last executing test programs: 1m3.677206996s ago: executing program 32 (id=42): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0xc, 0x2}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syslog(0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x1b, &(0x7f0000003900)=[{0x0, 0x700, 0x0}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r8, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000240)={0x1, 0x8, 0x5, &(0x7f0000000180)={0x1d, "2c191582abd7a297561538db088b047faa41fb5b9f502a3384d4dcc27a24233ba5"}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) fcntl$setpipe(r1, 0x407, 0x8001a0) splice(r1, 0x0, r3, 0x0, 0x200002, 0x0) read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0xffffffffffffffe2) 53.153801157s ago: executing program 33 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfe, {0x7, r1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)={0xb8, 0xfffffffffffffff5, 0x3, [{{0x0, 0x1, 0x6, 0xff, 0x10000, 0x0, {0x0, 0x7, 0xc9, 0x1ff, 0x9, 0xf1, 0x400, 0x4, 0x5, 0x4000, 0x100, r3, 0x0, 0x7, 0x81}}, {0x6, 0xffffffffffffff30, 0x9, 0xc6, '/dev/ppp\x00'}}]}, 0xb8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x230) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ftruncate(r5, 0x4a8e) ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c000200"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) fanotify_init(0x1, 0x80000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010029bd7000fedbdf258800000008000300", @ANYRES32=r9, @ANYBLOB="b3640e0d8fb92c9d5e5d040dd88b669242ce6ad96c1d0a99b9d34fce962f565570ab4099e1e1e785e2aecdb1fe14741f6defac06c5d69344c7f1d557fd446ed7b836bd3498b482f01f5c2834d1cf4701f99ebf3ca2fb46d91e636872010e1674cf377fd4c1c9899ee659687c71b3dfe45de8bb85502395e76b06acc5d68006aeda2852fd5f29935b1926c9eecb51f029"], 0x1c}, 0x1, 0x0, 0x0, 0x28004000}, 0x4048400) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") 52.744191888s ago: executing program 34 (id=134): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xc0}, 0x12040) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x30, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000480)='GPL\x00', 0x4, 0xf4, &(0x7f00000004c0)=""/244, 0x41100, 0x14, '\x00', 0x0, @fallback=0x3, r3, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x8}, 0x10, 0x0, r2, 0x4, &(0x7f0000000680)=[r3, 0xffffffffffffffff, r1, r11, r1, r2], &(0x7f00000006c0)=[{0x1, 0x5, 0x10, 0xa}, {0x5, 0x1, 0x9, 0x5}, {0x0, 0x3, 0x3, 0x7}, {0x3, 0x1, 0x10}], 0x10, 0x794}, 0x94) lseek(r2, 0x8, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$XFS_IOC_GETBMAPA(r12, 0xc020582c, &(0x7f00000007c0)={0x6, 0x4, 0x8, 0xfff, 0x5}) (async) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) r14 = syz_clone3(&(0x7f0000000a80)={0x100, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x3}, &(0x7f0000000900)=""/57, 0x39, &(0x7f0000000940)=""/246, &(0x7f0000000a40)=[r10, r8, r4, r10, r4, r4, r4], 0x7, {r3}}, 0x58) fcntl$setownex(r13, 0xf, &(0x7f0000000b00)={0x1, r14}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0x97}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000c80)=0x10) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) ioctl$XFS_IOC_GETVERSION(r16, 0x80087601, &(0x7f0000000d00)) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000d40)={0x1, 0x4}, 0x8) (async) fstat(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000e40)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000001080)=0xe8) fsetxattr$system_posix_acl(r12, &(0x7f0000000d80)='system.posix_acl_default\x00', &(0x7f00000010c0)={{}, {0x1, 0x3}, [{0x2, 0x3, r5}, {0x2, 0x7, r17}, {0x2, 0x6, r18}, {0x2, 0x2, r9}, {0x2, 0x2, r19}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x1, r7}, {0x8, 0x1, r6}], {}, {0x20, 0x1}}, 0x64, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r16, 0x84, 0x13, &(0x7f0000001140)=0x3, 0x4) io_uring_register$IORING_REGISTER_QUERY(r3, 0x23, &(0x7f0000001780)=[{&(0x7f0000001340)={&(0x7f0000001200)={0x0, &(0x7f0000001180)="fecf6ea485ded026a51d150eebcc4aaf7fb77d762967ced50dcfe640ddbd7087a476d828ed9f414c7491d903892dabbe41fe0a2bdffda9887c9b80e940cf1858c92c", 0x0, 0x42}, &(0x7f0000001240)="48dadaa184433d7f159da71e4a7e595d2401c2bb2df9d0dd34d1475dc51063383adecbda52973293c6a32238e3ba3a350874fef8442b71a9c05091cdc1a93a38eea7bfaf357ba0946a46f5201dbae205d00b79f9a7d28b003d780c8cec073c5b463715e067ac850b7a16ae1958d2fc4b9703e316d44098912252dac7e658118f920fc56d8bfbec0691870d46ac93c9e9fb8b8a5e996915312d7a01acfc65e7b75b8d6c8df9562bbb46d25b8813edc1bedee48c83d161a381b9a5dae8cca7cdb0c27d8e800b7411889eb8822d038d0263411bc8afacc03aa32067b57c878b6552136094e3368d1c4d70", 0x0, 0xe9}, &(0x7f0000001380)="8522c71e73695849b8dfbf3aee48e68bdbab2cddb108df9cdf95c537a79af5064f9302789c13b89cabf3dff82b8ec0075311d138fc77a1da5fdb4ffa6d3a7765e94a4aad384d298a32410864257194cb9cfef68c2a65910a19645ba5d9995c2680ad28cb99ef9c2c2f05134fdcb87f54c8ad", 0x0, 0x72}, {&(0x7f0000001600)={&(0x7f00000014c0)={0x0, &(0x7f0000001400)="39b0e7735d05210f023959a818779bc12cda98f4238947c224d3ca172c3613a074a268afa767c3471f23bec31c53716b72b7602f2bb2f30c6f2a5a5a083c05eb76917a137d49e0a28d9d5d0c754bd0867ee451ba053d33080c0521479018dd01978d6ae232783807cf4e75463fa3c63ac5203fd314e2d17e55bbcaf40c092f11b91b450bb06fb9a485e58a51b77f630df4384ffc0768616667521e0617c64655dda6d1a36edb80768421bd66ecddc4b004f11bddb1f754912fc513c2b506", 0x2, 0xbe}, &(0x7f0000001500)="7250cac7fe1d9c6efe147bef16f608ee3658556a2feb91e0c1f27e0b6b164e55570a5c404632d1fec3e2360122326b0918053ad34e5091a83adc811683db3f0b89ae9696b6701fbece169c058b3a0a9099e8b324713c6353aca4352bd3dd2094320713b6a08bc1666e014833529d2a48fb2e8d1543dc7dff594276ebb00802b6b331857bb7476244974c238b72e1c002555bb83cb6b5de7196678961fa25fb9dce565be7cc08a0a2a86f115dfbf6dd1f7ec98edd9421d9098cc1c5507ed93d2913fff95668c759f4c08a9e25a83e61db2aff77e06d9e3f793e42f180bb", 0x1, 0xdd}, &(0x7f0000001640)="ebaee47608d36c27dc1880631f2f064ec1f4ee4006cbcca0c79dec9b75f9e5429a4d1a580fd595c8460f752ae2d0f1ead03065fd71999db6356971", 0x1, 0x3b}, {0x0, &(0x7f0000001680)="4ccd293749c85735f3e9f2057dd96cf3ca31c9039ace7fc1b5b12db3477c2068413092e8bcd7b7ad630d71e5b1de5a3534ffe74f397258b9231af52dd662d4e8774033215f0885263c21771246655ac39582f65b1d371ae5275e932892b8367ead0a2432ebb47b7b028a308b12dd3d02d0fd0bfed0e7e112589412e4cf2c7a32c24122561dae435ff32925fff83fb3421c117a0ca35ea1669eed4da0b1744b75fe792680a98c3036822954b170035fdf371c19392687427eb89cd4ede3e90fffbc26423bc05e", 0x2, 0xc6}], 0x0) close_range(r3, r16, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r13, 0xc028564d, &(0x7f0000001800)={0x1, 0x1, [0xffffffff, 0x7, 0x1ff, 0x1000, 0x8, 0xfff, 0x2]}) fchmodat(0xffffffffffffffff, &(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001980)={0x0, 0x2, [@empty, @local]}) (async) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000019c0)={&(0x7f0000ffc000/0x1000)=nil, 0x40, 0x3, 0x4}) (async) io_uring_enter(r2, 0x3449, 0xdfd, 0x43, &(0x7f0000001a00), 0x8) syz_io_uring_setup(0x6ee1, &(0x7f0000001a40)={0x0, 0xee0c, 0x80000, 0x2, 0x24f, 0x0, r1}, &(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000001b80)=0x60, 0x2) 44.034460196s ago: executing program 6 (id=220): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x54801, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) setitimer(0x1, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000680), 0x1000000000000016, 0xc, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5300512660c8d200000000000a3c0000000000010500000309000200000008000400080003400000011014000000140001000000000000000070c0da000200000a00"/84], 0x64}}, 0x20008041) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0xe) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x4054802) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000440)='./proc\x00', 0x840, &(0x7f00000004c0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\xbcZ\x8f\x8b8/\xbaN5U[+'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@flag='dirsync'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./proc\x00', 0x1832c0, 0x14b) write(r4, &(0x7f0000000000)='7', 0x1) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, r5) fchdir(r0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x10202, 0x0) write$UHID_INPUT(r6, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r8, &(0x7f0000000400)=ANY=[@ANYRES8=r7, @ANYRES64=r1], 0x10) capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)={0x0, 0xe}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r9, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001140)={'team_slave_0\x00'}) 43.974782091s ago: executing program 6 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000140)=@raw=[@alu={0x4, 0x0, 0x8, 0x9, 0x8, 0x20, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000200)='GPL\x00', 0x4e0, 0xad, &(0x7f0000000280)=""/173, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x3, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x4, 0xd, 0x2}, {0x2, 0x1, 0x10, 0x4}, {0x1, 0x400, 0x10, 0x5}, {0x3, 0x1, 0xe, 0x3}], 0x10, 0x6}, 0x94) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, r3, 0x25, 0x9, @void}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x723}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}}, 0x0) 43.955733296s ago: executing program 6 (id=224): unshare(0x2c020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 43.81684486s ago: executing program 6 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys/file0/file0\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0) removexattr(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)=@random={'osx.', '\xa3{\x00'}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)="306663353a313232373ad36c06c0f16e68", 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@inlinecrypt}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) syz_clone3(&(0x7f0000000280)={0x25000000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c76f3ff4d98939c00000000000000000", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf25510000000a000600ffffffffffff00000a000600ffffffffffff000005008a00030000000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x800) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r7, 0x201, 0x0, 0x0, 0x49, 0x1, 0x2, 0x801, 0x8, 0x1, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000040)={0x1bacf914c1badac, &(0x7f0000001880)=[{@fixed}]}) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x1d8, r8) 43.575161033s ago: executing program 6 (id=229): r0 = syz_clone(0x804000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x42) sched_setscheduler(r0, 0x7, &(0x7f0000000000)=0x9780) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0xfd, 0x33, 0xb92, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611844000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, 0x0, 0x0) 43.246524074s ago: executing program 6 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$eJzs3V2IXGcdB+D/mdlJ87E1aWy1rbFZDbWB0JnNZhMS8cISP2pNakXxIhTCkp3OhszurNkJdKeCLd4UBRG8EUGo2AsrooHcVEptL1q8UVDqB5UaF1QQoWilIII6cuZjMzaTbHQ/Du55Hji773nP2Xnf2eE358yc95wTQG6NpT+SiNGIuBQRO7uz/7nCWPdX69DFmXRKot3+1J+TznrThy7O9Fft/92O9MdIxNaI2H08iX2lq9tdWGydm6rXq+d785Xm7HxlYbF179nZqVq1Vp07fHTy2MSRyaOTa/dcx3+y/bY/3P3g0tMv/e0f3/jVke+l/R3tLRt8HmtlLMZ6/5NS3DJQP5JEPLDWjWWk2H2p4+6BumQkww5xw9rt3d9NX7+3R8S+Tv53RjG6L96rzz38153xi/uz7iOwftp9wxe/0QY2rUJnHzgplCOiWy4UyuXuPvytsb1Qbyw0DzzSuDA33d1X3hWlwiNn69Xx3meFXVFK0vmDnfKV+Ym3zB+K6OwDP1nc1pkvn2nUpzf6zQ7oGI24fOmzZ7bseEv+/1js5h/YvNL8//zlZ19Iy28Ws+4NsJHS/H/nzdmPh/xD7sg/5Jf8Q37JP+SX/EN+yT/kl/xDfsk/5Jf8Q37JP+RXP/8PnTwZD5082W71zn+fa9TOnpuZPzYxXp69cKZ8pnF+vlxrNGqdM3ZmV37ceqMxf3AiLjxaaVYXmpWFxdbp2caFuebpznn9p6tDLgUAZODU0tYHbtn74qtJRDz+/m2dKbWlt1xWYXNrt5PI+hxkIBs++kN+uVQb5JfP+ECywvKt11pQX/u+ABujkHUHgMzcc4fjf5BXvv+H/PL9P+SXfXzA9/+QP77/h/wavcb9v24euHfXeES8LSJ+XCzd1L/XF/D/5fYdV8qjEZcvf+szleX7cCsoKCgsF7J8pwI2wpXQZ90TICvThy7O9Kc1fNjrHlZ4vraGLQH/tdfv6w4CSnPf6k3dJSPLxwZK6zRO6LUnI8biB795av9MMZ2i9z60Dk0BQzz+RETcPmz7n3SODezqrbe7u1rcGhG3RcQ7IuKdq2z7a59M8/9ydbBO/mHj3Gj+74iIuyLizoh4V0TsiYh3r7Ltn11K8//LbYN18g/58LmXsu4BkJWPPZt1D4CsnDLGAHLr249l3QMgK899P+seAFn58itZ9wDy7cX7ImJ82PG/Qud4f1+pd13Am3rXAtgWEdsjYkfvHMKbe+cI7hw4ZriS05+IGIu7fjhY5/gfbJz++L/WVeP/Csvj/4oRsXcVbTz/gdEvDauf2pPm/+nH+uP/0iltvz8WEFhfrz8RcefQ/CfLY36TSHMa8Z7/sY2xzy89M6z+lQfTxy39VP4hG+1vRrwvhue/Ly1VmrPzlYXF1r2d+3jXqnOHj04emzgyeXSy0rlESKV/oZAhTvzljQPD6l+bSPP/9cPyD9lIt//br5H/wf3/966ijeNf/eKpYfWjv0vzv+eF6+e/8Kctyac78/37Ejw61WyePxixJTlxdf3EKjoKm1w/I/0Mpfnfv2/45//dvb9Jt//HI+JD6f5CRPwzIv4VER+OiI9ExEcj4v7rtPmVe2pLw+p/+0ya/6fO2f5DNtL8T6+w/U9//30VbRzY/6MvDKv/4N40/+Vf//7EwyPpJP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa29hsXVuql6vnl/HQtbPEQAAAAAAAPLi3wEAAP//wpg1Fg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/124) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x5, 0x0, 0x18, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) 43.187408757s ago: executing program 35 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5c2, &(0x7f0000001f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000034000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/124) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x5, 0x0, 0x18, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) 33.723149546s ago: executing program 8 (id=333): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000004c0)={0x1000, 0x1ff, 0x800081}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) fdatasync(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 33.407626s ago: executing program 8 (id=338): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x2c020400) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8000}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xc7e8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xd02}]}}}]}, 0x7c}}, 0x0) 33.073709405s ago: executing program 8 (id=342): openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x101d02, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) fchdir(r2) exit(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000300), 0x10) madvise(&(0x7f000050a000/0x4000)=nil, 0x4000, 0x64) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 32.210561451s ago: executing program 8 (id=358): r0 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) (async) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x10182, 0x0, {0x1}}) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x10182, 0x0, {0x1}}) io_uring_enter(r1, 0x42b8, 0xfffffffd, 0x5d, 0x0, 0x52) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r6 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x0, 0x2c6, &(0x7f0000002b40)="$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") r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333440, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333440, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) r8 = accept4$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x1c, 0x800) connect(r0, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x7, @local}}}, 0x80) (async) connect(r0, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x7, @local}}}, 0x80) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f00000003c0)={0xfffffff9, 0x2800, 0x7, 0x7f, 0x5}) read$FUSE(r7, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x11}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2ac10b5be9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a62143f1102c2677d5fc372b57"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4008974b20"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "97f99ef38513b8f85984820d44"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d9358b7c92d33fed3df78ffaae"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "46f3c8f2e953d1e0434e4371ed"}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4000045) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 32.121051017s ago: executing program 8 (id=359): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000980)=0x0) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0xfffffffd, 0x2, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) setregid(0xee00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/48, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="cf0400000500cbd4c798279d0000080003009e2bc06077", @ANYRES32=r3, @ANYBLOB="040013000a000600ffffffffffff00000600100080050000060012000000000006001201001000000500190002000000"], 0x4c}}, 0x40) write(r2, &(0x7f0000000a40)="b96d494e894d6e15d11f8d88c55658e8b17243b35e5be4a9638b7d75a7c3df2483437cb868ef4ecb86a0bd1848cefed5f9025f604255ed4b8a4b0ade5c5edd3b8127ab04823666c88779cb6f5fd96808ed2b1d737b4aa2ac2d3a662d06c46af7d957a2feb4430e2f4f81c9809d77a3e03d998a8fb32dbaedb366c62d38d3aa70adbc9cea7a07fdc53fa5fe671a", 0x8d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x253f4c600745cb57, 0x0, 0x0, 0xfffffffffffffef6}, &(0x7f0000000100)=0x35) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x2d8, 0xf0, 0x0, 0x3c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000280), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xff000000, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'wg2\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x29, 0x3, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x13, 0x1e, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2c, 0x3b, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xff000000, 0xffffffff, 0xff, 0xff], [0xff000000, 0xffffff00, 0xff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {}, 0x84, 0x1, 0x5, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, '^U'}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x8, "efebf9bd7fd5c8ab1a36f0e24f2f8bba2bb5fb9f2632d119743afead0121"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x38, 0x26, 0xa1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 32.118536001s ago: executing program 4 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000010740), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000010880)={&(0x7f0000010700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000010840)={&(0x7f0000010780)={0x84, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3b2f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa367}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000106c0)={r6, 0x0, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000002400)='ns/time_for_children\x00') syz_open_procfs$namespace(r7, &(0x7f0000003580)='ns/time_for_children\x00') syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2a0210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x18, "ffffffffffffff8000000000"}]}}}}}}, 0x0) syz_clone3(&(0x7f00000105c0)={0x1200000, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0xc}, &(0x7f00000002c0)=""/27, 0x1b, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x58) rt_tgsigqueueinfo(r7, r8, 0x8, &(0x7f0000010640)={0x1e, 0x8, 0x6b5}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x8, 0xbba}}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000010580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000010540)={&(0x7f0000010400)={0x124, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x6}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read(r10, &(0x7f0000000400)=""/65536, 0x10000) 31.973083146s ago: executing program 4 (id=362): syz_read_part_table(0x5c0, &(0x7f0000000080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c43, 0x50) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001a80)={r1, &(0x7f0000000a00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 31.832319582s ago: executing program 4 (id=364): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9fd) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000300)={0x4, 0x0, 0x1ff, 0x3, 0x1, "3554a70b13f74546213bae08f59ace94ea70d8", 0x9, 0xffffff89}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48980}, 0x4040000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000800)={0x0, 0x80}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd, 0x0, 0x400}) r3 = getpid() renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300002930f0750dd9001b6848637c9c323f0321e1f7710f6572dc59d64d9d8013486b1cef9147e55660d6e370cb10bffe863b3c96bbe05e7c7911361511cf7cec84ef9cf21705e7aa1349d1eed378e3ae34ab89d23ceb2474efd9bc2fb165fd43817ca928d3a07d89c8096a78f6f9f4a83cbc89a3a1d62d7f9ec73abf31a9414202a9cf7dee2dbb9b9eb098b063d67092f58810f3", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x2c000000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c00)={r2, 0x400, 0x7fffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x189100) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x3, 0x0, 0x98, &(0x7f00000004c0)={0x0, 0x100000100000000, 0x11}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@delalloc}, {@block_validity}]}, 0x1, 0x5f6, &(0x7f0000000940)="$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") r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x12, r9, 0x5070e000) r10 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r10, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x2000, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a65637400001400028008000140000000020500020023000000180001800d00010073796e70726f7879000000000400028008000b40000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r11], 0x28}, 0x1, 0x0, 0x0, 0x4048090}, 0x8854) 31.830447156s ago: executing program 8 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000002300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f00000001c0)='2', 0x1, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="18007578711249000000000095279d21cc0000000000000000000000000000005ef52ddbbcd03ad60cb5853a99905bdb0b9e75695a3ef4c67e735b165bf0d11fa6e8d3ccf9e267b018441b3ef9438a20436992c6324984e76381870ba57acd977af69bc81aea56857a79aed387036e93b712616f8bd89a02fcf7b7fee509b4cf7e178f292ae72510bdebd92b714d8000"/157], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) mount(0x0, &(0x7f0000000040)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', &(0x7f0000000080)='sysfs\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='deny', 0x4) 31.690801076s ago: executing program 36 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000002300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f00000001c0)='2', 0x1, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="18007578711249000000000095279d21cc0000000000000000000000000000005ef52ddbbcd03ad60cb5853a99905bdb0b9e75695a3ef4c67e735b165bf0d11fa6e8d3ccf9e267b018441b3ef9438a20436992c6324984e76381870ba57acd977af69bc81aea56857a79aed387036e93b712616f8bd89a02fcf7b7fee509b4cf7e178f292ae72510bdebd92b714d8000"/157], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) mount(0x0, &(0x7f0000000040)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', &(0x7f0000000080)='sysfs\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='deny', 0x4) 31.678873734s ago: executing program 4 (id=368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000200)={[{@lazytime}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {}], 0x9, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {0x0, 0x80000000}, {}], 0x5, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000080)={r1, 0x0, &(0x7f00000002c0)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000000)={r2, &(0x7f0000000040)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={r4, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000280)={{r5, r3, 0x7, [0x7ff, 0x3]}, {r4, 0x0, 0x3, [0x36, 0x80000000]}, 0x0, [0x0, 0x80000001]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000080)={0x1, r6}) ptrace$peek(0x2, r6, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 31.420664543s ago: executing program 4 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x63, 0x0, &(0x7f0000000080)="5aee41def1868b2ef7fb8d11c72b5255319fa348554b18983956a0fb8b116be87951fcbb017960f7f8875f9b75cc33cf6431ef9a7b3215db82f5c3adcdef3d0e6c5ae5997c20be2cf14648a1c0da1faffdd6e149010d9a9846c22bf2395f45afaa7647", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x11, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100000, 0x21}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xc}]}, 0x4c}}, 0x20004884) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x823}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x394}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NET={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40811}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x4, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 31.141699504s ago: executing program 4 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 64) write(r3, &(0x7f0000000000)='3', 0x4e) (async) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newqdisc={0x2d4, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xd, 0xf}, {0xfff3, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x29, 0x4, 0x3, 0x8, 0x1, 0x2, 0x80, 0xa}}, {0x18, 0x2, [0xa3, 0x7, 0xa2b, 0xc4c, 0x4a7, 0x7fff, 0x8000, 0x4, 0x9, 0x1ff]}}, {{0x1c, 0x1, {0xa, 0x26, 0x4, 0x9, 0x1, 0xc, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x8, 0x9, 0x0, 0x8001, 0x2, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x5, 0xc7, 0x157]}}]}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x1ff, 0x10001, 0x2, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0x7, 0x2dee, 0xa, 0xabca, 0x6, 0x2, 0x4, 0x1ff]}}, {{0x1c, 0x1, {0x6, 0xe5, 0xbea, 0xc, 0x0, 0x8000, 0xa89, 0x2}}, {0x8, 0x2, [0xe, 0x100]}}, {{0x1c, 0x1, {0xd, 0x2, 0x8, 0x650c, 0x1, 0xd00, 0x5, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x82a, 0x4]}}, {{0x1c, 0x1, {0xc, 0x7, 0xf61, 0x0, 0x1, 0xce2a, 0x1, 0x5}}, {0xe, 0x2, [0x2836, 0x5, 0xff, 0x401, 0xb078]}}, {{0x1c, 0x1, {0x7, 0x7, 0x0, 0x87, 0x0, 0xf99, 0x7, 0xa}}, {0x18, 0x2, [0xfffd, 0xff, 0x81, 0x64, 0xb, 0x7, 0x8001, 0x2, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x1, 0x4, 0x40, 0x9, 0x3, 0x401, 0x1, 0x3}}, {0xa, 0x2, [0xdf37, 0x5, 0xfffb]}}, {{0x1c, 0x1, {0xb0, 0x1, 0x7fff, 0x5, 0x2, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0xa775, 0x3190]}}, {{0x1c, 0x1, {0x2, 0x61, 0x5, 0x8, 0x1, 0x2, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x2]}}]}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9a, 0xfffd, 0x5, 0x2, 0x43004d6, 0x3, 0x2}}, {0x8, 0x2, [0xfff, 0xe]}}, {{0x1c, 0x1, {0x9, 0x10, 0xb, 0x8, 0x0, 0x10001, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x3, 0x6, 0x1, 0x8, 0x2, 0x100, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0x800, 0x1ff, 0xff01, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x3, 0x8, 0x5a, 0x0, 0x10000, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xc, 0xc0, 0x61, 0x3, 0x0, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x2d4}}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r0, r2, 0xa, 0x0, @void}, 0x10) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r4, 0x0, 0xfffffffffffffeff, 0x45, &(0x7f00000001c0)="8056926a399d1ba87e140de0a3c2f6f289f47e3f48b4b98ad5d234374d357ef087445de741b48c4f987a1aece87fb11e15cd94ed6d3b3d0559558297e094fee9d1438429ec"}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept(r5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) 31.071776762s ago: executing program 37 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 64) write(r3, &(0x7f0000000000)='3', 0x4e) (async) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newqdisc={0x2d4, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xd, 0xf}, {0xfff3, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x29, 0x4, 0x3, 0x8, 0x1, 0x2, 0x80, 0xa}}, {0x18, 0x2, [0xa3, 0x7, 0xa2b, 0xc4c, 0x4a7, 0x7fff, 0x8000, 0x4, 0x9, 0x1ff]}}, {{0x1c, 0x1, {0xa, 0x26, 0x4, 0x9, 0x1, 0xc, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x8, 0x9, 0x0, 0x8001, 0x2, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x5, 0xc7, 0x157]}}]}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x1ff, 0x10001, 0x2, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0x7, 0x2dee, 0xa, 0xabca, 0x6, 0x2, 0x4, 0x1ff]}}, {{0x1c, 0x1, {0x6, 0xe5, 0xbea, 0xc, 0x0, 0x8000, 0xa89, 0x2}}, {0x8, 0x2, [0xe, 0x100]}}, {{0x1c, 0x1, {0xd, 0x2, 0x8, 0x650c, 0x1, 0xd00, 0x5, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x82a, 0x4]}}, {{0x1c, 0x1, {0xc, 0x7, 0xf61, 0x0, 0x1, 0xce2a, 0x1, 0x5}}, {0xe, 0x2, [0x2836, 0x5, 0xff, 0x401, 0xb078]}}, {{0x1c, 0x1, {0x7, 0x7, 0x0, 0x87, 0x0, 0xf99, 0x7, 0xa}}, {0x18, 0x2, [0xfffd, 0xff, 0x81, 0x64, 0xb, 0x7, 0x8001, 0x2, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x1, 0x4, 0x40, 0x9, 0x3, 0x401, 0x1, 0x3}}, {0xa, 0x2, [0xdf37, 0x5, 0xfffb]}}, {{0x1c, 0x1, {0xb0, 0x1, 0x7fff, 0x5, 0x2, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0xa775, 0x3190]}}, {{0x1c, 0x1, {0x2, 0x61, 0x5, 0x8, 0x1, 0x2, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x2]}}]}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9a, 0xfffd, 0x5, 0x2, 0x43004d6, 0x3, 0x2}}, {0x8, 0x2, [0xfff, 0xe]}}, {{0x1c, 0x1, {0x9, 0x10, 0xb, 0x8, 0x0, 0x10001, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x1]}}, {{0x1c, 0x1, {0x3, 0x6, 0x1, 0x8, 0x2, 0x100, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0x800, 0x1ff, 0xff01, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x3, 0x8, 0x5a, 0x0, 0x10000, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xc, 0xc0, 0x61, 0x3, 0x0, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x2d4}}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r0, r2, 0xa, 0x0, @void}, 0x10) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r4, 0x0, 0xfffffffffffffeff, 0x45, &(0x7f00000001c0)="8056926a399d1ba87e140de0a3c2f6f289f47e3f48b4b98ad5d234374d357ef087445de741b48c4f987a1aece87fb11e15cd94ed6d3b3d0559558297e094fee9d1438429ec"}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept(r5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) 26.881252929s ago: executing program 3 (id=406): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000300)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8}, {@utf8no}, {@fat=@gid}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x21d, &(0x7f00000024c0)="$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") r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x20800, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000480)={0x0, 0x20000, 0x6, 0x10000, 0x0, 0x1, 0x4, 0x0, 0x10, 0x3, 0x2, 0xfffffff4, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) 26.783423272s ago: executing program 3 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r1, 0x113, 0x70bd2c, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0xdbc97000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@nullb, r3, &(0x7f0000000100)={0x5, 0x10001, 0x0, 0x1}) 26.644894585s ago: executing program 3 (id=409): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='\x00o'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x23, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}], [{@obj_role={'obj_role', 0x3d, '-^{'}}, {@smackfsroot}]}}, 0x0, 0x0, &(0x7f00000005c0)="a58dac1d1141e40f5e450bb36a5f6b39480828e1de9b8289a8d0fb56e4940f6143a5b769086db36dce86de208073c8e8c58a7009c2ff5e01f0380255badeefa2b54fb61829c579078aac9188317c36aee3b0c2f146384c9bb9dda2c151148a154f89b0bb7f0f87ca04e44dcc2743544bb558c2f9a4fd890b1750acd24a828d399e6242d97204033fdcaeb8074586679c170b6353770f77e5c78b430355167f47a48646a4e7220b2463c27c8fdd9c5e9c1805942f0d0a7b984055") io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000f80)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@resgid}]}, 0x8, 0x625, &(0x7f0000002ac0)="$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") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004814}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf2502000000140003000000000000000000000000000000000114000300fe80000000000000000000000000003f080005006401010214000200fe800000000000000000000000000017"], 0x58}, 0x1, 0x0, 0x0, 0x2014}, 0x20000045) 26.373628616s ago: executing program 3 (id=412): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x1e}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f", 0x1e}], 0x2) r5 = io_uring_setup(0x6b1, &(0x7f0000000080)={0x0, 0xb3d6, 0x80000, 0x1, 0x1c5}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00004e2000/0x3000)=nil, 0x3000, 0x3) 25.992633574s ago: executing program 3 (id=415): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000380)={0x0, 0xffff, 0x40, &(0x7f0000000340)=@ublk_ctrl_dev_info_new=@any_dev}) syz_open_dev$ublk_chdev(&(0x7f00000002c0), r5, 0x428640) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904", 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303014303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000100)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@nonumtail}, {@uni_xlateno}, {@uni_xlateno}, {@rodir}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={0x0}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) (async) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000002, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) connect$inet6(r11, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r11, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c810) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x40806685, &(0x7f0000000000)) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0xd3f) (async) sched_setaffinity(r9, 0x8, &(0x7f00000012c0)=0x7) (async) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) (async) r12 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) (async, rerun: 32) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000005080002400000000d0900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) mkdirat(r6, &(0x7f0000001300)='./file0\x00', 0x50) (async) r16 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r12, 0x2) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x1, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc0, 0x9a, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x4, 0x0, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x7, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x48, 0x0, r16, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r13, '\x00', {0x3, 0x835, 0x100104, 0x0}}, &(0x7f0000000280)) 24.769130295s ago: executing program 3 (id=421): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/254) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xd}}]}, 0x2c}}, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7d) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) fstatfs(r0, &(0x7f0000000140)=""/254) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xd}}]}, 0x2c}}, 0x0) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7d) (async) 24.725754694s ago: executing program 38 (id=421): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/254) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xd}}]}, 0x2c}}, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7d) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) fstatfs(r0, &(0x7f0000000140)=""/254) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xd}}]}, 0x2c}}, 0x0) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7d) (async) 12.65945478s ago: executing program 1 (id=595): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 12.548999394s ago: executing program 1 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a8c8405ca2ba513, 0x28}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10040010) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = io_uring_setup(0x265, &(0x7f0000000200)={0x0, 0xe690, 0x4000, 0x1, 0x2df}) io_uring_enter(r2, 0x6bf5, 0x246a, 0xd, &(0x7f0000000280)={[0x80]}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ee00}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4c3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x24004800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000480)={0x1f, 0x4, 0x1}, 0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd26}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}]}, 0x134}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8104) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) tee(r0, r3, 0xffffffffffff8f91, 0xa) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000008c0)={{0x11, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x3, 'ovf\x00', 0x7, 0x29d, 0x1c}, {@multicast2, 0x4e22, 0x3, 0x461, 0x9}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000980)=""/248, &(0x7f0000000a80)=0xf8) r8 = getgid() fchown(r2, 0xffffffffffffffff, r8) r9 = openat$incfs(r2, &(0x7f0000000ac0)='.pending_reads\x00', 0x110641, 0x40) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$rds(r7, &(0x7f0000000c00)={0x2, 0x6, @loopback}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r10, 0x1, 0xffff, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r12, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x45) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x10001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), 0xffffffffffffffff) 12.428454309s ago: executing program 1 (id=601): file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) (async) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xfd35, 0x800, 0x2, 0x1a1, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x525b}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4b, 0x0, @fd, 0x1, 0x0, 0x0, 0x11, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (rerun: 32) 11.569107973s ago: executing program 1 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e5", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e20180c5ce0000000059", 0xb}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0)=0x62828c10, 0x4) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe72}, 0x1}], 0x1, 0xe88e164663c85842, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000838000480340001800900010068617368000000002400028008000440000000060800014000000016080002400000000f08000340000000a30900010073797a30000000000900020073797a3200000000140000002000010000000000000000000300000a526959cc41806ee924dbe0b4e977506b396601cc717915a6c12f4ed129e3"], 0x8c}}, 0x48080) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) statx(r0, &(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x10, &(0x7f0000000400)) ptrace$setregset(0x4205, r4, 0x402, &(0x7f0000000000)={0x0}) 11.284637504s ago: executing program 1 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0205648, &(0x7f0000000040)={0xf010000, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) lsetxattr$smack_xattr_label(&(0x7f0000000000)='./file2\x00', &(0x7f00000002c0)='security.SMACK64EXEC\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x6, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000026b000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0xcbe8f000) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x255) (async) syz_create_resource$binfmt(&(0x7f0000000280)='./file2\x00') bind$unix(r5, &(0x7f0000000180)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) 10.961240606s ago: executing program 1 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="340000005800410f9c00f427aa62cf3999e850df0800ccaea394a777d8437fdfd5edb7bd90c47de84429cd4dceab9f400501005b", 0x34) 10.87329637s ago: executing program 39 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="340000005800410f9c00f427aa62cf3999e850df0800ccaea394a777d8437fdfd5edb7bd90c47de84429cd4dceab9f400501005b", 0x34) 4.027821393s ago: executing program 2 (id=690): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002ac0)={0x8, 0x0, [{0x200000, 0xa6, &(0x7f0000000300)=""/166}, {0x50000, 0x1000, &(0x7f00000016c0)=""/4096}, {0xfec00000, 0xe4, &(0x7f00000026c0)=""/228}, {0x2000, 0xa7, &(0x7f00000027c0)=""/167}, {0x80a0000, 0x91, &(0x7f0000002880)=""/145}, {0x0, 0x96, &(0x7f0000002940)=""/150}, {0x40000, 0x34, &(0x7f0000002a00)=""/52}, {0x5000, 0x61, &(0x7f0000002a40)=""/97}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x274, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x248, 0x2, [@TCA_BPF_ACT={0x244, 0x1, [@m_bpf={0xf4, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0xf5, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x274, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x248, 0x2, [@TCA_BPF_ACT={0x244, 0x1, [@m_bpf={0xf4, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0xf5, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}, {0x2, 0x5, 0x5}], 0x2, 0x2b2, 0x0, 0x0, 0x0, 0x18}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 3.757125174s ago: executing program 2 (id=695): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x0, 0x3, 0x800}, {0x1, 0xbbdd, 0x1800}], 0x2) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000640)=0xa800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)=0x4) syz_read_part_table(0x61e, &(0x7f0000000000)="$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") 2.94561529s ago: executing program 2 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async, rerun: 64) ptrace(0x10, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x4044084, 0x0, 0x0) socket(0xa, 0x5, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async, rerun: 64) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000480)={0x0, 0x0, 0x100, 0xfffffffc, 0x1e5}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) (rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x2000, 0x0, {0x0, r9}}) (async) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) 2.49315954s ago: executing program 7 (id=721): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x40) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) mkdirat(0xffffffffffffff9c, 0x0, 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) pselect6(0xffffffffffffff6b, &(0x7f00000001c0)={0xe, 0x80, 0x7, 0x2, 0x1, 0x0, 0x3ff, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x7, 0x9, 0x4, 0x2, 0x8, 0x1}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x4}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 2.478011652s ago: executing program 7 (id=723): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x9, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x20) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x7, 0xb, r0, 0x0, 0x0, 0xf7, 0x0, 0x1, r1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000008000000000000000800000091114f000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}, 0x14) 2.257018302s ago: executing program 7 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000041}, 0x0) syz_usb_connect(0x3, 0x1ea, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x3c, 0x1f, 0x15, 0x10, 0xbb4, 0xa8b, 0x316b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d8, 0x1, 0x0, 0x4, 0x20, 0x4, "", [{{0x9, 0x4, 0x56, 0x3, 0x5, 0x69, 0x36, 0xc9, 0x5, [], [{{0x9, 0x5, 0x80, 0x3, 0x400, 0x7f, 0x0, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0xa3}, @generic={0xd1, 0x23, "5cacdf586dc63d91b87179294fbd84b49f2e4ac3ab77f873036001167a176cb7c02c1920acfcabe325a89cb9eed3200f7de5a522b752aee93438d2b9265ef22f9b66e5de25ba6f1e42bba31eae0b3157e00a6432b3305778a6234e1827679674e9f0d4e0ffe956924663b898bde95a33d10791cee375cbf4e78be4f1440555b84723df233df725467050c797be7ce983f0eb7beaf9b934a1300287a0f8d317d2b12d2af502b5492a7d99c71c96294194f4e63e53223f7d27529d2d5af5d669fbfeeb29983760e93a1a1f201ff63095"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x8b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x80}, @generic={0x93, 0x31, "d706f9fa46dfe314defee7577b4fa936df21ce104e65472508faff734c846cf8517dfc6772ff5615c04cad3bb9d6a3ba7ef655e80190131ab3df88f2f75d10cfb1f5239f98d8da5194eb1a380cf658fe184340977215d998b352e26bc26f6525cc7ecb3d05060045a43658787a86cb6a6d49d64dd9e97160f07383fff21c62ace0a70587d56acbde8be29d433dd59d0668"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x39, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x270, 0x9, 0xf, 0x8, [@generic={0x12, 0x22, "0cc896a6717802104f018959f7fd96bf"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0x0, 0x1, 0x8, 0x8}, 0x4b, &(0x7f00000002c0)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x0, 0x0, 0x1000, [0xff0000, 0x3e80]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x70, 0x6, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1d9f37e10dc029062e1ce8c920d00e74"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f20f241bfbb2d2ff8f1345cc718cfba9"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x425}}, {0xf1, &(0x7f0000000380)=@string={0xf1, 0x3, "bb30f1957949a8c7a4576b135d889bc7420d54e01a6700584f2d1d67295ebfe7056de94ea223c9d61f4f33ed0d7a244bd5593e3a4a1c2b99f60b759c3e50aa0b2a0d1cb3597bb92860131d53d28b39814c8b9dd078c284f65e6849e1ca12960b2d486ed339ec1502dcb5b7c93ce001e0e500c8a39f44427c5cc3f71477796413bad8959846c24f09130b849b0cce2d55a2883655e92a8433b9562595f3e10e313304b20d094fc932b1a5e6fde7204fc8bd6067c91003c6147c4204b811988886f1e5942ad472c1f65d0089bbffdb3f64ec8bc35829e58235ea280ba7c0239f7c864419a281b5e7533669a75b4e9fa7"}}, {0x50, &(0x7f0000000480)=@string={0x50, 0x3, "400f72d1fba2b759d5f9de245854293fe65fcb3d7ded510e12ca58c7e9be735b753e7a420d125ce3e3a8217200755b70df8cf58a030a4a97c33b670e95c19116fdf12b941d3aec032d843369249f"}}]}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) (async) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000041}, 0x0) (async) syz_usb_connect(0x3, 0x1ea, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x3c, 0x1f, 0x15, 0x10, 0xbb4, 0xa8b, 0x316b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d8, 0x1, 0x0, 0x4, 0x20, 0x4, "", [{{0x9, 0x4, 0x56, 0x3, 0x5, 0x69, 0x36, 0xc9, 0x5, [], [{{0x9, 0x5, 0x80, 0x3, 0x400, 0x7f, 0x0, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0xa3}, @generic={0xd1, 0x23, "5cacdf586dc63d91b87179294fbd84b49f2e4ac3ab77f873036001167a176cb7c02c1920acfcabe325a89cb9eed3200f7de5a522b752aee93438d2b9265ef22f9b66e5de25ba6f1e42bba31eae0b3157e00a6432b3305778a6234e1827679674e9f0d4e0ffe956924663b898bde95a33d10791cee375cbf4e78be4f1440555b84723df233df725467050c797be7ce983f0eb7beaf9b934a1300287a0f8d317d2b12d2af502b5492a7d99c71c96294194f4e63e53223f7d27529d2d5af5d669fbfeeb29983760e93a1a1f201ff63095"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x8b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x80}, @generic={0x93, 0x31, "d706f9fa46dfe314defee7577b4fa936df21ce104e65472508faff734c846cf8517dfc6772ff5615c04cad3bb9d6a3ba7ef655e80190131ab3df88f2f75d10cfb1f5239f98d8da5194eb1a380cf658fe184340977215d998b352e26bc26f6525cc7ecb3d05060045a43658787a86cb6a6d49d64dd9e97160f07383fff21c62ace0a70587d56acbde8be29d433dd59d0668"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x39, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x270, 0x9, 0xf, 0x8, [@generic={0x12, 0x22, "0cc896a6717802104f018959f7fd96bf"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0x0, 0x1, 0x8, 0x8}, 0x4b, &(0x7f00000002c0)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x0, 0x0, 0x1000, [0xff0000, 0x3e80]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x70, 0x6, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1d9f37e10dc029062e1ce8c920d00e74"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f20f241bfbb2d2ff8f1345cc718cfba9"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x425}}, {0xf1, &(0x7f0000000380)=@string={0xf1, 0x3, "bb30f1957949a8c7a4576b135d889bc7420d54e01a6700584f2d1d67295ebfe7056de94ea223c9d61f4f33ed0d7a244bd5593e3a4a1c2b99f60b759c3e50aa0b2a0d1cb3597bb92860131d53d28b39814c8b9dd078c284f65e6849e1ca12960b2d486ed339ec1502dcb5b7c93ce001e0e500c8a39f44427c5cc3f71477796413bad8959846c24f09130b849b0cce2d55a2883655e92a8433b9562595f3e10e313304b20d094fc932b1a5e6fde7204fc8bd6067c91003c6147c4204b811988886f1e5942ad472c1f65d0089bbffdb3f64ec8bc35829e58235ea280ba7c0239f7c864419a281b5e7533669a75b4e9fa7"}}, {0x50, &(0x7f0000000480)=@string={0x50, 0x3, "400f72d1fba2b759d5f9de245854293fe65fcb3d7ded510e12ca58c7e9be735b753e7a420d125ce3e3a8217200755b70df8cf58a030a4a97c33b670e95c19116fdf12b941d3aec032d843369249f"}}]}) (async) 2.066601293s ago: executing program 2 (id=731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESOCT=r1], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x24040084) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x20000844) r7 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb88c0, 0x104) r8 = socket(0x10, 0x803, 0x4) r9 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f0000001200)="$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") open_tree(r8, &(0x7f0000000280)='./file0\x00', 0x81000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, 0xffffffffffffffff) sendto$packet(r9, &(0x7f0000000040)="0148a215030000000000000088fb", 0xe, 0x4044015, &(0x7f0000000000)={0x11, 0x0, r10, 0x0, 0xfd, 0x0}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r7, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.913705475s ago: executing program 2 (id=734): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x8000, 0x3, 0x80800, 0xffffffffffffffff}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="9755181b9160ac590a3a8a8be485f3331118b6e6acd6b3b922254b56811f1afe70862a3237258b42c8a5215126bcf3cde63357b23b56c5b0b25a22616b9fc381", 0x40}, {&(0x7f0000000100)="2ec458eeb3bc117a6d778047ce01c8c13f7f949e23ee95888e31cbf27bc8a05012d45d14dadbfe7d8cf69037281c467bc16b2193b4a8df7786c9a98d46212f9f9d380e561d39dd95e7084413418fbf6e3d0251488bf1f1122e56ff85a73bff4ea6af2a8ced8580f296661e045320d384598758ff343d12a9c53bb370f563fffc6cab05b1168818c665e394dad29bcdc8efa1bd9ebbbc0064cc1e707ef61f6b3c49a5e5a2d2cff88c51b875e21261f393f6eaae6fac22fc11c1e508cf07dbbfb2282bd8304d2226d49962b43565e265468709d694144da11ad681bc807e8237e6cb57b0", 0xe3}], 0x2, 0x9, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x104a, &(0x7f0000001940)={@random="a1d3406ff0a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x7, 0x6, "1b3dfa", 0x1010, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@fragment={0x33, 0x0, 0xb, 0x1, 0x0, 0x5, 0x67}], {0x4e20, 0x4e21, 0x1008, 0x0, @opaque="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"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0x288, 0xe8, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 1.851311652s ago: executing program 9 (id=735): syz_open_dev$vim2m(0x0, 0x800, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x0, {[@mss={0x2, 0x4}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x1, 0xf, 0xe04e}]}}}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x54) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000580)={[{@numtail}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x28b, &(0x7f00000008c0)="$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") setxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x4}, {}, {0x2, 0x1}, {0x2, 0x6}], {0x4, 0x1}, [{0x8, 0x5}], {}, {0x20, 0x5}}, 0x64, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 1.835377304s ago: executing program 2 (id=736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) lseek(r2, 0x7f, 0x4) ioctl$TCFLSH(r1, 0x400455c8, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) shutdown(r0, 0x1) 1.717225629s ago: executing program 5 (id=737): r0 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x11, r0, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_open_procfs$userns(0x0, &(0x7f0000001240)) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}, 0x1}) 1.713884743s ago: executing program 9 (id=738): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) (async) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='lC'], 0x9, 0x0) (async) capset(&(0x7f0000000500)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.681940502s ago: executing program 7 (id=739): r0 = socket(0x1d, 0x2, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3) 1.646547213s ago: executing program 5 (id=740): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000bf221d2cca5a000900020073797a30000000000800410072786500140033006c6f000000003bb65267af069d93fd25b75804ffc0e1eee28f226dccd7ad922b7e9108a9"], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "eb"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x8, 0x1}, &(0x7f0000000100)=0x9c) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)={0x30, r3, 0x1, 0x70bd29, 0x65dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x30}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x403, &(0x7f0000000000)={0x0, 0x504}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x4, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980906, 0x2, '\x00', @ptr=0x1}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/rdma_cm/syz0\x00', 0x1ff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 1.589151887s ago: executing program 9 (id=741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x158, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_xt={0x124, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0xf9, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) epoll_create1(0x80000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.584692184s ago: executing program 7 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x2000020, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 1.534522708s ago: executing program 9 (id=743): prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c06e8fc55a10a0015000600142603600e120800020000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x8}], 0x1, &(0x7f00000005c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r7, 0x101, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c4}, 0x40000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003"], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 1.22920148s ago: executing program 5 (id=744): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) write$smackfs_cipso(r0, 0x0, 0x34) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='gadgetfs\x00', 0x10000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x0, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x7, 0x10, 0x400200, 0x7}}) 1.169103177s ago: executing program 5 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7, 0x40, 0x8a77, 0x81, {{0x13, 0x4, 0x0, 0x18, 0x4c, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@generic={0x82, 0x7, "79a55984b0"}, @rr={0x7, 0x23, 0xf1, [@loopback, @private=0xa010102, @empty, @remote, @private=0xa010102, @rand_addr=0x64010102, @local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x5, [{@multicast2, 0x6}]}, @end]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1e5a0000, 0x4, 0x3, 0x0, 0x1, 0x27c72d07, '\x00', r0, r1, 0x3, 0x2, 0x4, 0xf}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r2}, 0x38) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000029000000040000003a0000000000000018000000000000002900000004"], 0x30}, 0x4004000) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, 0x0, r6) setreuid(0x0, r6) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000000)='./sys\x00') write(r4, &(0x7f0000000300)='1', 0x1) 1.168603581s ago: executing program 0 (id=746): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf250a8080000800000617170000080018004e224e2414000200fc0000000000000000000000000000001400070000000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000090001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040840}, 0x4040000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, 0x8001, 0x9) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r5, r6, 0x7, 0x0, @void}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00068014000300200100000000000000001c000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000, 0x0, 0x8}, 0x18) 1.167718006s ago: executing program 9 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xb0, 0x8000, 0x8, 0x3}, 0x3, 0x0, 0x4f756a96, 0x3, 0xa911, 0xf, 0x6, 0xa, 0x3, 0x6, {0xe, 0xba4a, 0x5, 0x7, 0xb, 0x800}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x8000000000000000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02c7e3f7859c23469c32af60cc0bd64f000b000c"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x8000450a, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x10080c0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4410, &(0x7f0000000140)={[], [{@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}, 0x6, 0xbdb, &(0x7f0000001580)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2des7sBvLDGsoc04lhEXEwiSq39aUQUG72hiFrzuPW1lenP11amk6jX//RJEklEPFxbmW6/VtLaHmkNhiLi3d8m8b1/dMZdWFqem6pWK/Ot8cnFK9dPLiwt/2L2ytTlyuXK1YnTv5o8NXl6/Mxkz2p99MG5O5/95Pcf1b54+cvbn/77pSTOxUhrbmsdvTIWYxt/JlsVImKq18FyMtCqZ2udSWGXJ6V9TgoAgK7SLfdwP4hSDMTmzVsp3nwv1+QAAACAnqgPRNQBAACAAy6x/gcAAIADrv05gIdrK9Ptlu8nEvbXg/MRMdqsf73VmjOFqDW2QzEYEYcfJrH1a61J82nPbCwiPrx/5rWsRcf3kP93qwchdlRbjYgfbnf+k0b9o41vcXfWn0bEeA/ijz023u+/f89S/7kexM+7fgBeTHfPNy9knde/dOP+J7a5/hW2uXY9jbyvf+37v/WO+7/N+ge63P/9cY8xbt76741uc1n9v77zu1fbLYufbZ+pqCfwYDXiR4Xt6k826k+61H9xjzFKX92odJvLu/76/yOOx/b1tyU7/z7RyZnZamW8+bhtjNV3Jl/pFj/v+rPzf7hL/e3ff+p2/q/vMcZfLlx4vWPn/c3uzvWnHxeTPzd6xdaev00tLs5PRBSTP3TuP7VDIrXNY9qvkdV/4qc7v/+3q3+g+XKNuWwtsNraZuO/Pxb2N7dvvtEtpfb674nP//CuR+xJVv+lLud/a/1vFzrP/z/3GONnb/3rRLe5revfrGXx22thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IkkrS80U/TcjniSER8Pw6n1WsLiz+fufbXq5eyuYjRGExnZquV8YgoNcdJNp5o9DfHpx4b/zIijkbEf0rDjXF5+lr1Ut7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOFIRIxEkpYjIo2I9VKalst5ZwUAAAD03GjeCQAAAAB9Z/0PAAAAB5/1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH129Md37yURUTs73GiZYmtuMNfMgH5L804AyM1A3gkAuSnknQCQmydc47tdgAMo2WV+qOvMoZ7nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDz6/ixu/eSiKidHW60TLE1N5hrZkC/JZHknQKQk4GdJgv7lwew/7zF4cVljQ/s9r8AQ5vH1L45c6hvOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/BlptCQtR0Sxta9cjvhORIzGYDIzW62MR8R3I+L90uChbDyRc84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03sLS8txUtVqZzzpptDobe74FnUialfQ9VitOLf+SdXrSKcZTPv1RvV7PO/m+d3L9ZwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJwsLC3PTVWrlfmFvDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8rawtDw3Va1W5vvYybtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy83UAAAD///TgCwo=") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 1.166655298s ago: executing program 0 (id=748): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x197}, {0x9, 0xa7, 0xf, 0xffffff47}, {0x4, 0x9, 0x4, 0xc}]}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getregset(0x4204, r4, 0x3, &(0x7f00000055c0)={&(0x7f0000005540)=""/90, 0x5a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00001c0000/0x1000)=nil], 0x0, &(0x7f0000000080), 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x44, r6, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "1c896682"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfb, @empty, 0xff}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$kcm(0x21, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r8, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/43}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.070238995s ago: executing program 5 (id=749): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x2389, 0x4) setns(0xc9, 0x0) fanotify_mark(0xffffffffffffffff, 0x41, 0x8000038, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="050034003e0000000a005c22585afe21e050615050500000833b5eaa2958eedfbdb57852ddb7431091dfde5b5773a6724480f4acca94c6f6ebec19463d51ebff8f07005a09838ffb29cebf291f3b3c5e5fbba9c3618a97685ef5c89d1da68101a048c51126bde76572353487dd0c165b7df044fb7dcc90559f7df4"], 0x34}}, 0xc840) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670977db5e911ef2ad63e849901d8433129dbacbfd4924d7545517fd18b52504cede0ac594eeb7d29903b5e1ac84c1e749c6be08d302d3f933666e79d44372a5460e8a014172ed453919ea227cf8087304638788e656f1c3fb7013cdcac9612ebfe53e88cc3226b457a2cd37a993310f36acf1e40e34d4f60e", 0xc7}], 0x1}}], 0x2, 0x2090) shutdown(r7, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 701.005027ms ago: executing program 7 (id=750): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xffffffff, @local, 0x4}, @in={0x2, 0x4e24, @private=0xa010100}], 0x4c) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) shutdown(r0, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)) setsockopt(r0, 0x3, 0x80000001, &(0x7f0000000180)="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", 0xfa) write$nci(r1, &(0x7f0000000280)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x2, "b95ed7481e4a7f6289f69da6de4ae6609f0ce5a3431574b9407c82ab11df5a5110ae3ae5e308c9979d53e49b50145eac2884c8770edfb51f12450ec27f7a812df15398c83517251fec8a9a0385cbd1c9333b46e49d196ad71d73476008469eedb682fdbdeb1fa349c0e655d07e48d30e868543afe6001e46b69ee4dbdef352664d68ebda8a53a5e76824db5b552ee18abf484f8ae0619dd63e19ce0b5cbc3d84c22f3a52b3713e45c4f88a88333d7abb77feee82e0"}, 0xb8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r1, 0x90b, 0x7, 0x7}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa27f}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4840}, 0x40010) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000540)={'nr0\x00', 0x9650}) write$nci(r2, &(0x7f0000000580)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x8, "7bce9e0a3f364f8f8ab4ac78b74703558d0d123d43d92892b17bedb5424e92d1401003852f43c27e9453784bba512b605d4b023e6e6e7a6570cc11327c8f31044bbd3185bd6e28a87824c653e4dd4105d427"}, 0x55) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000600)={r0, 0x1, 0x0, "05b371c323c2c54789223c5312d26412e1feab943fb9a5ff559f4da5dd4e303f"}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000640)={0x1, 0xc, 0x3ff, 0x3, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000740)={r3, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xe6c5, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x1, @remote, 0x6}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5d}]}, &(0x7f0000000780)=0x10) setsockopt(0xffffffffffffffff, 0x8001, 0xb, &(0x7f00000007c0)="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", 0x1000) openat$ttynull(0xffffffffffffff9c, &(0x7f00000017c0), 0x105800, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001800)={'filter\x00', 0x3d, "7cd5d913c372c035ffd2b6b2528fe0a3770a63bb7a937b2665c2f367eb22ce87e4c1a6b9181f55eb6d2237da54d365e87d07d8dfe3deae0a72fc24fc7f"}, &(0x7f0000001880)=0x61) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f0000001900)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x9, 0x100, {{0x3c, 0x4, 0x2, 0x9, 0xf0, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @loopback, {[@end, @timestamp={0x44, 0x10, 0x34, 0x0, 0x2, [0x1, 0xfca, 0x0]}, @noop, @generic={0x82, 0xb, "7bad4d42a994332b17"}, @cipso={0x86, 0x77, 0x2, [{0x0, 0x12, "02b61da16909f69cea58aa6e6362da5d"}, {0x7, 0xf, "f749a9fe2e7aaa0405689b512a"}, {0x5, 0xd, "eb9cbe1712bb61272d384f"}, {0x1, 0x2}, {0x1, 0x10, "c010e05774aafeddbd9359ce2584"}, {0x7, 0xd, "b22cf45e15b0045633f5fe"}, {0x1, 0x7, "41b2160eb0"}, {0x4, 0xe, "46ec5f5cad56a58a672b07bd"}, {0x6, 0xf, "f28459cc1739a810cb2602d0ec"}]}, @timestamp_addr={0x44, 0x1c, 0x4d, 0x1, 0xe, [{@multicast2, 0x4}, {@broadcast, 0x43}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7f}]}, @generic={0x86, 0x8, "a0f810c62eb3"}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0x1, [{@empty, 0x7}, {@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x96, [@multicast1, @empty]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000001bc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)=@dellink={0xe0, 0x11, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x304, 0x11528}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_PHYS_PORT_ID={0x1c, 0x22, "12d34a07b586ef8d1fe1deca4d76fd17eec549b2308e3ffe"}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_PHYS_PORT_ID={0x7, 0x22, "c8c9f4"}, @IFLA_PORT_SELF={0x80, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f8f34b35f8113d979266d48eb73b95b2"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x9, 0x2, 'snmp\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "90c979be0cf6dd4de4fb9ebd776dd0dd"}, @IFLA_PORT_PROFILE={0x6, 0x2, ')\x00'}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/ttynull\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x88c}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "666c086d956fe5528d76afcea4da59fc"}]}]}, 0xe0}}, 0x48003) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000001c00)={{0x3c, @private=0xa010100, 0x4e22, 0x3, 'none\x00', 0x38, 0x1, 0x7a}, {@multicast1, 0x4e21, 0x0, 0x8000, 0xf, 0x6}}, 0x44) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000001c80), 0x4) bind$l2tp6(r2, &(0x7f0000001cc0)={0xa, 0x0, 0xfffffe01, @mcast1, 0x3ee9, 0x1}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x100000a, 0x110, r6, 0xf267b000) read$nci(r1, &(0x7f0000001d00)=""/45, 0x2d) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000001d40), 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001d80)=0xa1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 541.082465ms ago: executing program 9 (id=751): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381004a, &(0x7f0000000780)=ANY=[], 0xfc, 0x2d7, &(0x7f0000001040)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000500001800600010002000000060002001100000008000500010000f9b782d012053979fc92000600040013c40000070006007272000008000b00736970000c00070001000000cdffffff080008006400"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=0,vers=3,clientaddr=127.0.0.1\x00') r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3d5d284aa99119cd3daa8f6030efbd6f584b365361afba7700a236a74b69629621097ecf5f1465b8fdeb1eb50834d441a6b0f5391cfebbf8d3c7a91500905c70b36be6ecc2c948d050acef11d9b3fbf3c8176dd51038e4beff99e3d7eb8a9249", @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf250300000008000500e00000010000060076657468305f746f5f7465616d000000080004000000000014000300fe8000000000000000000000000000aa08000500000000001400020000000000000000000000ffffac141431"], 0x7c}, 0x1, 0x0, 0x0, 0x4000814}, 0x40800) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2505000000040001803c00028008000400090000000600020013c4000008000300010000000800040001000000060002004e220000080006000000000006000f0008000000"], 0x54}}, 0x40810) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000c40)="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", 0x129, 0x10, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000a00)=ANY=[@ANYRES8=r2], 0x0) recvfrom$inet(r3, &(0x7f0000000900)=""/242, 0xf2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="000072080507db500887e5c30000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r5, &(0x7f0000002700)={0x74, 0x0, 0x0, {0xfff}}, 0x18) read(r4, &(0x7f0000000300)=""/1024, 0x400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000780)={[{@errors_remount}, {@data_ordered}]}, 0x7, 0x4d4, &(0x7f0000001340)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(r4, &(0x7f0000000880)='./file1\x00', 0x9a000, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000002080001000000000f080003"], 0x94}}, 0x0) open_by_handle_at(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="4b000000020000000b0000003f"], 0x36f0516f) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 286.017129ms ago: executing program 0 (id=752): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x40000000000800, 0x101802) ioctl$LOOP_SET_STATUS(r1, 0xc01070ce, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7f, 0x8000000000000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x800) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) r10 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r9, r11}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r11, 0x0, 0x0, 0xce2c, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000004680), 0x0, 0x0}, 0x40) 217.685521ms ago: executing program 5 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000f8100ffffffffffffaaaaaaaaaaaa88a8110081002f000800450000244000e000062f90787f000001ac141441a001880b001090780108000000200057"], 0x3e) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000001080)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000080)={0x0, 0x7978, 0x10000, 0xfffffffe, 0xfffffffa}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r3, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0xc02, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000001540)=[{&(0x7f0000000000)=""/128, 0x80}, {0x0}], 0x2, 0x3, 0x0) 214.114153ms ago: executing program 0 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffe0, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2) getdents64(r5, &(0x7f0000000140)=""/46, 0x2e) getdents64(r5, 0xfffffffffffffffe, 0x29) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(0x4) 137.082486ms ago: executing program 0 (id=755): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@i_version}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") chdir(&(0x7f0000000240)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007118be000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005000100070000000900020073797a31000000001400078008001300000001000800124000000000050004000000000005000500000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x200008a4}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) fstat(r0, &(0x7f00000001c0)) 0s ago: executing program 0 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) clock_adjtime(0x17, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x41, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0xffc99a3b00000000, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x20007ff, 0x3ff, 0x0, 0x59, 0xb}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000), 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000740), 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000140)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) write(r0, &(0x7f0000000500)=' 294967 95 2\\000 000\\ 0\n', 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x82, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x521c, 0x1, 0x61, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000000076080000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): yond EOD, truncated [ 59.308703][ T6676] loop7: p147 start 318767104 is beyond EOD, truncated [ 59.308710][ T6676] loop7: p148 start 318767104 is beyond EOD, truncated [ 59.308718][ T6676] loop7: p149 start 318767104 is beyond EOD, truncated [ 59.308725][ T6676] loop7: p150 start 318767104 is beyond EOD, truncated [ 59.308748][ T6676] loop7: p151 start 318767104 is beyond EOD, truncated [ 59.308759][ T6676] loop7: p152 start 318767104 is beyond EOD, truncated [ 59.308769][ T6676] loop7: p153 start 318767104 is beyond EOD, truncated [ 59.308778][ T6676] loop7: p154 start 318767104 is beyond EOD, truncated [ 59.308786][ T6676] loop7: p155 start 318767104 is beyond EOD, truncated [ 59.308794][ T6676] loop7: p156 start 318767104 is beyond EOD, truncated [ 59.308801][ T6676] loop7: p157 start 318767104 is beyond EOD, truncated [ 59.308809][ T6676] loop7: p158 start 318767104 is beyond EOD, truncated [ 59.308817][ T6676] loop7: p159 start 318767104 is beyond EOD, truncated [ 59.308824][ T6676] loop7: p160 start 318767104 is beyond EOD, truncated [ 59.308832][ T6676] loop7: p161 start 318767104 is beyond EOD, truncated [ 59.308840][ T6676] loop7: p162 start 318767104 is beyond EOD, truncated [ 59.308848][ T6676] loop7: p163 start 318767104 is beyond EOD, truncated [ 59.308855][ T6676] loop7: p164 start 318767104 is beyond EOD, truncated [ 59.308863][ T6676] loop7: p165 start 318767104 is beyond EOD, truncated [ 59.308870][ T6676] loop7: p166 start 318767104 is beyond EOD, truncated [ 59.308878][ T6676] loop7: p167 start 318767104 is beyond EOD, truncated [ 59.317916][ T6676] loop7: p168 start 318767104 is beyond EOD, truncated [ 59.317928][ T6676] loop7: p169 start 318767104 is beyond EOD, truncated [ 59.317937][ T6676] loop7: p170 start 318767104 is beyond EOD, truncated [ 59.317946][ T6676] loop7: p171 start 318767104 is beyond EOD, truncated [ 59.317954][ T6676] loop7: p172 start 318767104 is beyond EOD, truncated [ 59.317963][ T6676] loop7: p173 start 318767104 is beyond EOD, truncated [ 59.317971][ T6676] loop7: p174 start 318767104 is beyond EOD, truncated [ 59.317979][ T6676] loop7: p175 start 318767104 is beyond EOD, truncated [ 59.317987][ T6676] loop7: p176 start 318767104 is beyond EOD, truncated [ 59.317995][ T6676] loop7: p177 start 318767104 is beyond EOD, truncated [ 59.318002][ T6676] loop7: p178 start 318767104 is beyond EOD, truncated [ 59.318010][ T6676] loop7: p179 start 318767104 is beyond EOD, truncated [ 59.318018][ T6676] loop7: p180 start 318767104 is beyond EOD, truncated [ 59.318026][ T6676] loop7: p181 start 318767104 is beyond EOD, truncated [ 59.318033][ T6676] loop7: p182 start 318767104 is beyond EOD, truncated [ 59.318041][ T6676] loop7: p183 start 318767104 is beyond EOD, truncated [ 59.318049][ T6676] loop7: p184 start 318767104 is beyond EOD, truncated [ 59.318057][ T6676] loop7: p185 start 318767104 is beyond EOD, truncated [ 59.318064][ T6676] loop7: p186 start 318767104 is beyond EOD, truncated [ 59.318072][ T6676] loop7: p187 start 318767104 is beyond EOD, truncated [ 59.318080][ T6676] loop7: p188 start 318767104 is beyond EOD, truncated [ 59.318087][ T6676] loop7: p189 start 318767104 is beyond EOD, truncated [ 59.318095][ T6676] loop7: p190 start 318767104 is beyond EOD, truncated [ 59.318103][ T6676] loop7: p191 start 318767104 is beyond EOD, truncated [ 59.318111][ T6676] loop7: p192 start 318767104 is beyond EOD, truncated [ 59.318118][ T6676] loop7: p193 start 318767104 is beyond EOD, truncated [ 59.318126][ T6676] loop7: p194 start 318767104 is beyond EOD, truncated [ 59.318133][ T6676] loop7: p195 start 318767104 is beyond EOD, truncated [ 59.318141][ T6676] loop7: p196 start 318767104 is beyond EOD, truncated [ 59.318149][ T6676] loop7: p197 start 318767104 is beyond EOD, truncated [ 59.318157][ T6676] loop7: p198 start 318767104 is beyond EOD, truncated [ 59.318164][ T6676] loop7: p199 start 318767104 is beyond EOD, truncated [ 59.318172][ T6676] loop7: p200 start 318767104 is beyond EOD, truncated [ 59.318179][ T6676] loop7: p201 start 318767104 is beyond EOD, truncated [ 59.318187][ T6676] loop7: p202 start 318767104 is beyond EOD, truncated [ 59.318195][ T6676] loop7: p203 start 318767104 is beyond EOD, truncated [ 59.318202][ T6676] loop7: p204 start 318767104 is beyond EOD, truncated [ 59.318210][ T6676] loop7: p205 start 318767104 is beyond EOD, truncated [ 59.318218][ T6676] loop7: p206 start 318767104 is beyond EOD, truncated [ 59.318226][ T6676] loop7: p207 start 318767104 is beyond EOD, truncated [ 59.318234][ T6676] loop7: p208 start 318767104 is beyond EOD, truncated [ 59.318241][ T6676] loop7: p209 start 318767104 is beyond EOD, truncated [ 59.318249][ T6676] loop7: p210 start 318767104 is beyond EOD, truncated [ 59.318256][ T6676] loop7: p211 start 318767104 is beyond EOD, truncated [ 59.318264][ T6676] loop7: p212 start 318767104 is beyond EOD, truncated [ 59.318271][ T6676] loop7: p213 start 318767104 is beyond EOD, truncated [ 59.318279][ T6676] loop7: p214 start 318767104 is beyond EOD, truncated [ 59.318287][ T6676] loop7: p215 start 318767104 is beyond EOD, truncated [ 59.318295][ T6676] loop7: p216 start 318767104 is beyond EOD, truncated [ 59.318302][ T6676] loop7: p217 start 318767104 is beyond EOD, truncated [ 59.318310][ T6676] loop7: p218 start 318767104 is beyond EOD, truncated [ 59.318317][ T6676] loop7: p219 start 318767104 is beyond EOD, truncated [ 59.318325][ T6676] loop7: p220 start 318767104 is beyond EOD, truncated [ 59.318333][ T6676] loop7: p221 start 318767104 is beyond EOD, truncated [ 59.318340][ T6676] loop7: p222 start 318767104 is beyond EOD, truncated [ 59.318348][ T6676] loop7: p223 start 318767104 is beyond EOD, truncated [ 59.318356][ T6676] loop7: p224 start 318767104 is beyond EOD, truncated [ 59.318363][ T6676] loop7: p225 start 318767104 is beyond EOD, truncated [ 59.318371][ T6676] loop7: p226 start 318767104 is beyond EOD, truncated [ 59.318378][ T6676] loop7: p227 start 318767104 is beyond EOD, truncated [ 59.318386][ T6676] loop7: p228 start 318767104 is beyond EOD, truncated [ 59.318394][ T6676] loop7: p229 start 318767104 is beyond EOD, truncated [ 59.318401][ T6676] loop7: p230 start 318767104 is beyond EOD, truncated [ 59.318409][ T6676] loop7: p231 start 318767104 is beyond EOD, truncated [ 59.318417][ T6676] loop7: p232 start 318767104 is beyond EOD, truncated [ 59.318424][ T6676] loop7: p233 start 318767104 is beyond EOD, truncated [ 59.318432][ T6676] loop7: p234 start 318767104 is beyond EOD, truncated [ 59.318440][ T6676] loop7: p235 start 318767104 is beyond EOD, truncated [ 59.318447][ T6676] loop7: p236 start 318767104 is beyond EOD, truncated [ 59.318455][ T6676] loop7: p237 start 318767104 is beyond EOD, truncated [ 59.318462][ T6676] loop7: p238 start 318767104 is beyond EOD, truncated [ 59.318470][ T6676] loop7: p239 start 318767104 is beyond EOD, truncated [ 59.318478][ T6676] loop7: p240 start 318767104 is beyond EOD, truncated [ 59.318485][ T6676] loop7: p241 start 318767104 is beyond EOD, truncated [ 59.318493][ T6676] loop7: p242 start 318767104 is beyond EOD, truncated [ 59.318501][ T6676] loop7: p243 start 318767104 is beyond EOD, truncated [ 59.318508][ T6676] loop7: p244 start 318767104 is beyond EOD, truncated [ 59.318516][ T6676] loop7: p245 start 318767104 is beyond EOD, truncated [ 59.318523][ T6676] loop7: p246 start 318767104 is beyond EOD, truncated [ 59.318531][ T6676] loop7: p247 start 318767104 is beyond EOD, truncated [ 59.318539][ T6676] loop7: p248 start 318767104 is beyond EOD, truncated [ 59.318546][ T6676] loop7: p249 start 318767104 is beyond EOD, truncated [ 59.318554][ T6676] loop7: p250 start 318767104 is beyond EOD, truncated [ 59.318562][ T6676] loop7: p251 start 318767104 is beyond EOD, truncated [ 59.318569][ T6676] loop7: p252 start 318767104 is beyond EOD, truncated [ 59.318577][ T6676] loop7: p253 start 318767104 is beyond EOD, truncated [ 59.318585][ T6676] loop7: p254 start 318767104 is beyond EOD, truncated [ 59.318592][ T6676] loop7: p255 start 318767104 is beyond EOD, truncated [ 59.497994][ T6481] veth0_vlan: entered promiscuous mode [ 59.585487][ T6481] veth1_vlan: entered promiscuous mode [ 59.610381][ T4724] udevd[4724]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 59.649207][ T6481] veth0_macvtap: entered promiscuous mode [ 59.666637][ T6481] veth1_macvtap: entered promiscuous mode [ 59.706004][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.715213][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.730147][ T1181] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.730285][ T1181] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.730314][ T1181] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.780417][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.798707][ T4394] 8021q: adding VLAN 0 to HW filter on device eth14 [ 59.830968][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.831004][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.872460][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.872495][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.984818][ T6683] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 59.991660][ T6683] bond0 (unregistering): Released all slaves [ 60.142514][ T4707] Bluetooth: hci3: command tx timeout [ 60.328324][ T4394] 8021q: adding VLAN 0 to HW filter on device eth15 [ 60.368864][ T6729] FAULT_INJECTION: forcing a failure. [ 60.368864][ T6729] name fail_futex, interval 1, probability 0, space 0, times 0 [ 60.368903][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.5.276 Not tainted syzkaller #0 PREEMPT [ 60.368921][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.368929][ T6729] Call trace: [ 60.368938][ T6729] show_stack+0x2c/0x3c (C) [ 60.368960][ T6729] __dump_stack+0x30/0x40 [ 60.368972][ T6729] dump_stack_lvl+0xd8/0x12c [ 60.368982][ T6729] dump_stack+0x1c/0x28 [ 60.368992][ T6729] should_fail_ex+0x41c/0x590 [ 60.369003][ T6729] should_fail+0x14/0x24 [ 60.369013][ T6729] get_futex_key+0x1ec/0x12b0 [ 60.369023][ T6729] futex_wake+0x10c/0x594 [ 60.369033][ T6729] do_futex+0x2c4/0x378 [ 60.369041][ T6729] __arm64_sys_futex+0x2e4/0x418 [ 60.369051][ T6729] invoke_syscall+0x98/0x244 [ 60.369061][ T6729] el0_svc_common+0xec/0x23c [ 60.369071][ T6729] do_el0_svc+0x4c/0x5c [ 60.369081][ T6729] el0_svc+0x64/0x260 [ 60.369090][ T6729] el0t_64_sync_handler+0x44/0x104 [ 60.369099][ T6729] el0t_64_sync+0x198/0x19c [ 60.604416][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.642321][ T5099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.666723][ T6758] ext4: Unknown parameter 'appraise_type' [ 60.844394][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 60.889896][ T6761] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 61.055074][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.392420][ T6784] No such timeout policy "syz1" [ 61.651299][ T6793] netlink: 'syz.3.288': attribute type 21 has an invalid length. [ 61.691054][ T6798] set_capacity_and_notify: 3 callbacks suppressed [ 61.692876][ T6798] loop3: detected capacity change from 0 to 512 [ 61.726358][ T6798] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.289: iget: bad i_size value: 38620345925642 [ 61.730146][ T6798] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.730534][ T6798] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.289: couldn't read orphan inode 15 (err -117) [ 61.732352][ T6798] loop3: lost filesystem error report for type 5 error -117 [ 61.734976][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 61.734992][ C1] EXT4-fs (loop3): initial error at time 831: ext4_orphan_get:1403: inode 15 [ 61.735013][ C1] EXT4-fs (loop3): last error at time 831: ext4_orphan_get:1408 [ 61.744959][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.775893][ T6798] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 61.783131][ T30] audit: type=1326 audit(831.662:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.3.289" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=172 compat=0 ip=0xffffa5172e0c code=0x0 [ 61.840285][ T6812] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20 [ 61.840411][ T6812] IPVS: set_ctl: invalid protocol: 26615 127.0.0.1:21 [ 62.123343][ T4707] Bluetooth: hci3: command tx timeout [ 62.214633][ T6826] loop4: detected capacity change from 0 to 512 [ 62.221069][ T6826] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.238411][ T6826] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.243118][ T6826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.294: bg 0: block 248: padding at end of block bitmap is not set [ 62.244896][ T6826] loop4: lost filesystem error report for type 5 error -117 [ 62.246793][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.246826][ C0] EXT4-fs (loop4): last error at time 832: ext4_validate_block_bitmap:445 [ 62.252814][ T6826] Quota error (device loop4): write_blk: dquota write failed [ 62.252866][ T6826] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 62.254336][ T6826] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.294: Failed to acquire dquot type 1 [ 62.254367][ T6826] loop4: lost filesystem error report for type 5 error -28 [ 62.278584][ T6826] EXT4-fs (loop4): 1 truncate cleaned up [ 62.279057][ T6826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 62.348077][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 62.349186][ T113] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 62.349259][ T113] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 62.349272][ T113] loop4: lost filesystem error report for type 5 error -117 [ 62.404782][ T4707] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1 [ 62.491114][ T6834] loop5: detected capacity change from 0 to 512 [ 62.510731][ T6834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.513301][ T5099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.577735][ T6838] netlink: 'syz.4.297': attribute type 8 has an invalid length. [ 62.587275][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.678981][ T6844] loop4: detected capacity change from 0 to 128 [ 62.685547][ T6844] vfat: Unknown parameter 'vcan0' [ 62.784149][ T6852] loop8: detected capacity change from 0 to 512 [ 62.786010][ T6852] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 62.790705][ T6852] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 62.790867][ T6852] EXT4-fs (loop8): orphan cleanup on readonly fs [ 62.792283][ T6852] Quota error (device loop8): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 62.792375][ T6852] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.792390][ T6852] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 62.808306][ T6852] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #16: comm syz.8.303: iget: immutable or append flags not allowed on symlinks [ 62.808351][ T6852] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.809124][ C0] EXT4-fs (loop8): initial error at time 832: ext4_orphan_get:1403: inode 16 [ 62.809168][ C0] EXT4-fs (loop8): last error at time 832: ext4_orphan_get:1403: inode 16 [ 62.842751][ T6852] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.303: couldn't read orphan inode 16 (err -117) [ 62.845011][ T6852] loop8: lost filesystem error report for type 5 error -117 [ 62.871665][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 63.039085][ T6852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.058191][ T6481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.304599][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.309'. [ 63.304633][ T6875] bridge: RTM_NEWNEIGH with invalid ether address [ 63.308559][ T6875] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.309'. [ 63.671657][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.671714][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 63.716226][ T6892] loop8: detected capacity change from 0 to 256 [ 63.723618][ T10] cfg80211: failed to load regulatory.db [ 63.762933][ T6902] loop5: detected capacity change from 0 to 512 [ 63.767060][ T6902] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.771152][ T6902] EXT4-fs (loop5): Test dummy encryption mode enabled [ 63.771192][ T6902] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.783296][ T6902] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.313: bad orphan inode 131083 [ 63.783337][ T6902] loop5: lost filesystem error report for type 5 error -117 [ 63.783929][ T6902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.901605][ T6908] netlink: 280 bytes leftover after parsing attributes in process `syz.3.315'. [ 63.922142][ T6905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.315'. [ 63.946217][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.946691][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.981243][ T6915] loop7: detected capacity change from 0 to 512 [ 64.022687][ T6915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.104547][ T4707] Bluetooth: hci3: command tx timeout [ 64.134014][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.148526][ T6916] fscrypt: AES-256-XTS using blk-crypto-fallback [ 64.154407][ T6921] loop4: detected capacity change from 0 to 512 [ 64.273913][ T6932] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 64.306204][ T30] audit: type=1326 audit(834.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.7.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 64.306251][ T30] audit: type=1326 audit(834.318:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.7.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 64.317160][ T30] audit: type=1326 audit(834.329:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.7.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 64.317191][ T30] audit: type=1326 audit(834.329:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.7.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 64.318090][ T30] audit: type=1326 audit(834.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.7.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 64.441170][ T6933] loop7: detected capacity change from 0 to 2048 [ 64.483173][ T6933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.503039][ T6944] EXT4-fs error (device loop8): ext4_quota_enable:7260: inode #4: comm syz.8.323: iget: bad i_size value: -281474976704512 [ 64.503093][ T6944] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 64.504166][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 64.504190][ C0] EXT4-fs (loop8): initial error at time 834: ext4_quota_enable:7260: inode 4 [ 64.504227][ C0] EXT4-fs (loop8): last error at time 834: ext4_quota_enable:7260: inode 4 [ 64.505480][ T6944] EXT4-fs error (device loop8): ext4_quota_enable:7263: comm syz.8.323: Bad quota inode: 4, type: 1 [ 64.505500][ T6944] loop8: lost filesystem error report for type 5 error -117 [ 64.505659][ T6944] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.512287][ T6944] EXT4-fs (loop8): mount failed [ 64.639986][ T6950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.732585][ T6950] EXT4-fs (loop4): 1 truncate cleaned up [ 64.733470][ T6950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.749226][ T6950] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #2: block 13: comm syz.4.322: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 64.752207][ T6950] EXT4-fs (loop4): Remounting filesystem read-only [ 64.752234][ T6950] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #2: comm syz.4.322: directory missing '..' [ 64.845145][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.911151][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.005708][ T6961] EXT4-fs: Ignoring removed orlov option [ 65.013276][ T6961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.060609][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.151855][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.170915][ T6971] trusted_key: syz.4.327 sent an empty control message without MSG_MORE. [ 65.186888][ T6973] ip_tables: iptables: counters copy to user failed while replacing table [ 65.216089][ T6973] netlink: 100 bytes leftover after parsing attributes in process `syz.3.328'. [ 65.248609][ T6979] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.408130][ T5077] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.539071][ T6989] FAULT_INJECTION: forcing a failure. [ 65.539071][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.539115][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT [ 65.539131][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.539138][ T6989] Call trace: [ 65.539142][ T6989] show_stack+0x2c/0x3c (C) [ 65.539162][ T6989] __dump_stack+0x30/0x40 [ 65.539173][ T6989] dump_stack_lvl+0xd8/0x12c [ 65.539183][ T6989] dump_stack+0x1c/0x28 [ 65.539193][ T6989] should_fail_ex+0x41c/0x590 [ 65.539204][ T6989] should_fail+0x14/0x24 [ 65.539214][ T6989] should_fail_usercopy+0x20/0x30 [ 65.539224][ T6989] _copy_from_iter+0x188/0x1064 [ 65.539235][ T6989] netlink_sendmsg+0x570/0x948 [ 65.539245][ T6989] __sock_sendmsg+0xc8/0x17c [ 65.539253][ T6989] ____sys_sendmsg+0x3d0/0x6c8 [ 65.539261][ T6989] ___sys_sendmsg+0x198/0x224 [ 65.539270][ T6989] __sys_sendmsg+0x158/0x204 [ 65.539278][ T6989] __arm64_sys_sendmsg+0x88/0x9c [ 65.539287][ T6989] invoke_syscall+0x98/0x244 [ 65.539297][ T6989] el0_svc_common+0xec/0x23c [ 65.539307][ T6989] do_el0_svc+0x4c/0x5c [ 65.539316][ T6989] el0_svc+0x64/0x260 [ 65.539326][ T6989] el0t_64_sync_handler+0x44/0x104 [ 65.539335][ T6989] el0t_64_sync+0x198/0x19c [ 65.712245][ T7023] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.333: iget: bad i_size value: 38620345925642 [ 65.717186][ T7023] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.722604][ T7023] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.333: couldn't read orphan inode 15 (err -117) [ 65.722651][ T7023] loop8: lost filesystem error report for type 5 error -117 [ 65.724949][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 65.724966][ C0] EXT4-fs (loop8): initial error at time 835: ext4_orphan_get:1403: inode 15 [ 65.724982][ C0] EXT4-fs (loop8): last error at time 835: ext4_orphan_get:1408 [ 65.735796][ T7023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.819971][ T7034] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.333: bg 0: block 5: invalid block bitmap [ 65.831901][ T7034] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 65.831936][ T7034] EXT4-fs (loop8): This should not happen!! Data will be lost [ 65.831936][ T7034] [ 65.831957][ T7034] EXT4-fs (loop8): Total free blocks count 0 [ 65.831970][ T7034] EXT4-fs (loop8): Free/Dirty block details [ 65.831987][ T7034] EXT4-fs (loop8): free_blocks=0 [ 65.832003][ T7034] EXT4-fs (loop8): dirty_blocks=480 [ 65.832014][ T7034] EXT4-fs (loop8): Block reservation details [ 65.832025][ T7034] EXT4-fs (loop8): i_reserved_data_blocks=480 [ 65.851139][ T7031] syz.5.334: attempt to access beyond end of device [ 65.851139][ T7031] loop5: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 65.851251][ T7031] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 65.851277][ T7031] FAT-fs (loop5): Filesystem has been set read-only [ 65.851310][ T7031] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 326) [ 65.901971][ T7032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.942013][ T1181] rpcbind: server 127.0.0.1 not responding, timed out [ 65.954999][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.336'. [ 65.967418][ T7032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 65.979390][ T7032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 65.982747][ T7032] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.982747][ T7032] [ 65.982790][ T7032] EXT4-fs (loop4): Total free blocks count 0 [ 65.982809][ T7032] EXT4-fs (loop4): Free/Dirty block details [ 65.982836][ T7032] EXT4-fs (loop4): free_blocks=65280 [ 65.982862][ T7032] EXT4-fs (loop4): dirty_blocks=33 [ 65.982877][ T7032] EXT4-fs (loop4): Block reservation details [ 65.982891][ T7032] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 65.983334][ T7041] vlan2: entered allmulticast mode [ 65.983359][ T7041] bridge3: entered allmulticast mode [ 66.011198][ T6481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.015739][ T7040] bridge3: port 1(erspan0) entered blocking state [ 66.015789][ T7040] bridge3: port 1(erspan0) entered disabled state [ 66.015855][ T7040] erspan0: entered allmulticast mode [ 66.016338][ T7040] erspan0: entered promiscuous mode [ 66.016676][ T7040] bridge3: port 1(erspan0) entered blocking state [ 66.016706][ T7040] bridge3: port 1(erspan0) entered forwarding state [ 66.301580][ T7081] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.349000][ T7081] EXT4-fs (loop5): 1 truncate cleaned up [ 66.349544][ T7081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.355817][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.426493][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.434213][ T7100] netlink: 'syz.4.343': attribute type 7 has an invalid length. [ 66.464821][ T7103] set_capacity_and_notify: 11 callbacks suppressed [ 66.465501][ T7103] loop3: detected capacity change from 0 to 512 [ 66.474908][ T7103] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.486985][ T7103] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.340: inode has both inline data and extents flags [ 66.487033][ T7103] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.487669][ T7103] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.340: couldn't read orphan inode 15 (err -117) [ 66.487693][ T7103] loop3: lost filesystem error report for type 5 error -117 [ 66.488332][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.547909][ T7110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.586523][ T5099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.749212][ T7123] loop3: detected capacity change from 0 to 8192 [ 66.764512][ T7123] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.784179][ T7123] Soft offlining pfn 0x2190ff at process virtual address 0x2016e000 [ 66.826826][ T7123] Memory failure: 0x2190ff: unhandlable page. [ 66.938267][ T7145] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.938376][ T7143] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 67.055484][ T7154] netlink: 60 bytes leftover after parsing attributes in process `syz.4.354'. [ 67.110318][ T12] IPVS: starting estimator thread 0... [ 67.136745][ T7170] loop8: detected capacity change from 0 to 128 [ 67.144191][ T7170] vfat: Unknown parameter 'hortname' [ 67.168223][ T7173] loop4: detected capacity change from 0 to 128 [ 67.169564][ T7173] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.172407][ T7173] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.202377][ T7167] IPVS: using max 56 ests per chain, 134400 per kthread [ 67.213099][ T113] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.282945][ T7184] batman_adv: batadv0: Adding interface: veth0 [ 67.284298][ T7184] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.290003][ T7184] batman_adv: batadv0: Interface activated: veth0 [ 67.291694][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.293329][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.296426][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.296458][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.298266][ T7186] batman_adv: batadv0: Interface deactivated: veth0 [ 67.298279][ T7186] batman_adv: batadv0: Removing interface: veth0 [ 67.384278][ T7184] loop7: detected capacity change from 0 to 4096 [ 67.384760][ T7184] ext4: Unknown parameter 'fsuuid' [ 67.398745][ T7194] loop4: detected capacity change from 0 to 2048 [ 67.432424][ T7194] GPT:first_usable_lbas don't match. [ 67.432461][ T7194] GPT:34 != 290 [ 67.432484][ T7194] GPT: Use GNU Parted to correct GPT errors. [ 67.432550][ T7194] loop4: p1 p2 p3 [ 67.545418][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 67.547943][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.548192][ T4724] udevd[4724]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.560264][ T7206] loop4: detected capacity change from 0 to 1024 [ 67.583757][ T723] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.669136][ T7217] loop4: detected capacity change from 0 to 512 [ 67.673191][ T7217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.695166][ T7217] EXT4-fs (loop4): 1 truncate cleaned up [ 67.695681][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.702534][ T4714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.709895][ T4714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.714874][ T4714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.716845][ T723] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.732495][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.742150][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.761323][ T7224] loop7: detected capacity change from 0 to 2048 [ 67.774393][ T7218] FAULT_INJECTION: forcing a failure. [ 67.774393][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 67.777130][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.5.367 Not tainted syzkaller #0 PREEMPT [ 67.777150][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.777157][ T7218] Call trace: [ 67.777161][ T7218] show_stack+0x2c/0x3c (C) [ 67.777185][ T7218] __dump_stack+0x30/0x40 [ 67.777199][ T7218] dump_stack_lvl+0xd8/0x12c [ 67.777211][ T7218] dump_stack+0x1c/0x28 [ 67.777223][ T7218] should_fail_ex+0x41c/0x590 [ 67.777236][ T7218] should_failslab+0xc4/0x120 [ 67.777250][ T7218] __kvmalloc_node_noprof+0x160/0x7fc [ 67.777259][ T7218] alloc_netdev_mqs+0xa50/0xf34 [ 67.777272][ T7218] vti6_locate+0x3d4/0x524 [ 67.777285][ T7218] vti6_siocdevprivate+0x4c4/0x6bc [ 67.777298][ T7218] dev_ifsioc+0x654/0xc34 [ 67.777309][ T7218] dev_ioctl+0x560/0xc88 [ 67.777319][ T7218] sock_ioctl+0x734/0x7ec [ 67.777330][ T7218] __arm64_sys_ioctl+0x154/0x1cc [ 67.777343][ T7218] invoke_syscall+0x98/0x244 [ 67.777355][ T7218] el0_svc_common+0xec/0x23c [ 67.777367][ T7218] do_el0_svc+0x4c/0x5c [ 67.777378][ T7218] el0_svc+0x64/0x260 [ 67.777389][ T7218] el0t_64_sync_handler+0x44/0x104 [ 67.777399][ T7218] el0t_64_sync+0x198/0x19c [ 67.843657][ T7224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.852850][ T723] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.938262][ T5116] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.941546][ T5116] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.961456][ T113] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 67.970079][ T113] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.973006][ T113] EXT4-fs (loop7): This should not happen!! Data will be lost [ 67.973006][ T113] [ 67.973048][ T113] EXT4-fs (loop7): Total free blocks count 0 [ 67.973067][ T113] EXT4-fs (loop7): Free/Dirty block details [ 67.973082][ T113] EXT4-fs (loop7): free_blocks=2415919504 [ 67.973107][ T113] EXT4-fs (loop7): dirty_blocks=16 [ 67.973120][ T113] EXT4-fs (loop7): Block reservation details [ 67.973131][ T113] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 67.977807][ T113] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 67.983868][ T5823] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 68.006320][ T723] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.178743][ T5116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.196748][ T723] bridge_slave_1: left allmulticast mode [ 68.196788][ T723] bridge_slave_1: left promiscuous mode [ 68.196876][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.201988][ T723] bridge_slave_0: left allmulticast mode [ 68.202016][ T723] bridge_slave_0: left promiscuous mode [ 68.202087][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.317009][ T723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.322962][ T4707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.328211][ T4707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.329877][ T4707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.331674][ T723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.332360][ T4707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.332595][ T4707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.362705][ T723] bond0 (unregistering): Released all slaves [ 68.587975][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.589891][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.593453][ T7220] bridge_slave_0: entered allmulticast mode [ 68.595628][ T7220] bridge_slave_0: entered promiscuous mode [ 68.596480][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.596516][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.596583][ T7220] bridge_slave_1: entered allmulticast mode [ 68.597014][ T7220] bridge_slave_1: entered promiscuous mode [ 68.841923][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.842878][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.884913][ T7220] team0: Port device team_slave_0 added [ 68.887225][ T7220] team0: Port device team_slave_1 added [ 68.951630][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.951658][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.951673][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.952792][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.952802][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.952819][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.978850][ T7326] loop3: detected capacity change from 0 to 1024 [ 68.993499][ T7326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.043055][ T723] hsr_slave_0: left promiscuous mode [ 69.046605][ T723] hsr_slave_1: left promiscuous mode [ 69.046992][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.047009][ T723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.053998][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.056748][ T723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.065943][ T723] veth1_macvtap: left promiscuous mode [ 69.068069][ T723] veth0_macvtap: left promiscuous mode [ 69.068132][ T723] veth1_vlan: left promiscuous mode [ 69.068175][ T723] veth0_vlan: left promiscuous mode [ 69.256451][ T7325] cgroup: fork rejected by pids controller in /syz3 [ 69.271150][ T723] team0 (unregistering): Port device team_slave_1 removed [ 69.351322][ T5069] IPVS: starting estimator thread 0... [ 69.355140][ T723] team0 (unregistering): Port device team_slave_0 removed [ 69.424439][ T7360] syz.7.381 (7360): drop_caches: 0 [ 69.456785][ T7220] hsr_slave_0: entered promiscuous mode [ 69.457615][ T7365] IPVS: using max 56 ests per chain, 134400 per kthread [ 69.464775][ T7220] hsr_slave_1: entered promiscuous mode [ 69.466375][ T7220] debugfs: 'hsr0' already exists in 'hsr' [ 69.469319][ T7220] Cannot create hsr debugfs directory [ 69.538988][ T7341] netlink: 'syz.7.381': attribute type 1 has an invalid length. [ 69.540896][ T7341] netlink: 'syz.7.381': attribute type 7 has an invalid length. [ 69.542422][ T7341] netlink: 'syz.7.381': attribute type 8 has an invalid length. [ 69.545267][ T7341] syzkaller0: entered promiscuous mode [ 69.547406][ T7341] syzkaller0: entered allmulticast mode [ 69.649411][ T7380] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 69.658146][ T7220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 69.662897][ T7380] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.665457][ T7380] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.383: bad orphan inode 15 [ 69.665506][ T7380] loop5: lost filesystem error report for type 5 error -117 [ 69.667687][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 69.667698][ C0] EXT4-fs (loop5): initial error at time 4789532771: ext4_orphan_get:1429 [ 69.667712][ C0] EXT4-fs (loop5): last error at time 4789532771: ext4_orphan_get:1429 [ 69.668474][ T4714] Bluetooth: hci3: command tx timeout [ 69.677214][ T7380] EXT4-fs (loop5): Remounting filesystem read-only [ 69.677251][ T7380] ext4_test_bit(bit=14, block=18) = 1 [ 69.677270][ T7380] is_bad_inode(inode)=0 [ 69.677285][ T7380] NEXT_ORPHAN(inode)=1023 [ 69.677297][ T7380] max_ino=32 [ 69.677307][ T7380] i_nlink=0 [ 69.677946][ T7380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.705066][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.715110][ T7220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 69.719819][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.723162][ T7220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 69.745191][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.769484][ T4394] 8021q: adding VLAN 0 to HW filter on device eth17 [ 69.771134][ T7220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 69.773195][ T5099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.774200][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.780784][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.889277][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.890507][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.891729][ T7282] bridge_slave_0: entered allmulticast mode [ 69.893904][ T7282] bridge_slave_0: entered promiscuous mode [ 69.894968][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.895013][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.895206][ T7282] bridge_slave_1: entered allmulticast mode [ 69.895755][ T7282] bridge_slave_1: entered promiscuous mode [ 69.903072][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.903953][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.912873][ T7282] team0: Port device team_slave_0 added [ 69.913641][ T7282] team0: Port device team_slave_1 added [ 69.919838][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.919847][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.919861][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.920411][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.920419][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.920432][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.930496][ T7282] hsr_slave_0: entered promiscuous mode [ 69.930807][ T7282] hsr_slave_1: entered promiscuous mode [ 69.931565][ T7282] debugfs: 'hsr0' already exists in 'hsr' [ 69.931576][ T7282] Cannot create hsr debugfs directory [ 70.276696][ T4714] Bluetooth: hci2: command tx timeout [ 70.661776][ T723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.677943][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.681351][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.682960][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.683001][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.708079][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.708125][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.738507][ T7220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.738553][ T7220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.809090][ T723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.897458][ T723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.046727][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 71.046773][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.393'. [ 71.055186][ T723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.098739][ T4394] 8021q: adding VLAN 0 to HW filter on device eth16 [ 71.204411][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.289849][ T7482] set_capacity_and_notify: 2 callbacks suppressed [ 71.302046][ T7482] loop7: detected capacity change from 0 to 512 [ 71.302826][ T7482] EXT4-fs (loop7): Test dummy encryption mode enabled [ 71.322497][ T7482] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.396: inode has both inline data and extents flags [ 71.322543][ T7482] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.322713][ T7482] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.396: couldn't read orphan inode 15 (err -117) [ 71.322735][ T7482] loop7: lost filesystem error report for type 5 error -117 [ 71.323279][ T7482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.353518][ T7482] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 71.396094][ T7482] overlay: Unknown parameter 'fsuuid' [ 71.426687][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.464907][ T723] bond0 (unregistering): Released all slaves [ 71.648828][ T4714] Bluetooth: hci3: command tx timeout [ 71.692996][ T7220] veth0_vlan: entered promiscuous mode [ 71.706722][ T7220] veth1_vlan: entered promiscuous mode [ 71.730013][ T7510] input: syz1 as /devices/virtual/input/input10 [ 71.740500][ T7220] veth0_macvtap: entered promiscuous mode [ 71.741587][ T7220] veth1_macvtap: entered promiscuous mode [ 71.756387][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.760428][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.770654][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.770763][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.770787][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.770802][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948519][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.948550][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.952153][ T4394] 8021q: adding VLAN 0 to HW filter on device eth18 [ 71.965645][ T723] hsr_slave_0: left promiscuous mode [ 71.967508][ T723] hsr_slave_1: left promiscuous mode [ 71.973793][ T723] veth1_macvtap: left promiscuous mode [ 71.973848][ T723] veth0_macvtap: left promiscuous mode [ 71.973904][ T723] veth1_vlan: left promiscuous mode [ 71.973941][ T723] veth0_vlan: left promiscuous mode [ 72.224125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.224163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.258054][ T4714] Bluetooth: hci2: command tx timeout [ 72.374166][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 72.374507][ T30] audit: type=1326 audit(4789532774.640:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.374530][ T30] audit: type=1326 audit(4789532774.640:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.386522][ T30] audit: type=1326 audit(4789532774.650:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.391792][ T30] audit: type=1326 audit(4789532774.661:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.391834][ T30] audit: type=1326 audit(4789532774.661:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.410453][ T30] audit: type=1326 audit(4789532774.682:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.410495][ T30] audit: type=1326 audit(4789532774.682:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.418897][ T30] audit: type=1326 audit(4789532774.682:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.419047][ T30] audit: type=1326 audit(4789532774.682:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.419103][ T30] audit: type=1326 audit(4789532774.682:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.9.405" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95579368 code=0x7ffc0000 [ 72.452128][ T7547] loop3: detected capacity change from 0 to 256 [ 72.505447][ T7547] vfat filesystem being mounted at /90/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 72.549306][ T7543] Illegal XDP return value 962201738 on prog (id 48) dev N/A, expect packet loss! [ 72.721219][ T7561] loop3: detected capacity change from 0 to 1024 [ 72.737264][ T7563] netlink: 'syz.7.408': attribute type 10 has an invalid length. [ 72.740653][ T7561] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 72.740735][ T7561] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.755855][ T7563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.759097][ T4394] 8021q: adding VLAN 0 to HW filter on device eth19 [ 72.769286][ T7561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.774967][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 72.853337][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 72.950305][ T5099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.060384][ T7282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.068662][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.077808][ T7282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.081874][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.083813][ T7282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.093331][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.095235][ T7282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.108373][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.136761][ T7582] loop9: detected capacity change from 0 to 512 [ 73.160330][ T7582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.160407][ T7582] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.205033][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.220360][ T7577] syzkaller0: entered promiscuous mode [ 73.220403][ T7577] syzkaller0: entered allmulticast mode [ 73.229962][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.231524][ T7577] TC_ACT_REPEAT abuse ? [ 73.232501][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.232527][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.259140][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.259189][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.293362][ T5099] overlayfs: failed lookup in lower (newroot/93, name='bus', err=-40): overlapping layers [ 73.293516][ T5099] overlayfs: failed lookup in lower (newroot/93, name='bus', err=-40): overlapping layers [ 73.317428][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.396143][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.414'. [ 73.629366][ T4714] Bluetooth: hci3: command tx timeout [ 73.712202][ T7620] loop7: detected capacity change from 0 to 4096 [ 73.727523][ T7620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.789468][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.919880][ T7633] input: syz1 as /devices/virtual/input/input11 [ 74.248137][ T4714] Bluetooth: hci2: command tx timeout [ 74.395233][ T7609] syzkaller0: entered promiscuous mode [ 74.395271][ T7609] syzkaller0: entered allmulticast mode [ 74.405531][ T7645] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 74.483004][ T7656] device-mapper: table: 248:1: loop1 too small for target: start=0, len=2048, dev_size=1024 [ 74.483040][ T7656] device-mapper: core: Cannot calculate initial queue limits [ 74.483046][ T7656] device-mapper: ioctl: unable to set up device queue for new table. [ 74.523458][ T7665] device-mapper: core: 248:0: mapping table unavailable, erroring io [ 74.544875][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.607664][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.637563][ T7282] veth0_vlan: entered promiscuous mode [ 74.645491][ T7282] veth1_vlan: entered promiscuous mode [ 74.671283][ T7282] veth0_macvtap: entered promiscuous mode [ 74.698447][ T4707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.701377][ T4707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.703552][ T4707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.704220][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.708487][ T4707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.710545][ T4707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.727756][ T7282] veth1_macvtap: entered promiscuous mode [ 74.733765][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.736799][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.785074][ T5062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.804753][ T5062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.804978][ T5062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.805007][ T5062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.805017][ T5062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.805123][ T5062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822989][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.823022][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.843576][ T7693] loop9: detected capacity change from 0 to 512 [ 74.859379][ T7691] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 74.878718][ T7693] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 74.891753][ T7693] loop9: detected capacity change from 0 to 512 [ 74.904264][ T7693] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 74.919354][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.984040][ T7703] Cannot find set identified by id 0 to match [ 75.053760][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.090711][ T7706] netlink: 88 bytes leftover after parsing attributes in process `syz.7.427'. [ 75.197520][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.430'. [ 75.232067][ T12] bridge_slave_1: left allmulticast mode [ 75.232101][ T12] bridge_slave_1: left promiscuous mode [ 75.232212][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.236685][ T12] bridge_slave_0: left allmulticast mode [ 75.236712][ T12] bridge_slave_0: left promiscuous mode [ 75.236799][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.352230][ T7741] fuse: blksize only supported for fuseblk [ 75.463497][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.497298][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.516129][ T12] bond0 (unregistering): Released all slaves [ 75.561259][ T12] IPVS: stopping master sync thread 6761 ... [ 75.620642][ T4714] Bluetooth: hci3: command tx timeout [ 75.685552][ T7771] CUSE: DEVNAME unspecified [ 75.694234][ T7771] netlink: 'syz.9.438': attribute type 142 has an invalid length. [ 75.710767][ T7769] loop7: detected capacity change from 0 to 256 [ 75.711226][ T7769] vfat: Unknown parameter 'hash' [ 76.068977][ T7812] loop9: detected capacity change from 0 to 4096 [ 76.080917][ T7812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.080949][ T7812] EXT4-fs (loop9): Test dummy encryption mode enabled [ 76.084665][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.084753][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.084828][ T7681] bridge_slave_0: entered allmulticast mode [ 76.091750][ T7804] netlink: 348 bytes leftover after parsing attributes in process `syz.7.444'. [ 76.094507][ T7681] bridge_slave_0: entered promiscuous mode [ 76.095934][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.7.444'. [ 76.098717][ T7812] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 76.098780][ T7812] System zones: 0-5 [ 76.104646][ T7812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.110122][ T7821] loop5: detected capacity change from 0 to 4096 [ 76.126013][ T7821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.235927][ T4714] Bluetooth: hci2: command tx timeout [ 76.284800][ T7827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.458598][ T7827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.466725][ T12] hsr_slave_0: left promiscuous mode [ 76.469349][ T12] hsr_slave_1: left promiscuous mode [ 76.473086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.473106][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.478063][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.478095][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.483148][ T12] veth1_macvtap: left promiscuous mode [ 76.483202][ T12] veth0_macvtap: left promiscuous mode [ 76.483257][ T12] veth1_vlan: left promiscuous mode [ 76.483294][ T12] veth0_vlan: left promiscuous mode [ 76.589471][ T7839] loop1: detected capacity change from 0 to 256 [ 76.594288][ T7839] vfat filesystem being mounted at /6/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 76.637417][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.647968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 76.686377][ T4714] Bluetooth: hci1: command tx timeout [ 76.718437][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.718487][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.718576][ T7681] bridge_slave_1: entered allmulticast mode [ 76.723937][ T7681] bridge_slave_1: entered promiscuous mode [ 76.765866][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.769421][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.807198][ T7847] bridge4: entered promiscuous mode [ 76.807253][ T7847] bridge4: entered allmulticast mode [ 76.826216][ T7681] team0: Port device team_slave_0 added [ 76.839615][ T7681] team0: Port device team_slave_1 added [ 76.847442][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.849059][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.849080][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.849736][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.849743][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.849758][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.891391][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.915922][ T7855] loop7: detected capacity change from 0 to 512 [ 76.936555][ T7681] hsr_slave_0: entered promiscuous mode [ 76.939643][ T7681] hsr_slave_1: entered promiscuous mode [ 76.954124][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.954244][ T7855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.954309][ T7855] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.001837][ T7847] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.453: corrupted xattr block 33: overlapping e_value [ 77.015649][ T7847] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.453: corrupted xattr block 33: overlapping e_value [ 77.016470][ T7847] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.453: corrupted xattr block 33: overlapping e_value [ 77.047583][ T7873] loop5: detected capacity change from 0 to 8 [ 77.059086][ T7873] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 77.059115][ T7873] unable to read xattr id index table [ 77.064497][ T7873] SQUASHFS error: zlib decompression failed, data probably corrupt [ 77.064531][ T7873] SQUASHFS error: Failed to read block 0x9b: -5 [ 77.064554][ T7873] SQUASHFS error: Unable to read metadata cache entry [99] [ 77.064571][ T7873] SQUASHFS error: Unable to read inode 0x127 [ 77.087168][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.119207][ T7873] FAULT_INJECTION: forcing a failure. [ 77.119207][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.121883][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.5.456 Not tainted syzkaller #0 PREEMPT [ 77.121904][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.121911][ T7873] Call trace: [ 77.121915][ T7873] show_stack+0x2c/0x3c (C) [ 77.121940][ T7873] __dump_stack+0x30/0x40 [ 77.121954][ T7873] dump_stack_lvl+0xd8/0x12c [ 77.121967][ T7873] dump_stack+0x1c/0x28 [ 77.121979][ T7873] should_fail_ex+0x41c/0x590 [ 77.121992][ T7873] should_fail+0x14/0x24 [ 77.122003][ T7873] should_fail_usercopy+0x20/0x30 [ 77.122016][ T7873] dvb_usercopy+0x144/0x4d4 [ 77.122027][ T7873] dvb_frontend_ioctl+0x68/0x8c [ 77.122040][ T7873] __arm64_sys_ioctl+0x154/0x1cc [ 77.122054][ T7873] invoke_syscall+0x98/0x244 [ 77.122066][ T7873] el0_svc_common+0xec/0x23c [ 77.122078][ T7873] do_el0_svc+0x4c/0x5c [ 77.122089][ T7873] el0_svc+0x64/0x260 [ 77.122100][ T7873] el0t_64_sync_handler+0x44/0x104 [ 77.122110][ T7873] el0t_64_sync+0x198/0x19c [ 77.140650][ T7882] IPVS: set_ctl: invalid protocol: 180 224.0.0.2:20004 [ 77.399168][ T7893] loop5: detected capacity change from 0 to 32768 [ 77.471858][ T7893] loop5: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 77.476690][ T7893] loop5: p5 start 100669496 is beyond EOD, truncated [ 77.479993][ T7893] loop5: p6 size 218103808 extends beyond EOD, truncated [ 77.494720][ T7893] batadv_slave_1: entered promiscuous mode [ 77.499556][ T7890] batadv_slave_1: left promiscuous mode [ 77.503009][ T7911] input: syz1 as /devices/virtual/input/input12 [ 77.577895][ T7913] autofs: Unknown parameter '00000000000000000000' [ 77.910097][ T4394] 8021q: adding VLAN 0 to HW filter on device eth22 [ 77.913779][ T4694] udevd[4694]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 77.920892][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 77.923368][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 77.924718][ T4724] udevd[4724]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 77.927571][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 77.928181][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 78.020866][ T7939] loop1: detected capacity change from 0 to 256 [ 78.027302][ T7939] vfat filesystem being mounted at /10/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107-12-31 (0x10391447e) [ 78.045644][ T7681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.057604][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.059656][ T7681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.065313][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.065656][ T7681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.070688][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.074148][ T7681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.080220][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.168868][ T4394] 8021q: adding VLAN 0 to HW filter on device eth21 [ 78.171009][ T7956] tipc: Started in network mode [ 78.171212][ T7956] tipc: Node identity 7f000001, cluster identity 4711 [ 78.174283][ T7956] tipc: Enabled bearer , priority 10 [ 78.198882][ T7960] loop5: detected capacity change from 0 to 1024 [ 78.199838][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.200355][ T7956] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 78.200475][ T7956] tipc: Enabled bearer , priority 10 [ 78.236540][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.241660][ T7960] ext4: Unknown parameter 'context' [ 78.243349][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.243391][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.250983][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.251030][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.264895][ T7681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.267281][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.480461][ T7993] tipc: Enabling of bearer rejected, failed to enable media [ 78.517462][ T8006] netlink: 'syz.9.478': attribute type 1 has an invalid length. [ 78.541386][ T8008] tipc: Started in network mode [ 78.541433][ T8008] tipc: Node identity ac14140f, cluster identity 4711 [ 78.541560][ T8008] tipc: New replicast peer: 255.255.255.255 [ 78.541871][ T8008] tipc: Enabled bearer , priority 10 [ 78.557987][ T4394] 8021q: adding VLAN 0 to HW filter on device eth20 [ 78.589838][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.609402][ T7681] veth0_vlan: entered promiscuous mode [ 78.613874][ T7681] veth1_vlan: entered promiscuous mode [ 78.624783][ T7681] veth0_macvtap: entered promiscuous mode [ 78.631410][ T7681] veth1_macvtap: entered promiscuous mode [ 78.640901][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.643562][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.649229][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.658151][ T4714] Bluetooth: hci1: command tx timeout [ 78.695035][ T8022] loop5: detected capacity change from 0 to 128 [ 78.704930][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.704964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.705782][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.705931][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.705948][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.720081][ T8028] input: syz1 as /devices/virtual/input/input13 [ 78.733899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.733933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.780107][ T8034] loop9: detected capacity change from 0 to 8 [ 78.780227][ T8032] syzkaller0: entered promiscuous mode [ 78.780242][ T8032] syzkaller0: entered allmulticast mode [ 78.783650][ T8032] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 78.801302][ T8034] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 78.801332][ T8034] unable to read xattr id index table [ 78.806607][ T8034] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.806651][ T8034] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.806676][ T8034] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.806696][ T8034] SQUASHFS error: Unable to read inode 0x127 [ 78.818960][ T8034] FAULT_INJECTION: forcing a failure. [ 78.818960][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.818995][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.9.484 Not tainted syzkaller #0 PREEMPT [ 78.819010][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.819018][ T8034] Call trace: [ 78.819022][ T8034] show_stack+0x2c/0x3c (C) [ 78.819042][ T8034] __dump_stack+0x30/0x40 [ 78.819056][ T8034] dump_stack_lvl+0xd8/0x12c [ 78.819068][ T8034] dump_stack+0x1c/0x28 [ 78.819079][ T8034] should_fail_ex+0x41c/0x590 [ 78.819092][ T8034] should_fail+0x14/0x24 [ 78.819104][ T8034] should_fail_usercopy+0x20/0x30 [ 78.819116][ T8034] dvb_usercopy+0x144/0x4d4 [ 78.819127][ T8034] dvb_frontend_ioctl+0x68/0x8c [ 78.819140][ T8034] __arm64_sys_ioctl+0x154/0x1cc [ 78.819154][ T8034] invoke_syscall+0x98/0x244 [ 78.819166][ T8034] el0_svc_common+0xec/0x23c [ 78.819178][ T8034] do_el0_svc+0x4c/0x5c [ 78.819189][ T8034] el0_svc+0x64/0x260 [ 78.819200][ T8034] el0t_64_sync_handler+0x44/0x104 [ 78.819210][ T8034] el0t_64_sync+0x198/0x19c [ 78.932292][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.995016][ T8057] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 78.997835][ T8057] xt_hashlimit: size too large, truncated to 1048576 [ 78.997907][ T8057] xt_hashlimit: max too large, truncated to 1048576 [ 79.017412][ T8061] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 79.140630][ T8080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.146948][ T8080] EXT4-fs error (device loop9): ext4_quota_enable:7260: comm syz.9.492: inode #262144: comm syz.9.492: iget: illegal inode # [ 79.146983][ T8080] loop9: lost filesystem error report for type 5 error -117 [ 79.150153][ T8080] EXT4-fs (loop9): Remounting filesystem read-only [ 79.150185][ T8080] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 79.150388][ T8080] EXT4-fs (loop9): mount failed [ 79.153618][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 79.153631][ C1] EXT4-fs (loop9): initial error at time 4789532781: ext4_quota_enable:7260 [ 79.153644][ C1] EXT4-fs (loop9): last error at time 4789532781: ext4_quota_enable:7260 [ 79.327694][ T4825] tipc: Node number set to 2130706433 [ 79.497618][ T8109] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 79.497656][ T8109] unable to read xattr id index table [ 79.503464][ T8109] SQUASHFS error: zlib decompression failed, data probably corrupt [ 79.510379][ T8109] SQUASHFS error: Failed to read block 0x9b: -5 [ 79.510421][ T8109] SQUASHFS error: Unable to read metadata cache entry [99] [ 79.510441][ T8109] SQUASHFS error: Unable to read inode 0x127 [ 79.525279][ T8109] FAULT_INJECTION: forcing a failure. [ 79.525279][ T8109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.528056][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.9.496 Tainted: G L syzkaller #0 PREEMPT [ 79.528081][ T8109] Tainted: [L]=SOFTLOCKUP [ 79.528085][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.528091][ T8109] Call trace: [ 79.528095][ T8109] show_stack+0x2c/0x3c (C) [ 79.528118][ T8109] __dump_stack+0x30/0x40 [ 79.528133][ T8109] dump_stack_lvl+0xd8/0x12c [ 79.528145][ T8109] dump_stack+0x1c/0x28 [ 79.528157][ T8109] should_fail_ex+0x41c/0x590 [ 79.528171][ T8109] should_fail+0x14/0x24 [ 79.528182][ T8109] should_fail_usercopy+0x20/0x30 [ 79.528195][ T8109] dvb_usercopy+0x144/0x4d4 [ 79.528206][ T8109] dvb_frontend_ioctl+0x68/0x8c [ 79.528218][ T8109] __arm64_sys_ioctl+0x154/0x1cc [ 79.528232][ T8109] invoke_syscall+0x98/0x244 [ 79.528244][ T8109] el0_svc_common+0xec/0x23c [ 79.528256][ T8109] do_el0_svc+0x4c/0x5c [ 79.528268][ T8109] el0_svc+0x64/0x260 [ 79.528278][ T8109] el0t_64_sync_handler+0x44/0x104 [ 79.528288][ T8109] el0t_64_sync+0x198/0x19c [ 79.552177][ T8110] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 79.552208][ T8110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 79.552250][ T8110] System zones: 0-1, 15-15, 18-18, 34-34 [ 79.552403][ T8110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.552439][ T8110] __quota_error: 61 callbacks suppressed [ 79.552447][ T8110] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 79.552481][ T8110] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.552493][ T8110] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 79.552973][ T8110] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.497: bad orphan inode 16 [ 79.552992][ T8110] loop5: lost filesystem error report for type 5 error -117 [ 79.553099][ T8110] ext4_test_bit(bit=15, block=18) = 1 [ 79.553107][ T8110] is_bad_inode(inode)=0 [ 79.553111][ T8110] NEXT_ORPHAN(inode)=0 [ 79.553115][ T8110] max_ino=32 [ 79.553119][ T8110] i_nlink=2 [ 79.561854][ T8110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.573418][ T8116] EXT4-fs: Ignoring removed bh option [ 79.573442][ T8116] EXT4-fs: Ignoring removed i_version option [ 79.573453][ T8116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.582505][ T8110] kernel read not supported for file /!selinuxw (pid: 8110 comm: syz.5.497) [ 79.598206][ T8116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.602139][ T4825] tipc: Node number set to 2886997007 [ 79.613111][ T8110] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 79.613150][ T8110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 79.707541][ T8128] Bluetooth: MGMT ver 1.23 [ 79.717975][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.788640][ T8133] trusted_key: encrypted_key: master key parameter 'qser:syz' is invalid [ 80.078525][ T8125] sctp: [Deprecated]: syz.9.499 (pid 8125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.078525][ T8125] Use struct sctp_sack_info instead [ 80.394407][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.518042][ T8171] ext4: Unknown parameter 'appraise' [ 80.538712][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.9.504'. [ 80.631054][ T8189] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 80.633112][ T8189] unable to read xattr id index table [ 80.639601][ T4707] Bluetooth: hci1: command tx timeout [ 80.649321][ T8189] SQUASHFS error: zlib decompression failed, data probably corrupt [ 80.649353][ T8189] SQUASHFS error: Failed to read block 0x9b: -5 [ 80.649362][ T8189] SQUASHFS error: Unable to read metadata cache entry [99] [ 80.649371][ T8189] SQUASHFS error: Unable to read inode 0x127 [ 80.697720][ T8189] FAULT_INJECTION: forcing a failure. [ 80.697720][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.697762][ T8189] CPU: 1 UID: 0 PID: 8189 Comm: syz.1.509 Tainted: G L syzkaller #0 PREEMPT [ 80.697778][ T8189] Tainted: [L]=SOFTLOCKUP [ 80.697783][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.697790][ T8189] Call trace: [ 80.697794][ T8189] show_stack+0x2c/0x3c (C) [ 80.697815][ T8189] __dump_stack+0x30/0x40 [ 80.697831][ T8189] dump_stack_lvl+0xd8/0x12c [ 80.697842][ T8189] dump_stack+0x1c/0x28 [ 80.697854][ T8189] should_fail_ex+0x41c/0x590 [ 80.697867][ T8189] should_fail+0x14/0x24 [ 80.697878][ T8189] should_fail_usercopy+0x20/0x30 [ 80.697891][ T8189] dvb_usercopy+0x144/0x4d4 [ 80.697902][ T8189] dvb_frontend_ioctl+0x68/0x8c [ 80.697915][ T8189] __arm64_sys_ioctl+0x154/0x1cc [ 80.697928][ T8189] invoke_syscall+0x98/0x244 [ 80.697941][ T8189] el0_svc_common+0xec/0x23c [ 80.697953][ T8189] do_el0_svc+0x4c/0x5c [ 80.697964][ T8189] el0_svc+0x64/0x260 [ 80.697975][ T8189] el0t_64_sync_handler+0x44/0x104 [ 80.697985][ T8189] el0t_64_sync+0x198/0x19c [ 80.822269][ T8209] geneve3: entered promiscuous mode [ 80.855038][ T8215] bridge_slave_0: default FDB implementation only supports local addresses [ 80.867234][ T8215] netlink: 104 bytes leftover after parsing attributes in process `syz.1.513'. [ 80.876436][ T8221] set_capacity_and_notify: 7 callbacks suppressed [ 80.885851][ T8221] loop9: detected capacity change from 0 to 512 [ 80.894307][ T8215] loop1: detected capacity change from 0 to 256 [ 80.894833][ T8215] vfat: Unknown parameter 'nnonumtail' [ 80.932782][ T8230] loop5: detected capacity change from 0 to 512 [ 81.079598][ T8230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.079672][ T8230] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.080447][ T5057] IPVS: starting estimator thread 0... [ 81.172619][ T8240] IPVS: using max 55 ests per chain, 132000 per kthread [ 81.192321][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.207881][ T8246] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.227972][ T8250] loop9: detected capacity change from 0 to 512 [ 81.230980][ T8250] EXT4-fs: Ignoring removed nobh option [ 81.254008][ T8250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.254083][ T8250] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.287973][ T8258] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 3: comm syz.9.519: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 81.298281][ T8262] netlink: 9 bytes leftover after parsing attributes in process `syz.1.520'. [ 81.298459][ T8262] 0: renamed from hsr0 (while UP) [ 81.312457][ T8262] 0: entered allmulticast mode [ 81.312495][ T8262] hsr_slave_0: entered allmulticast mode [ 81.312524][ T8262] hsr_slave_1: entered allmulticast mode [ 81.314285][ T8262] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 81.345937][ T8266] loop5: detected capacity change from 0 to 512 [ 81.537699][ T8281] pim6reg: entered allmulticast mode [ 81.629794][ T4714] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.630488][ T4707] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.237396][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 82.297164][ T5062] IPVS: starting estimator thread 0... [ 82.330939][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.370307][ T8339] loop9: detected capacity change from 0 to 256 [ 82.374950][ T8339] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.375012][ T8339] vfat filesystem being mounted at /37/bus supports timestamps until 2107-12-31 (0x10391447e) [ 82.382170][ T8333] IPVS: using max 56 ests per chain, 134400 per kthread [ 82.391365][ T8337] FAT-fs (loop9): error, corrupted file size (i_pos 196, 20189) [ 82.391402][ T8337] FAT-fs (loop9): Filesystem has been set read-only [ 82.391422][ T8337] FAT-fs (loop9): error, corrupted file size (i_pos 196, 20189) [ 82.406014][ T8321] FAULT_INJECTION: forcing a failure. [ 82.406014][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 82.406058][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.7.530 Tainted: G L syzkaller #0 PREEMPT [ 82.406080][ T8321] Tainted: [L]=SOFTLOCKUP [ 82.406085][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.406091][ T8321] Call trace: [ 82.406095][ T8321] show_stack+0x2c/0x3c (C) [ 82.406116][ T8321] __dump_stack+0x30/0x40 [ 82.406129][ T8321] dump_stack_lvl+0xd8/0x12c [ 82.406141][ T8321] dump_stack+0x1c/0x28 [ 82.406152][ T8321] should_fail_ex+0x41c/0x590 [ 82.406166][ T8321] should_failslab+0xc4/0x120 [ 82.406179][ T8321] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 82.406192][ T8321] sock_alloc_inode+0x30/0x180 [ 82.406204][ T8321] alloc_inode+0x68/0x198 [ 82.406215][ T8321] sock_alloc+0x4c/0x204 [ 82.406223][ T8321] __sock_create+0x108/0x670 [ 82.406232][ T8321] __sys_socket_create+0xc0/0x11c [ 82.406241][ T8321] __sys_socket+0x44/0xec [ 82.406250][ T8321] __arm64_sys_socket+0x84/0x9c [ 82.406258][ T8321] invoke_syscall+0x98/0x244 [ 82.406271][ T8321] el0_svc_common+0xec/0x23c [ 82.406282][ T8321] do_el0_svc+0x4c/0x5c [ 82.406294][ T8321] el0_svc+0x64/0x260 [ 82.406305][ T8321] el0t_64_sync_handler+0x44/0x104 [ 82.406315][ T8321] el0t_64_sync+0x198/0x19c [ 82.406337][ T8321] socket: no more sockets [ 82.530461][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.7.533'. [ 82.557817][ T8360] netlink: 'syz.5.535': attribute type 5 has an invalid length. [ 82.561626][ T8360] ip6erspan0: entered promiscuous mode [ 82.620343][ T4714] Bluetooth: hci1: command tx timeout [ 82.756297][ T8394] loop5: detected capacity change from 0 to 256 [ 82.896888][ T8411] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 82.896917][ T8411] syzkaller1: group set to 0 [ 82.980784][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.545'. [ 82.990215][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.545'. [ 83.085155][ T8422] loop9: detected capacity change from 0 to 128 [ 83.086599][ T8422] EXT4-fs: Ignoring removed i_version option [ 83.115857][ T8422] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.119342][ T8422] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.199571][ T7220] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.288965][ T8432] syzkaller0: entered promiscuous mode [ 83.289003][ T8432] syzkaller0: entered allmulticast mode [ 83.346425][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 83.347874][ T4714] Bluetooth: hci0: ACL packet for unknown connection handle 2401 [ 83.619981][ T8474] loop7: detected capacity change from 0 to 512 [ 83.621372][ T8474] journal_path: Lookup failure for './bus' [ 83.621389][ T8474] EXT4-fs: error: could not find journal device path [ 83.624883][ T8474] loop7: detected capacity change from 0 to 512 [ 83.628709][ T8474] journal_path: Lookup failure for './bus' [ 83.628742][ T8474] EXT4-fs: error: could not find journal device path [ 83.665999][ T8474] journal_path: Lookup failure for './bus' [ 83.666038][ T8474] EXT4-fs: error: could not find journal device path [ 83.693954][ T8474] journal_path: Lookup failure for './bus' [ 83.693992][ T8474] EXT4-fs: error: could not find journal device path [ 83.696553][ T8474] journal_path: Lookup failure for './bus' [ 83.703026][ T8474] EXT4-fs: error: could not find journal device path [ 83.726413][ T8474] journal_path: Lookup failure for './bus' [ 83.727830][ T8474] EXT4-fs: error: could not find journal device path [ 83.741279][ T8474] journal_path: Lookup failure for './bus' [ 83.742683][ T8474] EXT4-fs: error: could not find journal device path [ 83.759280][ T8474] journal_path: Lookup failure for './bus' [ 83.759315][ T8474] EXT4-fs: error: could not find journal device path [ 83.790592][ T8474] journal_path: Lookup failure for './bus' [ 83.790647][ T8474] EXT4-fs: error: could not find journal device path [ 83.807137][ T8474] journal_path: Lookup failure for './bus' [ 83.807169][ T8474] EXT4-fs: error: could not find journal device path [ 83.809791][ T8474] journal_path: Lookup failure for './bus' [ 83.809804][ T8474] EXT4-fs: error: could not find journal device path [ 83.819756][ T8474] journal_path: Lookup failure for './bus' [ 83.819792][ T8474] EXT4-fs: error: could not find journal device path [ 83.829642][ T8474] journal_path: Lookup failure for './bus' [ 83.831270][ T8474] EXT4-fs: error: could not find journal device path [ 83.836544][ T8474] journal_path: Lookup failure for './bus' [ 83.838111][ T8474] EXT4-fs: error: could not find journal device path [ 83.845951][ T8474] journal_path: Lookup failure for './bus' [ 83.845984][ T8474] EXT4-fs: error: could not find journal device path [ 84.081782][ T8489] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.085094][ T8489] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.140980][ T8489] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 84.160869][ T5823] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.219205][ T8495] vfat: Unknown parameter '^XWn%3d' [ 84.633706][ T8517] binder: 8513:8517 unknown command 0 [ 84.633740][ T8517] binder: 8513:8517 ioctl c0306201 200003c0 returned -22 [ 84.760831][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 84.764010][ T8524] bridge0: port 3(syz_tun) entered disabled state [ 84.765549][ T8524] syz_tun: entered allmulticast mode [ 84.766134][ T8524] syz_tun: entered promiscuous mode [ 84.766434][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 84.766483][ T8524] bridge0: port 3(syz_tun) entered forwarding state [ 84.955738][ T4394] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.001304][ T8566] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.574: inode has both inline data and extents flags [ 85.005755][ T8566] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.007111][ T8566] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.574: couldn't read orphan inode 15 (err -117) [ 85.011548][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.011561][ C1] EXT4-fs (loop1): initial error at time 4789532787: ext4_orphan_get:1403: inode 15 [ 85.011577][ C1] EXT4-fs (loop1): last error at time 4789532787: ext4_orphan_get:1403: inode 15 [ 85.018343][ T8566] loop1: lost filesystem error report for type 5 error -117 [ 85.028260][ T8566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.090180][ T8581] netlink: 'syz.5.576': attribute type 4 has an invalid length. [ 85.110477][ T7282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.421035][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 85.617238][ T8605] netlink: 'syz.0.582': attribute type 6 has an invalid length. [ 85.992331][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.585'. [ 86.106380][ T8637] hsr_slave_0: left promiscuous mode [ 86.109414][ T8637] hsr_slave_1: left promiscuous mode [ 86.535054][ T8668] binder: 8663:8668 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 86.537797][ T8668] binder: 8663:8668 ioctl c0306201 20000640 returned -22 [ 86.541637][ T8669] binder: BINDER_SET_CONTEXT_MGR already set [ 86.545962][ T8669] binder: 8663:8669 ioctl 4018620d 20000340 returned -16 [ 86.551802][ T8664] binder: 8663:8664 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.551847][ T8664] binder: 8664 RLIMIT_NICE not set [ 86.551966][ T8664] binder: 8663:8664 ioctl c0306201 20000040 returned -14 [ 86.555010][ T8668] binder: 8663:8668 BC_REQUEST_FREEZE_NOTIFICATION already set [ 86.555037][ T8668] binder: 8663:8668 ioctl c0306201 20000040 returned -22 [ 86.566961][ T8659] bridge1: entered promiscuous mode [ 86.566978][ T8659] bridge1: entered allmulticast mode [ 86.581438][ T8659] team0: Port device bridge1 added [ 86.642267][ T8685] FAULT_INJECTION: forcing a failure. [ 86.642267][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.644932][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.0.593 Tainted: G L syzkaller #0 PREEMPT [ 86.644953][ T8685] Tainted: [L]=SOFTLOCKUP [ 86.644957][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.644963][ T8685] Call trace: [ 86.644967][ T8685] show_stack+0x2c/0x3c (C) [ 86.644990][ T8685] __dump_stack+0x30/0x40 [ 86.645004][ T8685] dump_stack_lvl+0xd8/0x12c [ 86.645016][ T8685] dump_stack+0x1c/0x28 [ 86.645027][ T8685] should_fail_ex+0x41c/0x590 [ 86.645040][ T8685] should_fail+0x14/0x24 [ 86.645052][ T8685] should_fail_usercopy+0x20/0x30 [ 86.645064][ T8685] dvb_usercopy+0x144/0x4d4 [ 86.645075][ T8685] dvb_frontend_ioctl+0x68/0x8c [ 86.645088][ T8685] __arm64_sys_ioctl+0x154/0x1cc [ 86.645102][ T8685] invoke_syscall+0x98/0x244 [ 86.645114][ T8685] el0_svc_common+0xec/0x23c [ 86.645126][ T8685] do_el0_svc+0x4c/0x5c [ 86.645137][ T8685] el0_svc+0x64/0x260 [ 86.645148][ T8685] el0t_64_sync_handler+0x44/0x104 [ 86.645158][ T8685] el0t_64_sync+0x198/0x19c [ 86.835132][ T8689] netlink: 14 bytes leftover after parsing attributes in process `syz.5.594'. [ 86.839573][ T8708] set_capacity_and_notify: 17 callbacks suppressed [ 86.848581][ T8708] loop9: detected capacity change from 0 to 1024 [ 86.878298][ T4714] Bluetooth: to_multiplier 0 < 10 [ 86.898641][ T8708] Bluetooth: ISO socket layer initialized [ 87.145874][ T8712] bond0: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms [ 87.321457][ T8717] cgroup: fork rejected by pids controller in /syz1 [ 87.378364][ T8748] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 87.399299][ T8783] loop5: detected capacity change from 0 to 512 [ 87.454626][ T8780] FAULT_INJECTION: forcing a failure. [ 87.454626][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.454677][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.0.607 Tainted: G L syzkaller #0 PREEMPT [ 87.454694][ T8780] Tainted: [L]=SOFTLOCKUP [ 87.454698][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.454704][ T8780] Call trace: [ 87.454708][ T8780] show_stack+0x2c/0x3c (C) [ 87.454729][ T8780] __dump_stack+0x30/0x40 [ 87.454742][ T8780] dump_stack_lvl+0xd8/0x12c [ 87.454755][ T8780] dump_stack+0x1c/0x28 [ 87.454766][ T8780] should_fail_ex+0x41c/0x590 [ 87.454779][ T8780] should_fail+0x14/0x24 [ 87.454791][ T8780] should_fail_usercopy+0x20/0x30 [ 87.454803][ T8780] dvb_usercopy+0x144/0x4d4 [ 87.454814][ T8780] dvb_frontend_ioctl+0x68/0x8c [ 87.454827][ T8780] __arm64_sys_ioctl+0x154/0x1cc [ 87.454840][ T8780] invoke_syscall+0x98/0x244 [ 87.454853][ T8780] el0_svc_common+0xec/0x23c [ 87.454868][ T8780] do_el0_svc+0x4c/0x5c [ 87.454879][ T8780] el0_svc+0x64/0x260 [ 87.454890][ T8780] el0t_64_sync_handler+0x44/0x104 [ 87.454901][ T8780] el0t_64_sync+0x198/0x19c [ 87.461292][ T8783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.461342][ T8783] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.785428][ T8811] loop1: detected capacity change from 0 to 256 [ 87.790617][ T8811] vfat filesystem being mounted at /36/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107-12-31 (0x10391447e) [ 87.987845][ T8831] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1398 [ 87.990319][ T8831] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1398 [ 88.016995][ T7282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.017032][ T7282] FAT-fs (loop1): Filesystem has been set read-only [ 88.017490][ T7282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.143489][ T8851] loop9: detected capacity change from 0 to 256 [ 88.151136][ T8813] bridge0: port 3(syz_tun) entered disabled state [ 88.162562][ T8851] vfat filesystem being mounted at /55/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 88.166660][ T8813] syz_tun (unregistering): left allmulticast mode [ 88.166677][ T8813] syz_tun (unregistering): left promiscuous mode [ 88.166704][ T8813] bridge0: port 3(syz_tun) entered disabled state [ 88.186857][ T8851] Invalid ELF header magic: != ELF [ 88.216074][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.331714][ T8867] loop9: detected capacity change from 0 to 512 [ 88.341459][ T8867] EXT4-fs (loop9): unsupported inode size: 0 [ 88.341499][ T8867] EXT4-fs (loop9): blocksize: 2048 [ 88.414658][ T113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.576433][ T4707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.580754][ T4707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.583824][ T4707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.591474][ T4707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.593495][ T4707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.618865][ T8897] netlink: 332 bytes leftover after parsing attributes in process `syz.5.626'. [ 88.621785][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'. [ 88.623695][ T8897] netlink: 332 bytes leftover after parsing attributes in process `syz.5.626'. [ 88.668069][ T113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.775618][ T8921] netlink: 48 bytes leftover after parsing attributes in process `syz.9.629'. [ 88.782102][ T113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.865259][ T8928] netlink: 'syz.9.631': attribute type 1 has an invalid length. [ 88.889946][ T113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.959820][ T8928] bridge1: entered promiscuous mode [ 88.961003][ T8928] bridge1: entered allmulticast mode [ 88.964174][ T8928] bond1: (slave bridge1): making interface the new active one [ 88.966569][ T8928] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 89.075261][ T8943] netlink: 128 bytes leftover after parsing attributes in process `syz.5.633'. [ 89.077452][ T8943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.169056][ T113] bridge_slave_1: left allmulticast mode [ 89.169090][ T113] bridge_slave_1: left promiscuous mode [ 89.169199][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.242531][ T113] bridge_slave_0: left allmulticast mode [ 89.242569][ T113] bridge_slave_0: left promiscuous mode [ 89.242684][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.286577][ T8966] loop5: detected capacity change from 0 to 512 [ 89.295489][ T8966] EXT4-fs: Ignoring removed i_version option [ 89.297066][ T8966] EXT4-fs: Ignoring removed bh option [ 89.313500][ T8966] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.635: inode #13: comm syz.5.635: iget: illegal inode # [ 89.313549][ T8966] loop5: lost filesystem error report for type 5 error -117 [ 89.316260][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 89.316274][ C0] EXT4-fs (loop5): initial error at time 4789532792: ext4_orphan_get:1403 [ 89.316286][ C0] EXT4-fs (loop5): last error at time 4789532792: ext4_orphan_get:1403 [ 89.318305][ T8966] EXT4-fs (loop5): Remounting filesystem read-only [ 89.349086][ T8966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.362845][ T8966] EXT4-fs (loop5): shut down requested (1) [ 89.464122][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.577414][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.622877][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.635425][ T113] bond0 (unregistering): Released all slaves [ 89.671109][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.683882][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.683985][ T8891] bridge_slave_0: entered allmulticast mode [ 89.684897][ T8891] bridge_slave_0: entered promiscuous mode [ 89.686191][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.686247][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.686308][ T8891] bridge_slave_1: entered allmulticast mode [ 89.686715][ T8891] bridge_slave_1: entered promiscuous mode [ 89.782292][ T9002] loop5: detected capacity change from 0 to 512 [ 89.782673][ T9002] ext4: Unknown parameter '' [ 89.812207][ T9018] loop7: detected capacity change from 0 to 512 [ 89.816266][ T9018] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.852217][ T9018] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4223: comm syz.7.640: Allocating blocks 41-42 which overlap fs metadata [ 89.852263][ T9018] loop7: lost filesystem error report for type 5 error -117 [ 89.855331][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.856356][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.861402][ T9018] EXT4-fs (loop7): Remounting filesystem read-only [ 89.861510][ T9018] Quota error (device loop7): write_blk: dquota write failed [ 89.861519][ T9018] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 89.861586][ T9018] Quota error (device loop7): write_blk: dquota write failed [ 89.861620][ T9018] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 89.861686][ T9018] EXT4-fs (loop7): 1 truncate cleaned up [ 89.862147][ T9018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.902099][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.027811][ T8891] team0: Port device team_slave_0 added [ 90.028652][ T8891] team0: Port device team_slave_1 added [ 90.037603][ T9033] netlink: 'syz.7.643': attribute type 6 has an invalid length. [ 90.065146][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.065177][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.065204][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.071084][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.071096][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.071113][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.086703][ T9039] syzkaller0: left promiscuous mode [ 90.086735][ T9039] syzkaller0: left allmulticast mode [ 90.110278][ T9044] loop7: detected capacity change from 0 to 512 [ 90.120357][ T9044] EXT4-fs (loop7): orphan cleanup on readonly fs [ 90.122297][ T9044] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.645: Directory hole found for htree index block 0 [ 90.125489][ T9044] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 90.125987][ C0] EXT4-fs (loop7): initial error at time 4789532793: dx_probe:791: inode 2 [ 90.126035][ C0] EXT4-fs (loop7): last error at time 4789532793: dx_probe:791: inode 2 [ 90.142144][ T9044] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 90.144586][ T8891] hsr_slave_0: entered promiscuous mode [ 90.147797][ T8891] hsr_slave_1: entered promiscuous mode [ 90.149329][ T9044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.154730][ T8891] debugfs: 'hsr0' already exists in 'hsr' [ 90.156115][ T8891] Cannot create hsr debugfs directory [ 90.159241][ T9044] EXT4-fs (loop7): shut down requested (2) [ 90.168645][ T113] hsr_slave_0: left promiscuous mode [ 90.170137][ T113] hsr_slave_1: left promiscuous mode [ 90.170441][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.170458][ T113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.175584][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.177067][ T113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.202891][ T113] veth1_macvtap: left promiscuous mode [ 90.205108][ T113] veth0_macvtap: left promiscuous mode [ 90.205206][ T113] veth1_vlan: left promiscuous mode [ 90.205251][ T113] veth0_vlan: left promiscuous mode [ 90.322344][ T9057] loop7: detected capacity change from 0 to 512 [ 90.328356][ T9057] EXT4-fs: Ignoring removed i_version option [ 90.331105][ T9057] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 90.362219][ T9057] fuse: Bad value for 'group_id' [ 90.362247][ T9057] fuse: Bad value for 'group_id' [ 90.367062][ T9057] fuse: Unknown parameter 'fd0x0000000000000006' [ 90.437988][ T113] team0 (unregistering): Port device team_slave_1 removed [ 90.445586][ T113] team0 (unregistering): Port device team_slave_0 removed [ 90.505279][ T9059] syzkaller0: entered promiscuous mode [ 90.506920][ T9059] syzkaller0: entered allmulticast mode [ 90.554418][ T4707] Bluetooth: hci2: command tx timeout [ 90.575851][ T9073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.650'. [ 90.677342][ T9085] ext4: Unknown parameter 'noacl' [ 91.193938][ T9075] macvlan1: entered promiscuous mode [ 91.203970][ T9075] ipvlan0: entered promiscuous mode [ 91.217916][ T9075] ipvlan0: left promiscuous mode [ 91.220325][ T9075] macvlan1: left promiscuous mode [ 91.299297][ T9076] cgroup: fork rejected by pids controller in /syz7 [ 91.301416][ T113] IPVS: stop unused estimator thread 0... [ 91.458610][ T9153] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 91.523788][ T9159] tun0: tun_chr_ioctl cmd 1074025677 [ 91.524975][ T9159] tun0: linktype set to 778 [ 91.582904][ T9164] tun0: tun_chr_ioctl cmd 1074025673 [ 91.585055][ T9162] tun0: tun_chr_ioctl cmd 1074025677 [ 91.586610][ T9162] tun0: linktype set to 778 [ 92.333265][ T9171] set_capacity_and_notify: 3 callbacks suppressed [ 92.333298][ T9171] loop7: detected capacity change from 0 to 1024 [ 92.336405][ T9171] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.336443][ T9171] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 92.347812][ T9171] EXT4-fs (loop7): invalid journal inode [ 92.347886][ T9171] EXT4-fs (loop7): can't get journal size [ 92.351950][ T9171] EXT4-fs mount: 1 callbacks suppressed [ 92.352230][ T9171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.526241][ T4707] Bluetooth: hci2: command tx timeout [ 92.550216][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.618405][ T9176] netlink: 'syz.7.659': attribute type 21 has an invalid length. [ 92.618465][ T9176] netlink: 'syz.7.659': attribute type 1 has an invalid length. [ 92.618475][ T9176] netlink: 144 bytes leftover after parsing attributes in process `syz.7.659'. [ 93.517416][ T9085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.523962][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.530600][ T8891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.558672][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.559024][ T8891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.571936][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.572891][ T8891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.598721][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.599815][ T8891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.606316][ T8891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.625318][ T9183] loop9: detected capacity change from 0 to 512 [ 93.633108][ T9183] Smack: duplicate mount options [ 93.673970][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.681081][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.685307][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.685362][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.703666][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.703716][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.733941][ T9192] loop5: detected capacity change from 0 to 256 [ 93.742188][ T9192] vfat filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 93.755767][ T9213] binder: 9206:9213 got transaction to invalid handle, 1 [ 93.757365][ T9213] binder: 9206:9213 cannot find target node [ 93.759047][ T9213] binder: 9206:9213 transaction async to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252 [ 93.769560][ T9209] loop7: detected capacity change from 0 to 1276 [ 93.769912][ T9209] ext4: Unknown parameter 'syzkaller' [ 93.909482][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.919966][ T9230] fuse: Bad value for 'fd' [ 93.923758][ T9230] fuse: Bad value for 'fd' [ 93.930680][ T8891] veth0_vlan: entered promiscuous mode [ 93.946077][ T8891] veth1_vlan: entered promiscuous mode [ 93.954039][ T8891] veth0_macvtap: entered promiscuous mode [ 93.969381][ T8891] veth1_macvtap: entered promiscuous mode [ 93.986223][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.007131][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.041030][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041207][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041227][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041245][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063838][ T9234] loop7: detected capacity change from 0 to 256 [ 94.068507][ T9234] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.068582][ T9234] vfat filesystem being mounted at /104/bus supports timestamps until 2107-12-31 (0x10391447e) [ 94.075822][ T9016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.075858][ T9016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.118247][ T9234] netlink: 'syz.7.669': attribute type 3 has an invalid length. [ 94.145262][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.145295][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.298209][ T30] audit: type=1400 audit(4789532797.654:226): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=9250 comm="syz.2.623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26994 [ 94.320166][ T9226] loop9: detected capacity change from 0 to 512 [ 94.336976][ T9226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 94.337034][ T9226] System zones: 1-12 [ 94.347014][ T9226] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.667: missing EA_INODE flag [ 94.347050][ T9226] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 94.348077][ T9226] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.667: error while reading EA inode 12 err=-117 [ 94.348100][ T9226] loop9: lost filesystem error report for type 5 error -117 [ 94.348957][ T9226] EXT4-fs (loop9): 1 orphan inode deleted [ 94.349597][ T9226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.408752][ T9226] fscrypt (loop9, inode 15): Direct key flag not allowed with different contents and filenames modes [ 94.460538][ T9260] : renamed from vlan0 (while UP) [ 94.504982][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.507988][ T4707] Bluetooth: hci2: command tx timeout [ 94.523578][ T9266] loop7: detected capacity change from 0 to 512 [ 94.564171][ T9266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.567467][ T9266] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.579558][ T9276] loop9: detected capacity change from 0 to 512 [ 94.594805][ T9276] ext4: Unknown parameter 'measure' [ 94.619796][ T9266] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 94.625084][ T9266] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 94.627542][ T9266] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.677: Failed to acquire dquot type 0 [ 94.668186][ T9282] netlink: 'syz.0.679': attribute type 40 has an invalid length. [ 94.695022][ T5823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.789629][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 94.837312][ T9299] Injecting memory failure for pfn 0x13c711 at process virtual address 0x20001000 [ 94.855298][ T9299] Memory failure: 0x13c711: keeping poisoned page in swap cache [ 94.855459][ T9299] Memory failure: 0x13c711: Sending SIGBUS to syz.5.672:9299 due to hardware memory corruption [ 94.855567][ T9299] Memory failure: 0x13c711: recovery action for dirty swapcache page: Delayed [ 94.855604][ T9299] Injecting memory failure for pfn 0x13c712 at process virtual address 0x20002000 [ 94.862858][ T9299] Memory failure: 0x13c712: keeping poisoned page in swap cache [ 94.862898][ T9299] Memory failure: 0x13c712: Sending SIGBUS to syz.5.672:9299 due to hardware memory corruption [ 94.862945][ T9299] Memory failure: 0x13c712: recovery action for dirty swapcache page: Delayed [ 94.862979][ T9299] Injecting memory failure for pfn 0x13c713 at process virtual address 0x20003000 [ 94.870437][ T9299] Memory failure: 0x13c713: keeping poisoned page in swap cache [ 94.870473][ T9299] Memory failure: 0x13c713: Sending SIGBUS to syz.5.672:9299 due to hardware memory corruption [ 94.870519][ T9299] Memory failure: 0x13c713: recovery action for dirty swapcache page: Delayed [ 94.894089][ T9253] loop5: detected capacity change from 0 to 512 [ 94.933791][ T9253] EXT4-fs warning (device loop5): read_mmp_block:110: Error -74 while reading MMP block 17 [ 95.001622][ T9303] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.048981][ T9319] overlayfs: missing 'lowerdir' [ 95.096493][ T9329] loop2: detected capacity change from 0 to 8 [ 95.158479][ T9329] SQUASHFS error: Failed to read block 0x6e6: -5 [ 95.158522][ T9329] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 95.158535][ T9329] SQUASHFS error: Unable to read directory block [6aa:26] [ 95.167342][ T9329] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 95.167384][ T9329] SQUASHFS error: Unable to read directory block [6aa:26] [ 95.170077][ T9329] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 95.170089][ T9329] SQUASHFS error: Unable to read directory block [6aa:26] [ 95.190055][ T9329] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 95.190086][ T9329] SQUASHFS error: Unable to read directory block [6aa:26] [ 95.247709][ T9346] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 95.247750][ T9346] SQUASHFS error: Unable to read directory block [6e4:0] [ 95.358663][ T9348] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 95.358697][ T9348] loop5: partition table partially beyond EOD, truncated [ 95.358789][ T9348] loop5: p1 start 385023 is beyond EOD, truncated [ 95.358801][ T9348] loop5: p2 start 4278190080 is beyond EOD, truncated [ 95.360279][ T9348] loop5: p4 start 1979908096 is beyond EOD, truncated [ 95.360295][ T9348] loop5: p5 start 385023 is beyond EOD, truncated [ 95.360308][ T9348] loop5: p6 start 1979908096 is beyond EOD, truncated [ 95.403222][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.691'. [ 95.437865][ T9353] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 95.437946][ T9353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 95.514872][ T9364] tc_dump_action: action bad kind [ 95.607443][ T9367] binder: 9366:9367 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 95.607480][ T9367] binder: 9367 RLIMIT_NICE not set [ 95.607517][ T9367] binder: 9366:9367 ioctl c0306201 20000040 returned -14 [ 95.747207][ T9379] loop2: p1 p2 p3 [ 95.747207][ T9379] p1: [ 95.747246][ T9379] loop2: partition table partially beyond EOD, truncated [ 95.747344][ T9379] loop2: p1 size 16777216 extends beyond EOD, truncated [ 95.751890][ T9379] loop2: p2 size 458752 extends beyond EOD, truncated [ 95.755385][ T9379] loop2: p3 start 3036741376 is beyond EOD, truncated [ 95.982113][ T9421] vfat filesystem being mounted at /73/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107-12-31 (0x10391447e) [ 96.019662][ T4394] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.022344][ T40] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.023438][ T8480] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.023473][ T8480] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.023503][ T8480] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.135223][ T9427] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967277.132214639.3137685462), cmd(2) [ 96.233246][ T9448] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.236948][ T9448] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 96.237007][ T9448] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 96.237068][ T9448] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.244595][ T9448] EXT4-fs (loop5): journal inode is deleted [ 96.292041][ T9449] could not allocate digest TFM handle sha1-ce [ 96.329078][ T9459] could not allocate digest TFM handle sha1-ce [ 96.346962][ T4394] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.489850][ T4707] Bluetooth: hci2: command tx timeout [ 96.611945][ T9491] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 96.683962][ T9497] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.717: bad orphan inode 11862016 [ 96.683999][ T9497] loop0: lost filesystem error report for type 5 error -117 [ 96.691904][ T9497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.691971][ T9497] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.801098][ T7681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.822182][ T4394] 8021q: adding VLAN 0 to HW filter on device eth6 [ 96.897106][ T9524] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.897149][ T9524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 96.897205][ T9524] System zones: 0-1, 15-15, 18-18, 34-34 [ 96.897335][ T9524] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.897366][ T9524] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 96.897409][ T9524] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.897422][ T9524] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 96.898452][ T9524] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.719: bg 0: block 40: padding at end of block bitmap is not set [ 96.898470][ T9524] loop5: lost filesystem error report for type 5 error -117 [ 96.899806][ T9524] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 96.899824][ T9524] loop5: lost filesystem error report for type 5 error -117 [ 96.900545][ T9524] EXT4-fs (loop5): 1 truncate cleaned up [ 96.901003][ T9524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.918952][ T9524] netlink: 96 bytes leftover after parsing attributes in process `syz.5.719'. [ 97.019035][ T9550] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 97.019035][ T9550] Please contact the netfilter-devel mailing list or update your nftables rules. [ 97.027726][ T9546] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.031752][ T9546] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.042368][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.042570][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.054785][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.056790][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.129887][ T4394] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.158144][ T9546] netlink: 96 bytes leftover after parsing attributes in process `syz.9.727'. [ 97.187298][ T7220] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.279129][ T9582] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 97.308356][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 97.339107][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.732'. [ 97.369993][ T9610] syzkaller0: entered promiscuous mode [ 97.370040][ T9610] syzkaller0: entered allmulticast mode [ 97.378442][ T9601] set_capacity_and_notify: 8 callbacks suppressed [ 97.380680][ T9601] loop2: detected capacity change from 0 to 512 [ 97.383061][ T9601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.395470][ T9601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.398271][ T9601] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.417528][ T8891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.466172][ T9618] x_tables: unsorted underflow at hook 2 [ 97.571258][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.575885][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.735'. [ 97.829067][ T9674] nft_compat: unsupported protocol 0 [ 97.834826][ T9674] netlink: 'syz.9.743': attribute type 21 has an invalid length. [ 97.839172][ T9674] netlink: 156 bytes leftover after parsing attributes in process `syz.9.743'. [ 97.843096][ T9674] netlink: 156 bytes leftover after parsing attributes in process `syz.9.743'. [ 98.115136][ T9674] smc: net device lo applied user defined pnetid SYZ0 [ 98.486426][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.749'. [ 98.667663][ T9695] loop9: detected capacity change from 0 to 4096 [ 98.669179][ T9695] ext4: Unknown parameter 'subj_user' [ 98.772386][ T9739] loop9: detected capacity change from 0 to 256 [ 98.776214][ T9739] vfat filesystem being mounted at /89/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 98.787621][ T9739] netlink: 52 bytes leftover after parsing attributes in process `syz.9.751'. [ 98.860105][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.751'. [ 99.211453][ T9781] loop0: detected capacity change from 0 to 4096 [ 99.217231][ T9781] EXT4-fs: Ignoring removed i_version option [ 99.222044][ T9781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.223954][ T9781] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.239229][ T9781] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 99.239300][ T9781] System zones: 0-5 [ 99.243992][ T9781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.332220][ T7681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.389238][ T9802] ------------[ cut here ]------------ [ 99.390564][ T9802] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6 [ 99.392204][ T9802] index 3 is out of range for type 'const char *const[3]' [ 99.394149][ T9802] CPU: 0 UID: 0 PID: 9802 Comm: syz.0.756 Tainted: G L syzkaller #0 PREEMPT [ 99.394173][ T9802] Tainted: [L]=SOFTLOCKUP [ 99.394178][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.394184][ T9802] Call trace: [ 99.394188][ T9802] show_stack+0x2c/0x3c (C) [ 99.394209][ T9802] __dump_stack+0x30/0x40 [ 99.394223][ T9802] dump_stack_lvl+0xd8/0x12c [ 99.394237][ T9802] dump_stack+0x1c/0x28 [ 99.394248][ T9802] ubsan_epilogue+0x14/0x48 [ 99.394260][ T9802] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 99.394272][ T9802] print_bpf_insn+0x19c4/0x1ee0 [ 99.394283][ T9802] diag_print_insn_context+0x360/0x808 [ 99.394293][ T9802] bpf_diag_source+0x518/0xfd0 [ 99.394302][ T9802] bpf_diag_program_structure+0x1b0/0x250 [ 99.394312][ T9802] check_subprogs+0x574/0x5c0 [ 99.394325][ T9802] bpf_check+0x19a4/0x243c [ 99.394336][ T9802] bpf_prog_load+0xf4c/0x1554 [ 99.394346][ T9802] __sys_bpf+0x7d4/0x82c [ 99.394355][ T9802] __arm64_sys_bpf+0xd0/0xec [ 99.394364][ T9802] invoke_syscall+0x98/0x244 [ 99.394376][ T9802] el0_svc_common+0xec/0x23c [ 99.394387][ T9802] do_el0_svc+0x4c/0x5c [ 99.394399][ T9802] el0_svc+0x64/0x260 [ 99.394409][ T9802] el0t_64_sync_handler+0x44/0x104 [ 99.394419][ T9802] el0t_64_sync+0x198/0x19c [ 99.428844][ T9802] ---[ end trace ]--- [ 99.428886][ T9802] ================================================================== [ 99.428899][ T9802] BUG: KASAN: global-out-of-bounds in print_bpf_insn+0x80c/0x1ee0 [ 99.428916][ T9802] Read of size 8 at addr ffff800086ad37d8 by task syz.0.756/9802 [ 99.428924][ T9802] [ 99.428931][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.0.756 Tainted: G L syzkaller #0 PREEMPT [ 99.428944][ T9802] Tainted: [L]=SOFTLOCKUP [ 99.428947][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.428953][ T9802] Call trace: [ 99.428956][ T9802] show_stack+0x2c/0x3c (C) [ 99.428970][ T9802] __dump_stack+0x30/0x40 [ 99.428982][ T9802] dump_stack_lvl+0xd8/0x12c [ 99.428994][ T9802] print_address_description+0xb0/0x238 [ 99.429003][ T9802] print_report+0x68/0x84 [ 99.429011][ T9802] kasan_report+0x8c/0xc4 [ 99.429021][ T9802] __asan_report_load8_noabort+0x20/0x2c [ 99.429032][ T9802] print_bpf_insn+0x80c/0x1ee0 [ 99.429041][ T9802] diag_print_insn_context+0x360/0x808 [ 99.429052][ T9802] bpf_diag_source+0x518/0xfd0 [ 99.429060][ T9802] bpf_diag_program_structure+0x1b0/0x250 [ 99.429070][ T9802] check_subprogs+0x574/0x5c0 [ 99.429082][ T9802] bpf_check+0x19a4/0x243c [ 99.429094][ T9802] bpf_prog_load+0xf4c/0x1554 [ 99.429104][ T9802] __sys_bpf+0x7d4/0x82c [ 99.429113][ T9802] __arm64_sys_bpf+0xd0/0xec [ 99.429122][ T9802] invoke_syscall+0x98/0x244 [ 99.429134][ T9802] el0_svc_common+0xec/0x23c [ 99.429146][ T9802] do_el0_svc+0x4c/0x5c [ 99.429157][ T9802] el0_svc+0x64/0x260 [ 99.429167][ T9802] el0t_64_sync_handler+0x44/0x104 [ 99.429177][ T9802] el0t_64_sync+0x198/0x19c [ 99.429186][ T9802] [ 99.429188][ T9802] The buggy address belongs to the variable: [ 99.429191][ T9802] bpf_ldsx_string+0x18/0x60 [ 99.429201][ T9802] [ 99.429203][ T9802] The buggy address belongs to a 0-page vmalloc region starting at 0xffff8000869d0000 allocated at declare_kernel_vmas+0x54/0xb4 [ 99.429221][ T9802] The buggy address belongs to the physical page: [ 99.429225][ T9802] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2190d3 [ 99.429233][ T9802] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 99.429246][ T9802] raw: 05ffc00000002000 fffffdffc76434c8 fffffdffc76434c8 0000000000000000 [ 99.429253][ T9802] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 99.429258][ T9802] page dumped because: kasan: bad access detected [ 99.429261][ T9802] [ 99.429263][ T9802] Memory state around the buggy address: [ 99.429267][ T9802] ffff800086ad3680: 00 03 f9 f9 f9 f9 f9 f9 00 01 f9 f9 00 00 00 05 [ 99.429273][ T9802] ffff800086ad3700: f9 f9 f9 f9 00 06 f9 f9 00 04 f9 f9 00 05 f9 f9 [ 99.429279][ T9802] >ffff800086ad3780: 00 00 00 06 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 99.429283][ T9802] ^ [ 99.429288][ T9802] ffff800086ad3800: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 00 00 [ 99.429294][ T9802] ffff800086ad3880: 01 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 00 04 f9 f9 [ 99.429298][ T9802] ================================================================== [ 99.429303][ T9802] Disabling lock debugging due to kernel taint [ 99.460739][ T4714] Bluetooth: hci5: command 0x1003 tx timeout [ 99.460774][ T4707] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.581966][ T7220] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 99.581996][ T7220] FAT-fs (loop9): Filesystem has been set read-only [ 99.582073][ T7220] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 99.891166][ T5066] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.939497][ T5066] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.992122][ T5066] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.062287][ T5066] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.157491][ T5066] bridge_slave_1: left allmulticast mode [ 100.157521][ T5066] bridge_slave_1: left promiscuous mode [ 100.157599][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.162360][ T5066] bridge_slave_0: left allmulticast mode [ 100.163482][ T5066] bridge_slave_0: left promiscuous mode [ 100.164640][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.209402][ T5066] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 100.224909][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.261474][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.280194][ T5066] bond0 (unregistering): Released all slaves [ 100.282889][ T5066] bond1 (unregistering): Released all slaves [ 100.286447][ T5066] bond2 (unregistering): Released all slaves [ 100.416657][ T4394] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.569800][ T4394] 8021q: adding VLAN 0 to HW filter on device eth9 [ 100.644478][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.644506][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.647767][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.647788][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.662543][ T5066] veth1_macvtap: left promiscuous mode [ 100.662584][ T5066] veth0_macvtap: left promiscuous mode [ 100.662642][ T5066] veth1_vlan: left promiscuous mode [ 100.662681][ T5066] veth0_vlan: left promiscuous mode [ 100.753209][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 100.766133][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 100.793038][ T4394] 8021q: adding VLAN 0 to HW filter on device eth11 [ 100.906958][ T5066] IPVS: stop unused estimator thread 0... [ 100.935768][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8