 38.550422][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.563781][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.571342][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.573785][ T4711] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 38.573814][ T4711] Bluetooth: Wrong link type (-22) [ 38.578785][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.580729][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.583667][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.587165][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.595377][ T49] bond0 (unregistering): Released all slaves [ 38.634017][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.637809][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.639624][ T5097] bridge_slave_0: entered allmulticast mode [ 38.642661][ T5097] bridge_slave_0: entered promiscuous mode [ 38.649335][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.654071][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.666211][ T5097] bridge_slave_1: entered allmulticast mode [ 38.666725][ T5097] bridge_slave_1: entered promiscuous mode [ 38.705785][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.708139][ T49] tipc: Left network mode [ 38.716661][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.783876][ T5141] loop0: detected capacity change from 0 to 512 [ 38.799252][ T5097] team0: Port device team_slave_0 added [ 38.799529][ T5141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.811592][ T5141] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 38.811620][ T5141] EXT4-fs: can't change dax mount option while remounting [ 38.815550][ T5097] team0: Port device team_slave_1 added [ 38.849237][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.849265][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.849288][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.858580][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.859934][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.865707][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.901367][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.923395][ T5097] hsr_slave_0: entered promiscuous mode [ 38.927708][ T5097] hsr_slave_1: entered promiscuous mode [ 38.932514][ T5097] debugfs: 'hsr0' already exists in 'hsr' [ 38.932547][ T5097] Cannot create hsr debugfs directory [ 39.018655][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.263732][ T49] hsr_slave_0: left promiscuous mode [ 39.268527][ T49] hsr_slave_1: left promiscuous mode [ 39.268871][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.268888][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.270014][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.270025][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.278806][ T49] veth1_macvtap: left promiscuous mode [ 39.280185][ T49] veth0_macvtap: left promiscuous mode [ 39.281432][ T49] veth1_vlan: left promiscuous mode [ 39.282599][ T49] veth0_vlan: left promiscuous mode [ 39.376774][ T5165] loop2: detected capacity change from 0 to 512 [ 39.379320][ T5165] ext4: Unknown parameter 'context' [ 39.470092][ T12] IPVS: starting estimator thread 0... [ 39.548805][ T49] team0 (unregistering): Port device team_slave_1 removed [ 39.554786][ T5167] IPVS: using max 59 ests per chain, 141600 per kthread [ 39.556641][ T49] team0 (unregistering): Port device team_slave_0 removed [ 39.797819][ T5097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.812396][ T5097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.817531][ T5097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.824485][ T5097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.826199][ T5097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.833952][ T5097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.835969][ T5097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.838375][ T5097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.017596][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.048897][ T5203] loop0: detected capacity change from 0 to 512 [ 40.056267][ T5203] EXT4-fs: Ignoring removed bh option [ 40.060981][ T5203] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.062965][ T5203] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 40.073790][ T5203] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.073910][ T5203] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.081751][ T5203] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 40.081802][ T5203] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 40.081900][ T5203] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.72: Failed to acquire dquot type 1 [ 40.081918][ T5203] loop0: lost filesystem error report for type 5 error -5 [ 40.086124][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.086137][ C1] EXT4-fs (loop0): last error at time 40: ext4_acquire_dquot:7069 [ 40.092791][ T5203] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 40.092822][ T5203] loop0: lost filesystem error report for type 5 error -117 [ 40.097176][ T5203] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 40.101856][ T5203] loop0: lost filesystem error report for type 5 error -117 [ 40.105279][ T5203] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 40.105310][ T5203] loop0: lost filesystem error report for type 5 error -117 [ 40.110926][ T5203] Quota error (device loop0): write_blk: dquota write failed [ 40.110993][ T5203] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 40.111022][ T5203] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.72: Failed to acquire dquot type 1 [ 40.111042][ T5203] loop0: lost filesystem error report for type 5 error -28 [ 40.118972][ T5203] Quota error (device loop0): write_blk: dquota write failed [ 40.121892][ T5203] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 40.126834][ T5203] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.72: Failed to acquire dquot type 1 [ 40.126884][ T5203] loop0: lost filesystem error report for type 5 error -28 [ 40.129863][ T5203] EXT4-fs (loop0): 1 orphan inode deleted [ 40.136024][ T5203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.151920][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.164651][ T4711] Bluetooth: hci2: command tx timeout [ 40.168906][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.171673][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.173075][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.173173][ T5121] bridge_slave_0: entered allmulticast mode [ 40.173631][ T5121] bridge_slave_0: entered promiscuous mode [ 40.177978][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.181044][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.182617][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.184141][ T5121] bridge_slave_1: entered allmulticast mode [ 40.185736][ T5121] bridge_slave_1: entered promiscuous mode [ 40.194036][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.196684][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.209949][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.235388][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.254697][ T5121] team0: Port device team_slave_0 added [ 40.255515][ T5121] team0: Port device team_slave_1 added [ 40.271045][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.286221][ T5212] Zero length message leads to an empty skb [ 40.288401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.288456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.289496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.289517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.308469][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.324357][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.324386][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.324404][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.325442][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.325449][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.325461][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.378265][ T5221] dvmrp5: entered allmulticast mode [ 40.387062][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.397962][ T5121] hsr_slave_0: entered promiscuous mode [ 40.398290][ T5121] hsr_slave_1: entered promiscuous mode [ 40.398488][ T5121] debugfs: 'hsr0' already exists in 'hsr' [ 40.398497][ T5121] Cannot create hsr debugfs directory [ 40.464872][ T5227] nvmet: adding nsid 1 to subsystem testnqn [ 40.556277][ T49] bridge_slave_1: left allmulticast mode [ 40.556316][ T49] bridge_slave_1: left promiscuous mode [ 40.556411][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.558892][ T49] bridge_slave_0: left allmulticast mode [ 40.558906][ T49] bridge_slave_0: left promiscuous mode [ 40.558983][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.572778][ T5236] loop2: detected capacity change from 0 to 512 [ 40.583735][ T5236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.592718][ T5236] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 2: comm syz.2.77: invalid block [ 40.592753][ T5236] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.592940][ T5236] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.77: couldn't read orphan inode 11 (err -117) [ 40.592955][ T5236] loop2: lost filesystem error report for type 5 error -117 [ 40.594174][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 40.594185][ C0] EXT4-fs (loop2): initial error at time 40: __ext4_iget:5592: inode 11: block 2 [ 40.594204][ C0] EXT4-fs (loop2): last error at time 40: ext4_orphan_get:1408 [ 40.602339][ T5236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.644176][ T4711] Bluetooth: hci1: command tx timeout [ 40.729457][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.022081][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.056293][ T49] bond0 (unregistering): Released all slaves [ 41.081292][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.215875][ T5121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.218549][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.219302][ T5121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.222881][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.223195][ T5121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.228872][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.229205][ T5121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.236111][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.286112][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.437777][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.714205][ T49] hsr_slave_0: left promiscuous mode [ 41.715279][ T49] hsr_slave_1: left promiscuous mode [ 41.715583][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.715601][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.716092][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.716108][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.722901][ T49] veth1_macvtap: left promiscuous mode [ 41.722939][ T49] veth0_macvtap: left promiscuous mode [ 41.722998][ T49] veth1_vlan: left promiscuous mode [ 41.723037][ T49] veth0_vlan: left promiscuous mode [ 42.072978][ T49] team0 (unregistering): Port device team_slave_1 removed [ 42.132627][ T49] team0 (unregistering): Port device team_slave_0 removed [ 42.183468][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.200809][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.209476][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.215872][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.215926][ T5293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.221347][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.221386][ T4853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.241200][ T5121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.241238][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.245221][ T4711] Bluetooth: hci2: command tx timeout [ 42.288401][ T5304] FAULT_INJECTION: forcing a failure. [ 42.288401][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 42.288442][ T5304] CPU: 1 UID: 0 PID: 5304 Comm: syz.2.84 Tainted: G L syzkaller #0 PREEMPT [ 42.288457][ T5304] Tainted: [L]=SOFTLOCKUP [ 42.288461][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.288467][ T5304] Call trace: [ 42.288470][ T5304] show_stack+0x2c/0x3c (C) [ 42.288490][ T5304] __dump_stack+0x30/0x40 [ 42.288503][ T5304] dump_stack_lvl+0xd8/0x12c [ 42.288514][ T5304] dump_stack+0x1c/0x28 [ 42.288525][ T5304] should_fail_ex+0x41c/0x590 [ 42.288538][ T5304] should_failslab+0xc4/0x120 [ 42.288550][ T5304] __kmalloc_cache_noprof+0x94/0x5fc [ 42.288559][ T5304] xfrm_policy_inexact_alloc_bin+0x7a4/0x1354 [ 42.288572][ T5304] xfrm_policy_inexact_insert+0x34/0x190 [ 42.288582][ T5304] xfrm_policy_insert+0xf8/0x6c0 [ 42.288591][ T5304] xfrm_add_policy+0x20c/0x58c [ 42.288602][ T5304] xfrm_user_rcv_msg+0x4e0/0x950 [ 42.288612][ T5304] netlink_rcv_skb+0x238/0x414 [ 42.288622][ T5304] xfrm_netlink_rcv+0x80/0x9c [ 42.288633][ T5304] netlink_unicast+0x600/0x7f8 [ 42.288641][ T5304] netlink_sendmsg+0x648/0x948 [ 42.288651][ T5304] __sock_sendmsg+0xc8/0x17c [ 42.288660][ T5304] ____sys_sendmsg+0x3d0/0x6c8 [ 42.288669][ T5304] ___sys_sendmsg+0x198/0x224 [ 42.288678][ T5304] __sys_sendmsg+0x158/0x204 [ 42.288687][ T5304] __arm64_sys_sendmsg+0x88/0x9c [ 42.288697][ T5304] invoke_syscall+0x98/0x244 [ 42.288709][ T5304] el0_svc_common+0xec/0x23c [ 42.288720][ T5304] do_el0_svc+0x4c/0x5c [ 42.288731][ T5304] el0_svc+0x64/0x260 [ 42.288742][ T5304] el0t_64_sync_handler+0x44/0x104 [ 42.288752][ T5304] el0t_64_sync+0x198/0x19c [ 42.332962][ T5097] veth0_vlan: entered promiscuous mode [ 42.345543][ T5307] loop2: detected capacity change from 0 to 128 [ 42.354039][ T5307] EXT4-fs: Ignoring removed bh option [ 42.357200][ T5097] veth1_vlan: entered promiscuous mode [ 42.377176][ T5307] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.392671][ T5097] veth0_macvtap: entered promiscuous mode [ 42.412404][ T5097] veth1_macvtap: entered promiscuous mode [ 42.422901][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.423909][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.425044][ T5307] process 'syz.2.85' launched './file1' with NULL argv: empty string added [ 42.484319][ T4853] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.484360][ T4853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.484382][ T4853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.484402][ T4853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.500588][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.500617][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.511232][ T49] IPVS: stop unused estimator thread 0... [ 42.524085][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.525200][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.541773][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 1024 [ 42.544479][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 8192 [ 42.545133][ T4709] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 42.545720][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 1024 [ 42.545891][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 8192 [ 42.546141][ T4709] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 42.546576][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 1024 [ 42.546735][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 8192 [ 42.550448][ T4709] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 42.550763][ T4709] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /27/file1/lost+found: directory fails checksum at offset 1024 [ 42.703207][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.724845][ T4711] Bluetooth: hci1: command tx timeout [ 42.800552][ T4394] 8021q: adding VLAN 0 to HW filter on device eth4 [ 42.892417][ T5349] loop5: detected capacity change from 0 to 128 [ 43.138986][ T5349] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.261814][ T5352] Injecting memory failure for pfn 0x133a0d at process virtual address 0x2050a000 [ 43.271804][ T5352] Memory failure: 0x133a0d: Sending SIGBUS to syz.5.88:5352 due to hardware memory corruption [ 43.272194][ T5352] Memory failure: 0x133a0d: recovery action for dirty LRU page: Recovered [ 43.272250][ T5352] Injecting memory failure for pfn 0x133a0c at process virtual address 0x2050b000 [ 43.348471][ T5352] Memory failure: 0x133a0c: Sending SIGBUS to syz.5.88:5352 due to hardware memory corruption [ 43.348517][ T5352] Memory failure: 0x133a0c: recovery action for dirty LRU page: Recovered [ 43.348536][ T5352] Injecting memory failure for pfn 0x133a0b at process virtual address 0x2050c000 [ 43.403748][ T5352] Memory failure: 0x133a0b: Sending SIGBUS to syz.5.88:5352 due to hardware memory corruption [ 43.403890][ T5352] Memory failure: 0x133a0b: recovery action for dirty LRU page: Recovered [ 43.403945][ T5352] Injecting memory failure for pfn 0x133a0a at process virtual address 0x2050d000 [ 43.546346][ T4709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.644159][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.681777][ T5121] veth0_vlan: entered promiscuous mode [ 43.718832][ T5121] veth1_vlan: entered promiscuous mode [ 43.783856][ T5352] Memory failure: 0x133a0a: recovery action for dirty LRU page: Recovered [ 43.789060][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.812499][ T5121] veth0_macvtap: entered promiscuous mode [ 43.813676][ T5121] veth1_macvtap: entered promiscuous mode [ 43.828604][ T5361] __nla_validate_parse: 47 callbacks suppressed [ 43.836963][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.838831][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 43.886612][ T5097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.922610][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.936090][ T5353] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.009907][ T5374] gadgetfs: bound to dummy_udc driver [ 44.017048][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.054435][ T4908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.056561][ T5353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.056727][ T5353] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.074835][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.082472][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.082949][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.083292][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.083765][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.109185][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.118671][ T4394] 8021q: adding VLAN 0 to HW filter on device eth5 [ 44.132774][ T4908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.132807][ T4908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.163643][ T4908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.163683][ T4908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.287895][ T58] bridge_slave_1: left allmulticast mode [ 44.287937][ T58] bridge_slave_1: left promiscuous mode [ 44.288035][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.289327][ T58] bridge_slave_0: left allmulticast mode [ 44.289346][ T58] bridge_slave_0: left promiscuous mode [ 44.289425][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.291279][ T58] dvmrp5: left allmulticast mode [ 44.324758][ T4711] Bluetooth: hci2: command tx timeout [ 44.438875][ T5404] binder: 5402:5404 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 44.438915][ T5404] binder: 5402:5404 ioctl c0306201 200001c0 returned -22 [ 44.439875][ T5403] binder: 5402:5403 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 44.440075][ T5403] binder: 5402:5403 ioctl c0306201 200001c0 returned -22 [ 44.501859][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.102'. [ 44.511411][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.102'. [ 44.542162][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.548172][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.568532][ T58] bond0 (unregistering): Released all slaves [ 44.579331][ T5410] vlan2: entered allmulticast mode [ 44.579367][ T5410] dummy0: entered allmulticast mode [ 44.581991][ T5410] bridge0: port 3(vlan2) entered blocking state [ 44.582718][ T5410] bridge0: port 3(vlan2) entered disabled state [ 44.584938][ T5410] vlan2: entered promiscuous mode [ 44.584960][ T5410] dummy0: entered promiscuous mode [ 44.589020][ T5405] fuse: Bad value for 'fd' [ 44.599648][ T5417] loop5: detected capacity change from 0 to 128 [ 44.622046][ T58] tipc: Left network mode [ 44.638670][ T5417] EXT4-fs (loop5): Test dummy encryption mode enabled [ 44.642127][ T5417] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.676466][ T5422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.105'. [ 44.679201][ T5417] fscrypt: AES-256-XTS using blk-crypto-fallback [ 44.770189][ T4711] Bluetooth: hci2: connection err: -111 [ 44.804581][ T4711] Bluetooth: hci1: command tx timeout [ 44.857993][ T5438] loop6: detected capacity change from 0 to 512 [ 44.862887][ T5438] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 44.875589][ T5438] EXT4-fs (loop6): 1 truncate cleaned up [ 44.876349][ T5438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.883416][ T5438] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 44.915757][ T58] hsr_slave_0: left promiscuous mode [ 44.920105][ T58] hsr_slave_1: left promiscuous mode [ 44.920419][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.920438][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.926077][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.926100][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.935323][ T58] veth1_macvtap: left promiscuous mode [ 44.937580][ T58] veth0_macvtap: left promiscuous mode [ 44.938807][ T58] veth1_vlan: left promiscuous mode [ 44.939867][ T58] veth0_vlan: left promiscuous mode [ 44.956324][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.010656][ T5444] netlink: 'syz.6.107': attribute type 4 has an invalid length. [ 45.091645][ T58] team0 (unregistering): Port device team_slave_1 removed [ 45.107730][ T58] team0 (unregistering): Port device team_slave_0 removed [ 45.171356][ T4394] 8021q: adding VLAN 0 to HW filter on device eth6 [ 45.299040][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.307037][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.307141][ T5376] bridge_slave_0: entered allmulticast mode [ 45.310677][ T5376] bridge_slave_0: entered promiscuous mode [ 45.316558][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.317202][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.317318][ T5376] bridge_slave_1: entered allmulticast mode [ 45.320789][ T5376] bridge_slave_1: entered promiscuous mode [ 45.340652][ T5452] loop6: detected capacity change from 0 to 512 [ 45.474325][ T5376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.482709][ T58] IPVS: stop unused estimator thread 0... [ 45.492286][ T5097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.492947][ T5376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.539397][ T5376] team0: Port device team_slave_0 added [ 45.541620][ T5376] team0: Port device team_slave_1 added [ 45.583845][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.583876][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.583905][ T5376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.598264][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.598284][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.598308][ T5376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.637431][ T5376] hsr_slave_0: entered promiscuous mode [ 45.637771][ T5376] hsr_slave_1: entered promiscuous mode [ 45.820854][ T5376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 45.826204][ T5376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.827343][ T5376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 45.832281][ T5376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.832663][ T5376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 45.837337][ T5376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.838351][ T5376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 45.842601][ T5376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.923062][ T5376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.936159][ T5376] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.941269][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.941311][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.945645][ T4908] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.945682][ T4908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.167326][ T4711] Bluetooth: hci4: command tx timeout [ 46.367114][ T5376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.377119][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.113'. [ 46.431350][ T4711] Bluetooth: hci2: command tx timeout [ 46.431463][ T5503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.114'. [ 46.438872][ T4394] 8021q: adding VLAN 0 to HW filter on device eth7 [ 46.641863][ T5376] veth0_vlan: entered promiscuous mode [ 46.643636][ T5376] veth1_vlan: entered promiscuous mode [ 46.649174][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 46.674727][ T5536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 46.680975][ T5376] veth0_macvtap: entered promiscuous mode [ 46.688129][ T5376] veth1_macvtap: entered promiscuous mode [ 46.703293][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.716974][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.779925][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.779968][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.784441][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.785003][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.785020][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.785034][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.810492][ T5293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.810527][ T5293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.816764][ T5548] syzkaller0: entered promiscuous mode [ 46.816801][ T5548] syzkaller0: entered allmulticast mode [ 46.824629][ T5548] netlink: 64 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.824658][ T5548] netlink: 64 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.876850][ T5554] loop7: detected capacity change from 0 to 512 [ 46.880718][ T5554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 46.883448][ T5554] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 46.894375][ T4711] Bluetooth: hci1: command tx timeout [ 46.960895][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8 [ 47.037609][ C1] Unknown status report in ack skb [ 47.147643][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.151116][ T5571] FAULT_INJECTION: forcing a failure. [ 47.151116][ T5571] name failslab, interval 1, probability 0, space 0, times 0 [ 47.151156][ T5571] CPU: 0 UID: 0 PID: 5571 Comm: syz.7.125 Tainted: G L syzkaller #0 PREEMPT [ 47.151173][ T5571] Tainted: [L]=SOFTLOCKUP [ 47.151177][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.151183][ T5571] Call trace: [ 47.151186][ T5571] show_stack+0x2c/0x3c (C) [ 47.151206][ T5571] __dump_stack+0x30/0x40 [ 47.151219][ T5571] dump_stack_lvl+0xd8/0x12c [ 47.151231][ T5571] dump_stack+0x1c/0x28 [ 47.151242][ T5571] should_fail_ex+0x41c/0x590 [ 47.151255][ T5571] should_failslab+0xc4/0x120 [ 47.151268][ T5571] __kmalloc_noprof+0x108/0x6c8 [ 47.151276][ T5571] tomoyo_realpath_from_path+0xbc/0x4dc [ 47.151288][ T5571] tomoyo_path_number_perm+0x1f0/0x500 [ 47.151298][ T5571] tomoyo_file_ioctl+0x2c/0x3c [ 47.151308][ T5571] security_file_ioctl+0xdc/0x2b0 [ 47.151318][ T5571] __arm64_sys_ioctl+0xb0/0x1cc [ 47.151331][ T5571] invoke_syscall+0x98/0x244 [ 47.151343][ T5571] el0_svc_common+0xec/0x23c [ 47.151355][ T5571] do_el0_svc+0x4c/0x5c [ 47.151366][ T5571] el0_svc+0x64/0x260 [ 47.151377][ T5571] el0t_64_sync_handler+0x44/0x104 [ 47.151386][ T5571] el0t_64_sync+0x198/0x19c [ 47.151401][ T5571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 47.179896][ T5569] nfs: Unknown parameter 'ntext' [ 47.230092][ T5578] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 47.230124][ T5578] overlayfs: missing 'lowerdir' [ 47.315484][ T5584] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 47.319511][ T5584] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 47.427727][ T5604] loop6: detected capacity change from 0 to 512 [ 47.445936][ T5604] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 47.452906][ T5604] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 2: comm syz.6.131: invalid block [ 47.452957][ T5604] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.456121][ T5604] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.131: couldn't read orphan inode 11 (err -117) [ 47.456144][ T5604] loop6: lost filesystem error report for type 5 error -117 [ 47.460227][ T5604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.471682][ T30] audit: type=1326 audit(47.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5602 comm="syz.0.130" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9792a8 code=0x0 [ 47.479400][ T4394] 8021q: adding VLAN 0 to HW filter on device eth9 [ 48.139520][ T5632] FAULT_INJECTION: forcing a failure. [ 48.139520][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 48.139564][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.5.136 Tainted: G L syzkaller #0 PREEMPT [ 48.139580][ T5632] Tainted: [L]=SOFTLOCKUP [ 48.139584][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.139590][ T5632] Call trace: [ 48.139593][ T5632] show_stack+0x2c/0x3c (C) [ 48.139614][ T5632] __dump_stack+0x30/0x40 [ 48.139629][ T5632] dump_stack_lvl+0xd8/0x12c [ 48.139640][ T5632] dump_stack+0x1c/0x28 [ 48.139651][ T5632] should_fail_ex+0x41c/0x590 [ 48.139664][ T5632] should_failslab+0xc4/0x120 [ 48.139677][ T5632] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 48.139686][ T5632] kstrdup+0x50/0x104 [ 48.139694][ T5632] kstrdup_const+0x54/0x6c [ 48.139702][ T5632] alloc_vfsmnt+0xf8/0x474 [ 48.139712][ T5632] vfs_create_mount+0x68/0x140 [ 48.139722][ T5632] fc_mount+0x98/0xac [ 48.139731][ T5632] do_new_mount+0x2a4/0x538 [ 48.139741][ T5632] path_mount+0x5f0/0xa88 [ 48.139751][ T5632] do_mount+0xe8/0x148 [ 48.139761][ T5632] __arm64_sys_mount+0x33c/0x388 [ 48.139772][ T5632] invoke_syscall+0x98/0x244 [ 48.139783][ T5632] el0_svc_common+0xec/0x23c [ 48.139794][ T5632] do_el0_svc+0x4c/0x5c [ 48.139805][ T5632] el0_svc+0x64/0x260 [ 48.139816][ T5632] el0t_64_sync_handler+0x44/0x104 [ 48.139826][ T5632] el0t_64_sync+0x198/0x19c [ 48.246164][ T4711] Bluetooth: hci4: command tx timeout [ 48.315589][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.349412][ T5640] loop0: detected capacity change from 0 to 512 [ 48.363582][ T5640] EXT4-fs: Ignoring removed oldalloc option [ 48.369145][ T4394] 8021q: adding VLAN 0 to HW filter on device eth10 [ 48.386563][ T5640] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.400724][ T5640] EXT4-fs (loop0): 1 truncate cleaned up [ 48.401336][ T5640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.465091][ T5640] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.139: invalid indirect mapped block 4294901760 (level 0) [ 48.486720][ T5640] EXT4-fs (loop0): Remounting filesystem read-only [ 48.519693][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.559871][ T5647] 9p: Could not find request transport: fd [ 48.699769][ T5662] fuse: Bad value for 'fd' [ 48.773723][ T5662] loop5: detected capacity change from 0 to 512 [ 48.776577][ T5662] EXT4-fs: Ignoring removed bh option [ 48.789870][ T5662] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.789912][ T5662] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 48.789924][ T5662] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.142: Corrupt directory, running e2fsck is recommended [ 48.794609][ T5662] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 48.794655][ T5662] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.142: corrupted in-inode xattr: e_name out of bounds [ 48.794673][ T5662] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.795870][ T5662] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.142: couldn't read orphan inode 15 (err -117) [ 48.795894][ T5662] loop5: lost filesystem error report for type 5 error -117 [ 48.796482][ T5662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.898597][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.953836][ T4394] 8021q: adding VLAN 0 to HW filter on device eth11 [ 49.273753][ T5689] loop6: detected capacity change from 0 to 512 [ 49.291811][ T5689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.376980][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.443105][ T5697] loop6: detected capacity change from 0 to 128 [ 49.447794][ T5697] Invalid source name [ 49.447816][ T5697] UBIFS error (pid: 5697): cannot open "/dev/loop6", error -22 [ 49.666522][ T5714] loop6: detected capacity change from 0 to 512 [ 49.684757][ T5714] ext4: Unknown parameter 'uid' [ 49.711128][ T5714] netlink: 'syz.6.151': attribute type 3 has an invalid length. [ 49.898812][ T5717] fuse: Bad value for 'rootmode' [ 50.037763][ T5729] loop5: detected capacity change from 0 to 512 [ 50.041414][ T5729] EXT4-fs: Invalid want_extra_isize 2047 [ 50.337069][ T4711] Bluetooth: hci4: command tx timeout [ 50.394669][ T5748] __nla_validate_parse: 1 callbacks suppressed [ 50.394731][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.160'. [ 50.425439][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.161'. [ 50.489144][ T5745] tipc: Enabling of bearer rejected, failed to enable media [ 50.548763][ T5751] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 50.548788][ T5751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 50.552268][ T5751] vhci_hcd vhci_hcd.0: Device attached [ 50.675772][ T5763] loop5: detected capacity change from 0 to 128 [ 50.677737][ T5763] EXT4-fs (loop5): Test dummy encryption mode enabled [ 50.696691][ T5763] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.814265][ T4794] usb 15-1: SetAddress Request (2) to port 0 [ 50.814334][ T4794] usb 15-1: new SuperSpeed USB device number 2 using vhci_hcd [ 50.926497][ T5751] loop6: detected capacity change from 0 to 32768 [ 50.950280][ T5751] loop6: p1 p3 < > [ 51.278824][ T5759] vhci_hcd: connection reset by peer [ 51.280118][ T40] vhci_hcd vhci_hcd.6: stop threads [ 51.280323][ T40] vhci_hcd vhci_hcd.6: release socket [ 51.280730][ T40] vhci_hcd vhci_hcd.6: disconnect device [ 51.350812][ T5781] Soft offlining pfn 0x14021f at process virtual address 0x20000000 [ 51.376273][ T5781] Soft offlining pfn 0x14140c at process virtual address 0x20001000 [ 51.475299][ T5781] Soft offlining pfn 0x133af4 at process virtual address 0x20002000 [ 51.708316][ T5766] syzkaller0: entered promiscuous mode [ 51.710206][ T5766] syzkaller0: entered allmulticast mode [ 52.048375][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 52.050732][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 52.052681][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 52.056032][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 52.058167][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 52.266399][ T5803] loop6: detected capacity change from 0 to 512 [ 52.280403][ T5803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 52.302273][ T5803] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 2: comm syz.6.168: invalid block [ 52.302316][ T5803] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.314115][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 52.314148][ C1] EXT4-fs (loop6): initial error at time 52: __ext4_iget:5592: inode 11: block 2 [ 52.314196][ C1] EXT4-fs (loop6): last error at time 52: __ext4_iget:5592: inode 11: block 2 [ 52.314309][ T5803] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.168: couldn't read orphan inode 11 (err -117) [ 52.314329][ T5803] loop6: lost filesystem error report for type 5 error -117 [ 52.329942][ T5806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 52.350369][ T5803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.405268][ T4711] Bluetooth: hci4: command tx timeout [ 52.537103][ T5097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.713670][ T279] IPVS: starting estimator thread 0... [ 52.867205][ T5828] IPVS: using max 58 ests per chain, 139200 per kthread [ 52.898076][ T4908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.913992][ T5833] loop0: detected capacity change from 0 to 512 [ 52.919661][ T5833] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.919891][ T5833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.921953][ T5833] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 52.924530][ T5833] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 52.929851][ T5833] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #16: comm syz.0.171: corrupted xattr block 31: invalid header [ 52.929883][ T5833] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.930531][ T5833] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 52.930595][ T5833] EXT4-fs (loop0): 1 orphan inode deleted [ 52.931510][ T5833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.992570][ T4908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.046516][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.048576][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.050702][ T5789] bridge_slave_0: entered allmulticast mode [ 53.060241][ T5789] bridge_slave_0: entered promiscuous mode [ 53.066214][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.068472][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.071547][ T5789] bridge_slave_1: entered allmulticast mode [ 53.076847][ T5789] bridge_slave_1: entered promiscuous mode [ 53.102075][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.144620][ T4908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.180590][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.198360][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.233461][ T4908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.292108][ T5789] team0: Port device team_slave_0 added [ 53.298265][ T5789] team0: Port device team_slave_1 added [ 53.375824][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.389896][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.391599][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.399963][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.406170][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.407855][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.436611][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.477298][ T5789] hsr_slave_0: entered promiscuous mode [ 53.477636][ T5789] hsr_slave_1: entered promiscuous mode [ 53.477818][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 53.477828][ T5789] Cannot create hsr debugfs directory [ 53.698016][ T5853] lo: entered allmulticast mode [ 53.781642][ T5857] Injecting memory failure for pfn 0x133c1a at process virtual address 0x20ffe000 [ 53.786047][ T5857] Memory failure: 0x133c1a: keeping poisoned page in swap cache [ 53.786177][ T5857] Memory failure: 0x133c1a: recovery action for clean swapcache page: Recovered [ 53.786193][ T5857] Injecting memory failure for pfn 0x133c1c at process virtual address 0x20fff000 [ 53.786238][ T5857] Memory failure: 0x133c1c: Sending SIGBUS to syz.5.177:5857 due to hardware memory corruption [ 53.786268][ T5857] Memory failure: 0x133c1c: recovery action for dirty LRU page: Recovered [ 53.797973][ T5857] loop5: detected capacity change from 0 to 1024 [ 53.798622][ T5857] EXT4-fs: Ignoring removed orlov option [ 53.798633][ T5857] ext4: Unknown parameter 'obj_user' [ 53.829472][ T5853] lo: left allmulticast mode [ 53.839407][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'. [ 53.839452][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'. [ 53.858546][ T5859] loop5: detected capacity change from 0 to 2048 [ 53.858891][ T5859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.893189][ T5859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.910499][ T4908] bridge_slave_1: left allmulticast mode [ 53.910555][ T4908] bridge_slave_1: left promiscuous mode [ 53.910704][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.923282][ T4908] bridge_slave_0: left allmulticast mode [ 53.928357][ T4908] bridge_slave_0: left promiscuous mode [ 53.930176][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.980257][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.084323][ T4711] Bluetooth: hci5: command tx timeout [ 54.130735][ T4908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.143551][ T4908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.178226][ T4908] bond0 (unregistering): Released all slaves [ 54.326983][ T5878] loop6: detected capacity change from 0 to 512 [ 54.331612][ T5878] ext4: Unknown parameter 'appraise' [ 54.392999][ T5884] loop5: detected capacity change from 0 to 512 [ 54.395995][ T5884] ext3: Unknown parameter 'appraise_type' [ 54.412268][ T5789] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 54.418881][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.420701][ T5789] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 54.423605][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.424829][ T5789] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 54.430419][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.430741][ T5789] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 54.444268][ T5885] loop0: detected capacity change from 0 to 1024 [ 54.450897][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.475903][ T5885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.480798][ T5885] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.501972][ T5885] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.540514][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.547252][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.555647][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.555681][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.560967][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.561024][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.567977][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.568031][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.586787][ T5885] overlayfs: d_ino too big (., ino=4611686018427387916, xinobits=3) [ 54.589071][ T5885] overlayfs: d_ino too big (.., ino=4611686018427387906, xinobits=3) [ 54.591768][ T5885] overlayfs: d_ino too big (51, ino=9223372036854776107, xinobits=3) [ 54.595795][ T5885] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 54.609875][ T5885] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 54.610822][ T5885] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 54.610919][ T5885] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 54.611018][ T5885] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 54.611129][ T5885] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 54.611249][ T5885] overlayfs: d_ino too big (file0, ino=4611686018427387917, xinobits=3) [ 54.679637][ T4908] hsr_slave_0: left promiscuous mode [ 54.704245][ T4908] hsr_slave_1: left promiscuous mode [ 54.704616][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.704628][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.719139][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.719172][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.726748][ T4908] veth1_macvtap: left promiscuous mode [ 54.726795][ T4908] veth0_macvtap: left promiscuous mode [ 54.726840][ T4908] veth1_vlan: left promiscuous mode [ 54.726906][ T4908] veth0_vlan: left promiscuous mode [ 54.728631][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.880056][ T5925] ip_tables: iptables: counters copy to user failed while replacing table [ 54.988314][ T4908] team0 (unregistering): Port device team_slave_1 removed [ 54.993437][ T4908] team0 (unregistering): Port device team_slave_0 removed [ 55.089090][ T4394] 8021q: adding VLAN 0 to HW filter on device eth12 [ 55.177511][ T5937] loop0: detected capacity change from 0 to 128 [ 55.185822][ T5937] vfat: Bad value for 'time_offset' [ 55.298548][ T5940] 9p: Could not find request transport: fd¬rfdno=0x0000000000000004 [ 55.412006][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.471417][ T4908] IPVS: stop unused estimator thread 0... [ 55.551615][ T5983] loop6: detected capacity change from 0 to 512 [ 55.558695][ T5983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 55.560560][ T5983] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 2: comm syz.6.196: invalid block [ 55.560585][ T5983] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.560752][ T5983] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.196: couldn't read orphan inode 11 (err -117) [ 55.560765][ T5983] loop6: lost filesystem error report for type 5 error -117 [ 55.561335][ T5983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.651421][ T5789] veth0_vlan: entered promiscuous mode [ 55.671682][ T5789] veth1_vlan: entered promiscuous mode [ 55.682623][ T5789] veth0_macvtap: entered promiscuous mode [ 55.694297][ T5789] veth1_macvtap: entered promiscuous mode [ 55.701692][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.704288][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.808934][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.808964][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.814212][ T4908] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.814537][ T4908] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.814567][ T4908] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.814588][ T4908] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.835650][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.835683][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.844384][ T4794] usb 15-1: device descriptor read/8, error -110 [ 55.846095][ T6000] loop5: detected capacity change from 0 to 128 [ 55.960702][ T6013] loop8: detected capacity change from 0 to 256 [ 56.136231][ T6024] syz.8.200 uses obsolete (PF_INET,SOCK_PACKET) [ 56.167113][ T4711] Bluetooth: hci5: command tx timeout [ 56.220407][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 56.236815][ T4794] usb usb15-port1: attempt power cycle [ 56.293399][ T4394] 8021q: adding VLAN 0 to HW filter on device eth13 [ 56.423205][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 56.466183][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.811302][ T4794] usb usb15-port1: unable to enumerate USB device [ 56.940509][ T6084] FAULT_INJECTION: forcing a failure. [ 56.940509][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 56.943339][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.5.213 Tainted: G L syzkaller #0 PREEMPT [ 56.943367][ T6084] Tainted: [L]=SOFTLOCKUP [ 56.943371][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.943377][ T6084] Call trace: [ 56.943381][ T6084] show_stack+0x2c/0x3c (C) [ 56.943401][ T6084] __dump_stack+0x30/0x40 [ 56.943414][ T6084] dump_stack_lvl+0xd8/0x12c [ 56.943426][ T6084] dump_stack+0x1c/0x28 [ 56.943437][ T6084] should_fail_ex+0x41c/0x590 [ 56.943450][ T6084] should_failslab+0xc4/0x120 [ 56.943462][ T6084] kmem_cache_alloc_noprof+0x94/0x5d4 [ 56.943475][ T6084] alloc_empty_file+0x6c/0x1cc [ 56.943484][ T6084] alloc_file+0x58/0x98 [ 56.943492][ T6084] alloc_file_pseudo+0xe0/0x198 [ 56.943500][ T6084] sock_alloc_file+0xb4/0x1ac [ 56.943510][ T6084] __sys_socket+0x90/0xec [ 56.943518][ T6084] __arm64_sys_socket+0x84/0x9c [ 56.943527][ T6084] invoke_syscall+0x98/0x244 [ 56.943539][ T6084] el0_svc_common+0xec/0x23c [ 56.943551][ T6084] do_el0_svc+0x4c/0x5c [ 56.943562][ T6084] el0_svc+0x64/0x260 [ 56.943573][ T6084] el0t_64_sync_handler+0x44/0x104 [ 56.943583][ T6084] el0t_64_sync+0x198/0x19c [ 56.956674][ T6088] loop8: detected capacity change from 0 to 512 [ 56.985237][ T6088] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 56.999320][ T6088] EXT4-fs error (device loop8): __ext4_iget:5592: inode #11: block 2: comm syz.8.214: invalid block [ 56.999362][ T6088] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.999989][ T6088] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.214: couldn't read orphan inode 11 (err -117) [ 57.000009][ T6088] loop8: lost filesystem error report for type 5 error -117 [ 57.000579][ T6088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.144397][ T4394] 8021q: adding VLAN 0 to HW filter on device eth14 [ 57.212575][ T5789] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.271869][ T6116] capability: warning: `syz.0.218' uses deprecated v2 capabilities in a way that may be insecure [ 57.530419][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.224'. [ 57.540988][ T4394] 8021q: adding VLAN 0 to HW filter on device eth15 [ 57.645094][ T6151] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 57.647582][ T6151] EXT4-fs (loop0): 1 truncate cleaned up [ 57.648050][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.707546][ T6155] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 57.711460][ T6155] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 2: comm syz.6.227: invalid block [ 57.711509][ T6155] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.714112][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 57.714136][ C0] EXT4-fs (loop6): initial error at time 57: __ext4_iget:5592: inode 11: block 2 [ 57.714200][ C0] EXT4-fs (loop6): last error at time 57: __ext4_iget:5592: inode 11: block 2 [ 57.714651][ T6155] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.227: couldn't read orphan inode 11 (err -117) [ 57.714682][ T6155] loop6: lost filesystem error report for type 5 error -117 [ 57.725944][ T6155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.755682][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.227'. [ 58.238494][ T6167] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.226: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 58.244701][ T51] Bluetooth: hci5: command tx timeout [ 58.266147][ T6150] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.226: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 58.273240][ T6166] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.273275][ T6166] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 58.274482][ T6150] overlayfs: failed to resolve './bus': -2 [ 58.290412][ T6166] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.290463][ T6166] System zones: 0-2, 18-18, 34-35 [ 58.291224][ T6166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.400313][ T5097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.451243][ T4704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.459325][ T6174] netlink: 48 bytes leftover after parsing attributes in process `syz.5.229'. [ 58.510791][ T6174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.229'. [ 58.535734][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.648656][ T6196] capability: warning: `syz.0.235' uses 32-bit capabilities (legacy support in use) [ 58.713412][ T6201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.723356][ T6201] EXT4-fs (loop6): invalid inodes per group: 32 [ 58.725791][ T6200] netlink: 'syz.0.237': attribute type 15 has an invalid length. [ 58.725808][ T6200] netlink: 11706 bytes leftover after parsing attributes in process `syz.0.237'. [ 58.728355][ T6200] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 58.728367][ T6200] netlink: 'syz.0.237': attribute type 5 has an invalid length. [ 58.728377][ T6200] netlink: 'syz.0.237': attribute type 6 has an invalid length. [ 58.728385][ T6200] netlink: 'syz.0.237': attribute type 7 has an invalid length. [ 58.728392][ T6200] netlink: 'syz.0.237': attribute type 11 has an invalid length. [ 58.728400][ T6200] netlink: 'syz.0.237': attribute type 15 has an invalid length. [ 58.728407][ T6200] netlink: 'syz.0.237': attribute type 16 has an invalid length. [ 58.728414][ T6200] netlink: 'syz.0.237': attribute type 21 has an invalid length. [ 58.728420][ T6200] netlink: 'syz.0.237': attribute type 25 has an invalid length. [ 58.842063][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.6.239'. [ 58.988812][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988853][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988877][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988889][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988900][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988910][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988919][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988935][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988945][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988955][ T6222] tc action pedit 'at' offset 19 out of bounds [ 58.988975][ T6222] 0: reclassify loop, rule prio 0, protocol 800 [ 59.227484][ T6243] set_capacity_and_notify: 4 callbacks suppressed [ 59.227525][ T6243] loop6: detected capacity change from 0 to 512 [ 59.227910][ T6243] EXT4-fs: quotafile must be on filesystem root [ 59.314657][ T4816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.333630][ T6251] loop6: detected capacity change from 0 to 512 [ 59.366967][ T6251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.452865][ T4816] usb 1-1: device descriptor read/64, error -71 [ 59.509162][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.555128][ T6265] loop8: detected capacity change from 0 to 512 [ 59.558466][ T6265] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 59.566199][ T6265] EXT4-fs error (device loop8): __ext4_iget:5592: inode #11: block 2: comm syz.8.245: invalid block [ 59.566228][ T6265] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.571246][ T6265] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.245: couldn't read orphan inode 11 (err -117) [ 59.571281][ T6265] loop8: lost filesystem error report for type 5 error -117 [ 59.575715][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 59.575731][ C1] EXT4-fs (loop8): initial error at time 59: __ext4_iget:5592: inode 11: block 2 [ 59.575753][ C1] EXT4-fs (loop8): last error at time 59: ext4_orphan_get:1408 [ 59.582280][ T6265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.725107][ T4816] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 59.854551][ T4816] usb 1-1: device descriptor read/64, error -71 [ 59.884402][ T1377] IPVS: starting estimator thread 0... [ 59.969693][ T4816] usb usb1-port1: attempt power cycle [ 59.976351][ T6274] IPVS: using max 43 ests per chain, 103200 per kthread [ 60.314442][ T4816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.334459][ T51] Bluetooth: hci5: command tx timeout [ 60.339337][ T4816] usb 1-1: device descriptor read/8, error -71 [ 60.400699][ T5789] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.560231][ T6290] warning: `syz.8.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.574168][ T4816] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.595100][ T4816] usb 1-1: device descriptor read/8, error -71 [ 60.601498][ T6289] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 60.625970][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 60.626016][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 60.706039][ T4816] usb usb1-port1: unable to enumerate USB device [ 60.708393][ T30] audit: type=1326 audit(60.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6307 comm="syz.8.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c3792a8 code=0x0 [ 60.798146][ T6311] loop6: detected capacity change from 0 to 512 [ 60.838751][ T6311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.980249][ T6303] loop5: detected capacity change from 0 to 512 [ 61.010817][ T6318] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.146015][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.609797][ T6348] loop5: detected capacity change from 0 to 512 [ 61.634838][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.644312][ T6350] loop8: detected capacity change from 0 to 128 [ 61.655913][ T6350] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.735619][ T5789] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.952900][ T6381] tipc: Started in network mode [ 61.954560][ T6381] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 62.067449][ T6387] dvmrp0: entered allmulticast mode [ 62.067816][ T6399] binder: tried to use weak ref as strong ref [ 62.067835][ T6399] binder: 6383:6399 Acquire 1 refcount change on invalid ref 0 ret -22 [ 62.073243][ T6400] loop5: detected capacity change from 0 to 512 [ 62.132980][ T6407] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.301692][ T6416] loop6: detected capacity change from 0 to 1024 [ 62.346304][ T6418] loop8: detected capacity change from 0 to 257 [ 62.909495][ T6430] overlayfs: failed to set uuid (/bus, err=-28); falling back to uuid=null. [ 63.065536][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.068212][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.070387][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.073301][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.075878][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.190401][ T30] audit: type=1400 audit(63.170:4): lsm=SMACK fn=smack_inode_setxattr action=denied subject="w" object="_" requested=w pid=6438 comm="syz.6.272" name="consoles" dev="proc" ino=4026531981 [ 63.202775][ T6448] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.273: corrupted in-inode xattr: invalid ea_ino [ 63.202809][ T6448] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.206935][ T6448] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.273: couldn't read orphan inode 15 (err -117) [ 63.206955][ T6448] loop0: lost filesystem error report for type 5 error -117 [ 63.299448][ T6451] binder: 6449:6451 tried to acquire reference to desc 0, got 1 instead [ 63.319953][ T6447] overlayfs: workdir and upperdir must reside under the same mount [ 63.429219][ T6473] binder: 6449:6473 ioctl 80685600 20000580 returned -22 [ 63.449382][ T6473] EXT4-fs error (device loop8): __ext4_iget:5592: inode #11: block 1: comm syz.8.274: invalid block [ 63.449422][ T6473] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.453933][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.464115][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 63.464145][ C1] EXT4-fs (loop8): initial error at time 63: __ext4_iget:5592: inode 11: block 1 [ 63.464195][ C1] EXT4-fs (loop8): last error at time 63: __ext4_iget:5592: inode 11: block 1 [ 63.470528][ T6473] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.274: couldn't read orphan inode 11 (err -117) [ 63.470593][ T6473] loop8: lost filesystem error report for type 5 error -117 [ 63.495590][ T5293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.559425][ T6488] ------------[ cut here ]------------ [ 63.559438][ T6488] WARNING: block/blk-settings.c:497 at blk_validate_limits+0x1174/0x1c88, CPU#1: syz.0.276/6488 [ 63.562392][ T6488] Modules linked in: [ 63.563167][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz.0.276 Tainted: G L syzkaller #0 PREEMPT [ 63.565175][ T6488] Tainted: [L]=SOFTLOCKUP [ 63.566028][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.568020][ T6488] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 63.569508][ T6488] pc : blk_validate_limits+0x1174/0x1c88 [ 63.570596][ T6488] lr : blk_validate_limits+0x1174/0x1c88 [ 63.571721][ T6488] sp : ffff800095b36e20 [ 63.572491][ T6488] x29: ffff800095b36e70 x28: 1ffff00012b66e0a x27: 1ffff00012b66df9 [ 63.574015][ T6488] x26: dfff800000000000 x25: 1ffff00012b66df9 x24: 0000000000000000 [ 63.575591][ T6488] x23: 00000000ffffffff x22: ffff800095b37050 x21: 0000000000000a00 [ 63.577139][ T6488] x20: 0000000000001000 x19: ffff800095b36fa0 x18: 0000000000000000 [ 63.578713][ T6488] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 63.580251][ T6488] x14: ffff80008b0df2b0 x13: 0000000000000001 x12: 0000000000000003 [ 63.581744][ T6488] x11: 0000000000001000 x10: 0000000000010000 x9 : 0000000000000000 [ 63.583233][ T6488] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 63.584733][ T6488] x5 : ffff80008ab64630 x4 : 0000000000000008 x3 : ffff8000817c89f4 [ 63.586232][ T6488] x2 : 00000000ffffffff x1 : ffff0000ccd15880 x0 : 0000000000000000 [ 63.587762][ T6488] Call trace: [ 63.588371][ T6488] blk_validate_limits+0x1174/0x1c88 (P) [ 63.589446][ T6488] queue_limits_commit_update+0x90/0x348 [ 63.590494][ T6488] loop_configure+0x6fc/0xbb8 [ 63.591366][ T6488] lo_ioctl+0x7a8/0x1740 [ 63.592141][ T6488] blkdev_ioctl+0x574/0x904 [ 63.592980][ T6488] __arm64_sys_ioctl+0x154/0x1cc [ 63.593903][ T6488] invoke_syscall+0x98/0x244 [ 63.594751][ T6488] el0_svc_common+0xec/0x23c [ 63.595640][ T6488] do_el0_svc+0x4c/0x5c [ 63.596413][ T6488] el0_svc+0x64/0x260 [ 63.597155][ T6488] el0t_64_sync_handler+0x44/0x104 [ 63.598085][ T6488] el0t_64_sync+0x198/0x19c [ 63.598879][ T6488] irq event stamp: 352 [ 63.599591][ T6488] hardirqs last enabled at (351): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 63.601400][ T6488] hardirqs last disabled at (352): [] el1_brk64+0x20/0x54 [ 63.602890][ T6488] softirqs last enabled at (304): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 63.604694][ T6488] softirqs last disabled at (302): [] fpsimd_restore_current_state+0x44/0x9c8 [ 63.606484][ T6488] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.619496][ T4815] binder: release 6449:6451 transaction 7 out, still active [ 63.643053][ T4815] binder: send failed reply for transaction 7, target dead [ 63.681086][ T6446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.681562][ T6471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.720553][ T6488] could not allocate digest TFM handle sha512-arm64 [ 63.762945][ T5293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.775819][ T6492] could not allocate digest TFM handle sha512-arm64 [ 63.931457][ T5293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.984698][ T5293] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.160228][ T5293] bridge_slave_1: left allmulticast mode [ 64.160266][ T5293] bridge_slave_1: left promiscuous mode [ 64.160364][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.163181][ T5293] bridge_slave_0: left allmulticast mode [ 64.163194][ T5293] bridge_slave_0: left promiscuous mode [ 64.163260][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.231630][ T6479] EXT4-fs unmount: 12 callbacks suppressed [ 64.231680][ T6479] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.290570][ T5293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.306071][ T5293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.346255][ T5293] bond0 (unregistering): Released all slaves [ 64.486689][ T24] cfg80211: failed to load regulatory.db [ 64.487054][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.487111][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.640876][ T5293] hsr_slave_0: left promiscuous mode [ 64.642146][ T5293] hsr_slave_1: left promiscuous mode [ 64.642395][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.642406][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.643567][ T5293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.643576][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.648965][ T5293] veth1_macvtap: left promiscuous mode [ 64.648996][ T5293] veth0_macvtap: left promiscuous mode [ 64.649054][ T5293] veth1_vlan: left promiscuous mode [ 64.649086][ T5293] veth0_vlan: left promiscuous mode [ 64.772877][ T5293] team0 (unregistering): Port device team_slave_1 removed [ 64.782429][ T5293] team0 (unregistering): Port device team_slave_0 removed [ 65.059500][ T279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.109377][ T279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.155614][ T279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.179398][ T4394] 8021q: adding VLAN 0 to HW filter on device eth16 [ 65.211352][ T279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.339734][ T4394] 8021q: adding VLAN 0 to HW filter on device eth17 [ 65.393339][ T279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.431406][ T279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.469024][ T279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.504535][ T4394] 8021q: adding VLAN 0 to HW filter on device eth19 [ 65.531676][ T279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.667034][ T279] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.674740][ T4394] 8021q: adding VLAN 0 to HW filter on device eth18 [ 65.731984][ T279] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.790926][ T279] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.822361][ T4394] 8021q: adding VLAN 0 to HW filter on device eth20 [ 65.862008][ T279] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.931270][ T279] bridge_slave_1: left allmulticast mode [ 65.931307][ T279] bridge_slave_1: left promiscuous mode [ 65.931384][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.946171][ T279] bridge_slave_0: left allmulticast mode [ 65.946198][ T279] bridge_slave_0: left promiscuous mode [ 65.946288][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.951416][ T279] bridge_slave_1: left allmulticast mode [ 65.951448][ T279] bridge_slave_1: left promiscuous mode [ 65.951530][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.957205][ T279] bridge_slave_0: left allmulticast mode [ 65.957233][ T279] bridge_slave_0: left promiscuous mode [ 65.957467][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.960367][ T279] dvmrp0: left allmulticast mode [ 65.970273][ T279] bridge_slave_1: left allmulticast mode [ 65.971714][ T279] bridge_slave_1: left promiscuous mode [ 65.973333][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.979058][ T279] bridge_slave_0: left allmulticast mode [ 65.980296][ T279] bridge_slave_0: left promiscuous mode [ 65.982170][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.088366][ T279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.097702][ T279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.125400][ T279] bond0 (unregistering): Released all slaves [ 66.161348][ T279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.185579][ T279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.196903][ T279] bond0 (unregistering): Released all slaves [ 66.218224][ T279] bond0 (unregistering): Released all slaves [ 66.267371][ T279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.277255][ T279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.305056][ T279] bond0 (unregistering): Released all slaves [ 66.307563][ T4394] 8021q: adding VLAN 0 to HW filter on device eth22 [ 66.368017][ T279] tipc: Left network mode [ 66.463239][ T4394] 8021q: adding VLAN 0 to HW filter on device eth21 [ 66.618018][ T4394] 8021q: adding VLAN 0 to HW filter on device eth23 [ 66.791014][ T4394] 8021q: adding VLAN 0 to HW filter on device eth24 [ 66.964613][ T4394] 8021q: adding VLAN 0 to HW filter on device eth26 [ 67.008360][ T279] hsr_slave_0: left promiscuous mode [ 67.011741][ T279] hsr_slave_1: left promiscuous mode [ 67.012060][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.012079][ T279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.016529][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.016541][ T279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.020836][ T279] hsr_slave_0: left promiscuous mode [ 67.022146][ T279] hsr_slave_1: left promiscuous mode [ 67.022971][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.022984][ T279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.026608][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.026644][ T279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.035227][ T279] hsr_slave_0: left promiscuous mode [ 67.036461][ T279] hsr_slave_1: left promiscuous mode [ 67.037717][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.039091][ T279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.040699][ T279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.042209][ T279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.053720][ T279] veth1_macvtap: left promiscuous mode [ 67.054940][ T279] veth0_macvtap: left promiscuous mode [ 67.055981][ T279] veth1_vlan: left promiscuous mode [ 67.057027][ T279] veth0_vlan: left promiscuous mode [ 67.058843][ T279] veth1_macvtap: left promiscuous mode [ 67.059945][ T279] veth0_macvtap: left promiscuous mode [ 67.061099][ T279] veth1_vlan: left promiscuous mode [ 67.062138][ T279] veth0_vlan: left promiscuous mode [ 67.063919][ T279] veth1_macvtap: left promiscuous mode [ 67.065904][ T279] veth0_macvtap: left promiscuous mode [ 67.067058][ T279] veth1_vlan: left promiscuous mode [ 67.068161][ T279] veth0_vlan: left promiscuous mode [ 67.236485][ T279] team0 (unregistering): Port device team_slave_1 removed [ 67.240236][ T279] team0 (unregistering): Port device team_slave_0 removed [ 67.479450][ T279] team0 (unregistering): Port device team_slave_1 removed [ 67.483157][ T279] team0 (unregistering): Port device team_slave_0 removed [ 67.547051][ T4394] 8021q: adding VLAN 0 to HW filter on device eth25 [ 67.673837][ T4394] 8021q: adding VLAN 0 to HW filter on device eth27 [ 67.801216][ T4394] 8021q: adding VLAN 0 to HW filter on device eth29 [ 67.928446][ T4394] 8021q: adding VLAN 0 to HW filter on device eth28 [ 67.952289][ T279] IPVS: stop unused estimator thread 0... [ 68.051790][ T4394] 8021q: adding VLAN 0 to HW filter on device eth30 [ 68.168458][ T4394] 8021q: adding VLAN 0 to HW filter on device eth31