last executing test programs: 1m8.095277454s ago: executing program 3 (id=18): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) (async) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x6db7, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8287c020}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000041cb4739c18518ff07d5a952ee68e61ac5446e2f554db8827d0bcf9cbb10dcc92941bb23081624219d5d177955694b065d00fd08c3758b379d857f2f0aa9c9a28423fdf9f0b57f94d23ef53c5cb3bb7176bafde29907a867c3039097fadcab755b9788ada33a080dcba8434b257697190f35bd54bdf3277d7f561821d4985bd4da828e8bd08baf7be1d5f61486f5000000000000", @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf2506000000080004000900000008000400060000000800020004000000080003000000000008000200010000000500050005000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x4101) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x27, 0x204, 0x7cb7e3debeeabea5}, 0x6) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d000000f813000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a0002000000000000000000"], 0x5c}}, 0xc080) 1m8.076233084s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x37}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="f3", 0x1}], 0x1}}], 0x2, 0x4000014) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0xa4e1}}}, &(0x7f0000000040)=0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000f1040000000080ffff0800000000040000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write(r1, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x37}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="f3", 0x1}], 0x1}}], 0x2, 0x4000014) (async) shutdown(0xffffffffffffffff, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0xa4e1}}}, &(0x7f0000000040)=0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000f1040000000080ffff0800000000040000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) write(r1, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) (async) 1m8.039032093s ago: executing program 3 (id=20): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/ip_vs_app\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/1024, 0x400, 0x4a23) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x97) r4 = syz_clone(0x10000000, &(0x7f00000003c0)="269cb7fa18dfac9e72be9601dfac0714a11534fd48f6419b22dd3418505f4a002d7d9fc73ca1023dd974ddd6fb4e4b8158710cb355d2ee20d18f414351e9fbdcae52ad02eae758b1352dc2ff1b26084b7208082e9ec2bec6fe8ae48cf2d1016e4cee16d710dc24eded2db9736fe2be4efd2f379b9d09737b4e2370eeccb70e730eef4bd960ecbaee6a0954405fd2fdafc0a16e9d608d25c458f2846bdf87af2da92caa83d9b37b1b865959605112ea7d4bae", 0xb2, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="8212696cb4d474c26f9ab20bbb9dae7e4b56dac00fcaafd4f54d") waitid(0x1, r4, &(0x7f0000000540), 0x2, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x1) getsockopt$MRT6(r3, 0x29, 0xd0, &(0x7f0000000200), &(0x7f0000000240)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x4000010) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) timer_gettime(r1, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1m7.938403094s ago: executing program 3 (id=21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) unshare(0x8040480) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x0, 0x0, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m6.719466155s ago: executing program 32 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/options/bin\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1, 0xfff00, 0x100000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0x38, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m2.205177489s ago: executing program 33 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe0000000085000000c2000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfe}, 0x48) 52.805408562s ago: executing program 34 (id=21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) unshare(0x8040480) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x0, 0x0, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 45.004253963s ago: executing program 35 (id=233): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$FIONREAD(r0, 0x80047456, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040)) 44.424339572s ago: executing program 36 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 34.209028235s ago: executing program 8 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x1, 0xf8, {0xffffffffffffffff}, {0xee01}, 0x9, 0x933}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x18008, &(0x7f00000004c0)={[{@redirect_dir_off}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x1e0, 0x1a, 0x107, 0x0, 0x5, {0x10, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}, @nested={0x1c4, 0x2, 0x0, 0x1, [@nested={0x1b8, 0x125, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @uid=r1}, @nested={0x1aa, 0x7d, 0x0, 0x1, [@generic="2933745e63c01f175977f8918d30c595a8ce32af162e5db801b8a33485f717d936c045902b3d3b05a2d37985bbee19ff38bdfadc28717eb29b62bc3fa2745b9fa6744e20f9e0eb2199aa54c9e6f0e67d333d7b97e819939234b7601202235ea515d3963ecfa075f7297c6fd6bc9d33fc1bfe1f496fe47ffa0480b3a2f5aa7d01dfc7500d31415e9ac69ccb08814db47809dab4dab346ce866282c2c05c771f31d55238a74e59387c115abc6df6faa2a5d6a0bc4e1cc5ffd9415329b633a8847825da00"/208, @generic="2211", @nested={0x4, 0x24}, @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@private0}, @generic="21c36fb5ad8d4e1484e42d057a60adca914fc477143d351e82aebccb3c9a1e9b6061250ea909150f93f12870c9c1e84bfb56e3584a05ae86a65b2711f6d1902ed05786ced10459bc57be245cf4c23b710b21bc48030ec3a25c3d2369bf66a34be7a0a51e77af2e69acb62d610564ce178617b48c03141d1c8999b80557630e2a83152da4afd004063ae2f2b702a02e54168ff194888ae0ec4a9fbffa40d6305a025fee36", @typed={0x8, 0x66, 0x0, 0x0, @pid}, @nested={0x4, 0x5a}, @nested={0x4, 0xac}, @typed={0x8, 0x67, 0x0, 0x0, @uid=r1}]}]}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 34.120359658s ago: executing program 8 (id=406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000180)="4fdf", 0x2}, {0x0}], 0x2}}], 0x1, 0x90) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c) 33.28144415s ago: executing program 8 (id=415): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000071c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007200)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000007340)={0x0, 0x0, &(0x7f0000007300)={&(0x7f0000000000)={0x1c, r2, 0xc9455e3fe225aaa7, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) r5 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000780)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x7c65, 0xa334, 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'virt_wifi0\x00', {0x1}, 0x3}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xdffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 33.178381434s ago: executing program 8 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="756e695f786c61000200000000000072746e616d653d77696e39352c636865636b3d72656c617865642c757466383d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f77657865632c757466383d302642087f48a94af7913f4d4fd50e2c752835e27a638a1fea3d312c73606f72746e616d653d77696e6e742c696f636861727365743d6d6163726f6d616e2c696f6368613b5f65743d6d616363656c7469632c6e6f6e756d7461696c74a9f1ad1e3cc3de6e4d61fef22e3d302c6e6f6e756d7461696c3d302c000000"], 0x7, 0x2a6, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002140)={&(0x7f0000000100)={0xa, 0x4e21, 0x34923835, @remote, 0x4}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000180)="5b0743df339a4132f5c5378b43fe940bcbafbc82e7ca4091", 0x18}, {&(0x7f00000001c0)="f3e1389fec52fec18c7c3a1dfba0125b1bbe98a20284da2f38032c2d4ad35fc1fb467aadf8b2d2f7d341d8497c7b1f51e24c4f12", 0x34}, {&(0x7f0000000300)="cdc4c649ddeb261430b9e48824ebb3ed09513d3992ab198b3624705a90f641f19598bd81582b1473fecbb9713ae064e903f55d49272d6d6b243106bcfc828bdb4bc6a85bd2bd54a8", 0x48}, {&(0x7f0000000540)="baf0ac6644691921a2f2b87c24da4a31e8c71dd1e82547ae612df4afba0bf4ea33196f52f3d7fce771d785131a60877409fe89718e4ea54feabcf1debf2ae3d6c28ffdbc327f3b6e6747ae1578d57d46b7f0793c57d9aa355f0cd3f2913e0f05d6c141c504679ed0a6b49902b0c070391774502c820a348c0728d679ce8c9dd7d25e7e9a6aa355281caf16b261b52e3de1bfa7e0d10178f4001237af2dfb77341104bb2e86094094703c960fcb316afdeeba997d1c079039a8a8bddd482d2460412f4fa632d04c74b627767bb8889f130e0b76fbd04280539cedd4527f12982d0734236e95480089f6bac7dcdd66cc12f19dc10b14", 0xf5}, {&(0x7f0000000640)="fa74305d3eba76f47c4f0153ace3d5466a186756ce7d460a62136e80258ba1737fed547ec8b7fa4c913d9dbb9851bcaa984b1f3bd4dd74ca70366b9719c29f3f28397405e27129ad83940cab48ab5fd33725c1414939e348a3cf209fc83c2b367c6b62b57de2263eaa367b63be094a1bb0ef21d67f73c2a871303f578d7f84b5b622f60681988ae5e7487b538aa4b9edc5b3b73c5a589d219c3feb262b8ed0c3232756a73ddf7f195fa33fdcce1b68735671f342cb049963e51316961be52662eb0066387f23a510170716a1", 0xcc}, {&(0x7f0000000a00)="2b7bdb9d8315d47122f44cfbff63b5b816b4487693afab69d8b3fb5d75bd5dbfbb71978de7ad9ad130d00ab9fe9ecd4b2cb7418e279dd9ad46bfe9", 0x3b}, {&(0x7f0000000a40)="e7077a", 0x3}, {&(0x7f0000000a80)="4fae2007c607ef6b492071aa1e23563e7c878861cf2e4dc75c8a77c9db052b07e0b4ec2755dd877f8e51310f3e03c3609239a096e605519a549a0f20e96656a7df291478e6aa061fe8f60f54baa5f47a6952b52f9d384f366408e25dce2834e78690c7140e05c708648806b7ab48a49edbe1745ef5c2e182332f8967f58d3b351167090c94e371ba0aa22ff4a4aab69276673e2f5fb099fb1ea667fd370bd13dce7dbb253609d9df97b67850c77f29638580da096f2426d81bfebab6cd17850317f9f05cbd84673498abf587435352556b0fb2ab438173e665a3b8ddd4c5cbfbd749dee94a985bdb2e763651c0cda9", 0xef}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="5491b8a593e0e5c70a6f1dc2", 0xc}], 0xa}, 0x4000000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000005580)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x6, 0x4, 0x6, 0x3, 0x3000, 0x851}}, @common=@srh1={{0x90}, {0x33, 0x7, 0x6, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x2000, 0x200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendfile(r6, r7, &(0x7f0000000000)=0x7, 0x12) 32.281432773s ago: executing program 8 (id=424): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726fb6793c83e2f6f36afbae06ddc76f746d6f64653d"]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "8affff42f431c3d9a322d200008000004000"}, 0xe2f2, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@ng={0x4, 0x4}, 0x2, 0x0) 32.058387378s ago: executing program 8 (id=430): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xffffffffffffffff, &(0x7f00000000c0)=0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) 31.971230402s ago: executing program 37 (id=430): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xffffffffffffffff, &(0x7f00000000c0)=0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) 28.114206139s ago: executing program 0 (id=432): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2200414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f00000005c0)='./file0\x00', 0xffff) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, '\a'}]}}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @empty, 0x1ff}, 0x1c) 27.848796888s ago: executing program 0 (id=457): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@lazytime}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() semop(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x2, 0xb, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) 27.237653559s ago: executing program 0 (id=463): r0 = io_uring_setup(0x5c24, &(0x7f0000000180)={0x0, 0x4e84, 0x800, 0x1, 0xde}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073112d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.174017615s ago: executing program 4 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) read(r3, &(0x7f0000000000)=""/89, 0x59) read$nci(r3, &(0x7f0000000300)=""/133, 0x85) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r4, 0xc0104d08, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x24, 0x9, 0x20, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x4, 0x7}}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r7, &(0x7f0000002700)={0x54, 0x0, 0x0, {0xfff}}, 0x18) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0xfc, 0x5, 0x52141eca, 0x24, @dev={0xfe, 0x80, '\x00', 0x36}, @private0, 0x7800, 0x8, 0xbcac, 0x401}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_delneigh={0x48, 0x1d, 0x400, 0x70bd2b, 0x25dfdbfe, {0x1c, 0x0, 0x0, r5, 0x10, 0x3, 0x7}, [@NDA_LINK_NETNSID={0x8}, @NDA_IFINDEX={0x8, 0x8, r8}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x9, 0x1, 0x9}}, @NDA_PROBES={0x8, 0x4, 0x800}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) 26.968465822s ago: executing program 4 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r2, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xaa3a6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000140)=[0x2, 0x9]) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4f64, 0x1f480, 0x2, 0x325}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10], 0x0, [0x1, 0x1000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0x98}}, 0x0) 26.810078587s ago: executing program 0 (id=473): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) pipe2(0x0, 0x4080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f000009a000/0x4000)=nil, 0x4000, 0x19) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f08000100270000002f0000004500003c00000000008490783fffff20ac1414aa000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4a) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0xa, {0xf8000002, 0x4, 0x27, 0xfffffffa}}) shmat(0x0, &(0x7f000033a000/0x3000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f, 0x40300}}, 0x20}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26.706568828s ago: executing program 4 (id=476): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) (async, rerun: 64) keyctl$set_reqkey_keyring(0xe, 0x7) (async, rerun: 64) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670977db5e911ef2ad63e849901d8433129dbacbfd4924d7545517fd18b52504cede0ac594eeb7d29903b5e1ac84c1e749c6be08d302d3f933666e79d44372a5460e8a014172ed453919ea227cf8087304638788e656f1c3fb7013cdcac9612ebfe53e88cc3226b457a2cd37a993310f36acf1e40e34d4f60e", 0xc7}], 0x1}}], 0x2, 0x2090) (async, rerun: 32) shutdown(r5, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async, rerun: 32) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x8) 25.915177768s ago: executing program 0 (id=480): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 25.594365825s ago: executing program 4 (id=485): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xa, 0x85f5, 0x7c}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0xf00, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) read$alg(0xffffffffffffffff, &(0x7f0000000340)=""/128, 0x80) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r2 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x9e0fc0, 0x6ab858183a7ef62b) truncate(&(0x7f0000000080)='./file2\x00', 0x800007) finit_module(r2, 0xfffffffffffffffe, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r4, 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x40001, 0x137) write(r5, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) getpeername$inet(r10, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e1e, @loopback}, {0x1}, 0x50, {0x2, 0x4e21, @remote}}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x31002, &(0x7f0000000b40)=ANY=[], 0x0, 0x327, &(0x7f0000000500)="$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") 25.046130758s ago: executing program 4 (id=492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 24.919884046s ago: executing program 5 (id=494): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1bbc68f4, 0x3}, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x1ff, 0xfffffffffefffffd, 0xb, 0x1, 0x5, 0x0, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffc}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x0, 0x4}}], 0xa0}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x40, 0x40, 0x10000, 0x2, {{0x40, 0x4, 0x1, 0x4, 0x100, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x54, 0x71, 0x3, 0x0, [{@multicast2, 0x3}, {@empty, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x6}, {@remote, 0xd69}, {@multicast1, 0x7fffffff}, {@rand_addr=0x64010102, 0x7f}, {@multicast2}, {@multicast2}, {@loopback}]}, @end, @rr={0x7, 0x1f, 0x7e, [@multicast2, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x1b, 0xf2, [@broadcast, @empty, @loopback, @multicast2, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x4e, [@multicast1, @loopback, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x6}, {@loopback, 0x9}, {@empty}, {@loopback, 0x4}]}, @lsrr={0x83, 0x7, 0xb8, [@remote]}, @noop]}}}}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x8004}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='\x00', 0x500, &(0x7f0000000900)={@_ha_fsid={[0x3, 0x8]}, {0x5, 0xd, 0x1, 0x5}}, 0xb4, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x29, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x1, 0x0, 0x6, 0x7, 0x4, 0xc, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0x1, 0xd, 0x9, 0xffffffffffffffc0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7e7, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x101, 0x57, &(0x7f00000006c0)=""/87, 0x41100, 0xc, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x4, 0xfd2, 0xf9a}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0x1, r5, r6, r7, 0x1], &(0x7f0000000a40)=[{0x4, 0x5, 0x8, 0x8}, {0x4, 0x1, 0x7, 0x4}, {0x2, 0x5, 0x2, 0xa}, {0x5, 0x5, 0x2, 0xa}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x3, 0x7, 0x8}], 0x10, 0x70}, 0x94) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x3, 0x0) 24.829271s ago: executing program 5 (id=495): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000800000000000100"], 0xd8}}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa005c62509e00080046000060000000000011907800000000000000008802000000004e20004890780300000001000000f9d3421eee34e0030000080000000000000000e3f71896a7813cd10000000073047f9067ec93e1781806009031066797feb6632a4ceac9254aafec3f00000000"], 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000140)={0xb, @raw_data="1be1267a54de373064f7625aa0222fda22746feedfbfbd0e08fafbad2f197f8e863f187ea8be3e6d544e0c40376443f1d985594878d95552a719ea2b4186f5214cb17f15c5bc9e95786cc8d31fb0aa937b98ba2e98f744d596d15e45d431da4f9a499edf2492788be0384b3bed0c9415c09a2f5fcfe7c79fab472843d4fce3bdc335cdb968e27b3965c02dc0eaee485687a1fe8bf6943e039fa371e6211fe6b4d5c40acc73c93e72b7e9369cfb96d499401cbf2a77b485ceecb40148fd5a8fb345438c472336f10b"}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0xa, 0x4) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000d40)={0xc, @pix_mp={0x0, 0x0, 0x34565348, 0x0, 0x0, [{}, {0x7fffffff}], 0x7f}}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x4, 0x0, 0x0, 0x7fff0000}]}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000280)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000001480)=ANY=[@ANYBLOB="a6e71c1800000087f3c34bd100000000060000801bcae6b595d407ed3c", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x4, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d734672b3af22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b656f9664277cadb8597e7d911ad1da457ef00"}}) (async) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000, 0x0, r6}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5}) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$lock(r7, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x4000000000009}) (async) fcntl$lock(r6, 0x24, &(0x7f00000002c0)={0x2, 0x5, 0x73f8, 0xd285, r4}) (async) getrandom(&(0x7f0000000480)=""/4096, 0x1000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 24.828599804s ago: executing program 4 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c000a0300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c000a0300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) 24.794397491s ago: executing program 38 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c000a0300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003be8c5ee17688a8003c000a0300ecff3f000000030000020001000098fc5a53d3f5b7e4a96c6b02009da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5a2faa109066d68bdc36e2b68d8eec25a02aff9ee872a936786cf65dc1f39e0c9cfeba06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605", 0xb8) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) 24.722865728s ago: executing program 5 (id=498): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 24.649817964s ago: executing program 5 (id=500): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4cf, &(0x7f0000000380)="$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") r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) ppoll(&(0x7f00000002c0)=[{r0, 0x102}], 0x1, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000200)={0x8, r1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 23.770682243s ago: executing program 5 (id=503): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="8100000000000000"], 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050000000000000000000500000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x4}], 0x1, &(0x7f0000000140), 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x6, 0x0, 0x2, 0xc, 0x806, 0xfff2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r9) (async) syz_usb_connect$uac1(0x0, 0xbb, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406b1d010140000102"], 0x0) ioctl$EVIOCRMFF(r9, 0x40085503, 0x0) (async, rerun: 64) ioctl(r8, 0x8b32, &(0x7f0000000040)) (rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1a0100005353e2da3fddbdedb7b6931c6aef0c495ee646cc2ec590dc2d3b3f3448db937bfcea51161fa48150ac", @ANYRES16=r7, @ANYBLOB="0502fcfffffffddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f31000000000800080000000000"], 0x3c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x5, 0x101, {{0x32, 0x4, 0x1, 0x1, 0xc8, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@empty, 0x8}, {@broadcast, 0x35}, {@empty, 0xda56}]}, @rr={0x7, 0x3, 0x7c}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x5, [0x6, 0xa, 0x0, 0x80, 0x8, 0x100, 0x6]}, @timestamp={0x44, 0x4, 0x55, 0x0, 0x9}, @timestamp_addr={0x44, 0x2c, 0x75, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x10}, {@multicast1, 0x7}, {@local, 0x25}, {@local, 0xffffff00}, {@multicast2, 0x5}]}, @generic={0x44, 0x11, "edf41c457762c9a018c2676fd3c8c3"}, @lsrr={0x83, 0x27, 0x3e, [@rand_addr=0x64010100, @remote, @broadcast, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000d5ef5413b3cb18b9da4aec958b4cdb0c821ee045ffa3", @ANYRES16=r7, @ANYBLOB="10002dbd7000fddbdf251300000024000180080003000300000008000100", @ANYRES32=r10, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x8004) (async) r12 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b", 0x5d}], 0x1, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 23.54672999s ago: executing program 5 (id=504): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x4, 0x956c, 0x3000}], 0x2) semop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) 23.361206773s ago: executing program 39 (id=504): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x4, 0x956c, 0x3000}], 0x2) semop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) 23.330227033s ago: executing program 0 (id=508): dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_QUERY(r3, 0x23, &(0x7f0000007440), 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r6 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) (async) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) pwritev(r2, 0x0, 0x0, 0x9, 0x5) getsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x25e181, 0x0) (async) r7 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x25e181, 0x0) r8 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x1000007}) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x1000007}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0xe, 0xa1, "6a18a9319b04738025bf651dfe97de50357007b233e5cebd9d0e98379035c07c570f5646d709a3298637ddf09d19c950f52c5badde13d97504ea5fa86ba7ce484dfba6af2ef16920a2e07506bea150759ccff17f09ca58a18eb7dd73732ca43e2d731eea9b8c6b66fca878bf069000f98d5f7cdedfb2d8ed27d2c45c0680e632138099ac1ab1556103debf4f5149d58e60c4bf71855cba084b407974c82589e8a4"}}) write(r7, &(0x7f0000000080)='4', 0x1) (async) write(r7, &(0x7f0000000080)='4', 0x1) 23.329914978s ago: executing program 40 (id=508): dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_QUERY(r3, 0x23, &(0x7f0000007440), 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r6 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) (async) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) pwritev(r2, 0x0, 0x0, 0x9, 0x5) getsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x25e181, 0x0) (async) r7 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x25e181, 0x0) r8 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x1000007}) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x1000007}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0xe, 0xa1, "6a18a9319b04738025bf651dfe97de50357007b233e5cebd9d0e98379035c07c570f5646d709a3298637ddf09d19c950f52c5badde13d97504ea5fa86ba7ce484dfba6af2ef16920a2e07506bea150759ccff17f09ca58a18eb7dd73732ca43e2d731eea9b8c6b66fca878bf069000f98d5f7cdedfb2d8ed27d2c45c0680e632138099ac1ab1556103debf4f5149d58e60c4bf71855cba084b407974c82589e8a4"}}) write(r7, &(0x7f0000000080)='4', 0x1) (async) write(r7, &(0x7f0000000080)='4', 0x1) 18.742749384s ago: executing program 3 (id=505): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x8000000000000001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000180)=0x80000004, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) getsockopt$SO_NETNS_COOKIE(r3, 0x1, 0x47, &(0x7f0000000240), &(0x7f00000002c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000300)={0xfffffc00, 0x100}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000001c0)={0x8, 0x102, 0xe04a19024bb68973, {0xfffffffe, 0x9, 0x5, 0x5}}) r5 = socket(0x10, 0x803, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x4000000, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 18.625176641s ago: executing program 3 (id=539): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2, 0x3, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}}, 0x100) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @discrete={0xff4e, 0x3}}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0x1}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x3) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596", 0x1ec}, {&(0x7f0000002b40)}], 0x2}, 0x8400) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12.174186477s ago: executing program 1 (id=607): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f0000008440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80047213, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="9843cabf11e09c34"}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0xfffffffe, 0x200003, 0x821, 0x3, 0x7, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x4b70, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x3, 0x3}, 0x20) read$FUSE(r0, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000003280)={0x28, 0xfffffffffffffff5, r6, {{0x7, 0x25, 0x1}}}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000080", @ANYRES16=r4, @ANYRES8=r3, @ANYBLOB="beaf39ee181f124e564dcca1f4c8c12fc3ec38591881ed7cd11f8df95e0d1f875e39f49db92de4c5d94984b7c192ba7e6ad6c691df67b0f73e59a88129e199a7030f8ab95426f227e39558fdcdd5459a1d6e31c5bcc00f3331", @ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) 11.878266414s ago: executing program 1 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_to_bond\x00'}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000100)={{0xa, 0xffff, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, {0xa, 0x0, 0x0, @remote}, 0x0, {[0x10000, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0xfffffffd]}}, 0x5c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x5, 0x5}) 11.795627684s ago: executing program 1 (id=616): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x2, r0}, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 11.676776432s ago: executing program 1 (id=619): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$eJzs3T9oJFUcB/Df7O4YN1kkaiOIf0BENBBiJ9jERiEgIYgIKkRErCQRYoJd1srGQmuVgGATxM5oKTbBRhGscncpcs3BXbjiwhV3xR67s3u3m+xxd/v32Pl8YJk3ee/NexPm+yYEZjaA3JqNiMWIKEbEXESkEZG0N3g++8w2d3fK+6sRtdo7V5NGu2w/0+o3ExHViHgtotSq29r74Oj6wVsvfbOZvvjz3vvlUZ1fu+Ojw7dPflz++relV7f+/f/ychKLUWnWtZ/HICVdflZKIp4YxmAPiaQ07hlwP1a+/PVcPfdPRsQLjfynUWhG9tuNR/5K45Uf7tb3uyv/PT3KuQKDV6ul9XtgtQbkTiEiKpEU5iMiKxcK8/PZ3/Dni9OFz9Y3vpj7dH1z7ZNxr1TAoKSRHL75x9TvM6fyf6mY5R+YXJWIw3dXdi/UyyfFcc8GGJr2/7Y/k23q+Z/7aPvlkH/IHfmH/JJ/yC/5hwnQY3blH/Krn/w/OqQ5AaPh/g8TLG0Vql2r5R/yS/5hQv3U7anTTvIP+dWefwAgX2pT434CGRiXca8/AAAAAAAAAAAAAAAAAADAWTvl/dXWZ1Rj/v19xPEbEVHqNn6x8X3ErbeNT19L6s1uS7JuffnwuT4P0KdfBvb0dbmnXo9dHNT4vfnn2eEc96vO3c5fztSd4vZaRLXeeKFUOnv9Jc3rr3eP36M+/bjPAR7Q6bcCvv7eaMc/7ebueMdfOoj4s77+LHRbfwrxVGObrT9LSed6U2l/xXKPPr/R5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmVsBAAD//6iAbTQ=") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x3, 0x0, 0x0) chdir(0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}}, 0x50) read$FUSE(r0, &(0x7f0000004800)={0x2020, 0x0, 0x0}, 0x2051) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x90, 0x0, 0x3, {0x200000002, 0x1, 0x5, 0x1000, 0x5, 0x1, {0x40, 0x9bb, 0xffffffffffffe280, 0x20000000, 0xb, 0xc, 0x200a, 0x1, 0x88, 0xa000, 0x7, r2, 0x0, 0x6, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@filename='./file0\x00', r2, &(0x7f0000000040)) 10.664730264s ago: executing program 1 (id=629): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x2000) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 8.284985555s ago: executing program 1 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000023c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}]}]}, 0x40}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xfffffffe, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 8.138204972s ago: executing program 41 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000023c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}]}]}, 0x40}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xfffffffe, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 3.520325918s ago: executing program 42 (id=539): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2, 0x3, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}}, 0x100) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @discrete={0xff4e, 0x3}}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0x1}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x3) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596", 0x1ec}, {&(0x7f0000002b40)}], 0x2}, 0x8400) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2.858534438s ago: executing program 9 (id=684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) (fail_nth: 1) 2.35268345s ago: executing program 2 (id=688): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.143596519s ago: executing program 2 (id=689): syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000b00000e00000119078000000000000000000044e21009c90780100000002000000d39b3da1ab4e3365752e83740652c8f0bfd04abfed78335bb8621e4e1f8f4c8a3ab20555c576203821f9641dda3c57f77a67ab6d4894d9cdb8b75fe783a846d3c8a32023a10bd2da0b32395a9a1b2895b2d1f7f974403dc00ac6a8fea5f1d3ebc1c90a4586801c29841673091299f9d36582d2f652957c03113b8ced8fbe"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x6, 0x100, @void}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x16, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r2, r2, 0x0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x3, 0x9, 0x1}, 0x50) fremovexattr(r3, &(0x7f0000000040)=@known='com.apple.system.Security\x00') write(r0, &(0x7f0000000180)='wcd9390-usbss 0x42\x00', 0x13) 1.890209892s ago: executing program 9 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x68}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x2, 0x24044044) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000000)={0x5c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x95, 0x0, 0x1, 0x1ff, 0x4, 0xffffffff]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xaf9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4050) 1.838466676s ago: executing program 6 (id=691): r0 = timerfd_create(0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0xfdf, 0x14a4014, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0xfffffffe}}, 0x50) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfa0, 0xffffffff, 0xfffffffc, {0x8000, 0x0, 0x1, 0x91, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x0, r7, 0x0, 0x0, 0xeffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@euid_eq={'euid', 0x3d, r7}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) 1.601472368s ago: executing program 9 (id=692): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x814000, &(0x7f0000000000), 0x1, 0x793, &(0x7f0000001700)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4c0, &(0x7f0000001740)="$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") (async) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 1.598683935s ago: executing program 2 (id=693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000fcffffff0a000000060001003400000008000a"], 0x24}}, 0x20008080) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x69, "d5530bba8bc9c4cd1e7a393151453ada8c66b251653b85d74563d29bce829b8ca458815e8529d13637991d5f8fab8118f7176e53d46d04c93fd291ad702bb2674406f542a3d82b2c20bd9aeeaa905af037f046e02c44cc69a7c6740fb8a3f6b4faaa679cdb9699012a"}, &(0x7f00000001c0)=0x71) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r5, 0x9c26}, &(0x7f0000000240)=0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 1.422016766s ago: executing program 9 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x240440c0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@report={0x124, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0x33, {@in6=@loopback, @in6=@private1, 0x4e24, 0x339, 0x4e20, 0x2b, 0x2, 0x40, 0x80, 0x0, r4, r6}}, [@sec_ctx={0xd8, 0x8, {0xd4, 0x8, 0x0, 0x3, 0xcc, "7aaca2f4b7c47fd219fcba7128320293f0d884d3668c0643675432e7de069d0e79c1f1eb74f3acd096a13c285185fa73419a85d591d431c56f3dd1080923bf00d89e3579c5bdaf6ca413a76cbe67d8fbf8137d3e5367b06bc7c36adc34114adcad58d790ceb9ddb578cd508dc9679e0d59f30c617a577e081bca58088d926add5087d501d20f8d5b315a4123936beb8f9986c93a09c3b2f2a43c2755004981362bf9a0cb241419ca15a0cc0019b18e7404207eddac2619e4e3817f97d734941553fe9063b1375b127e0fd9cd"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x404c005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x9, 0x0}}}, 0x9, 0x8, 0x5, 0x80, 0x2, 0xffffffff, 0x4}, &(0x7f0000000640)=0x9c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc8, r8, 0x10, 0x6, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2404c00d}, 0x80) execve(&(0x7f0000000880)='./file0\x00', &(0x7f0000000a40)={[&(0x7f00000008c0)='\x00', &(0x7f0000000900)='-}*\'+-],$\x00', &(0x7f0000000940)='veth1_to_batadv\x00', &(0x7f0000000980)='+\x00', &(0x7f00000009c0)='pci\x00', &(0x7f0000000a00)='netdevsim']}, &(0x7f0000000b80)={[&(0x7f0000000a80)='wlan0\x00', &(0x7f0000000ac0)='/dev/net/tun\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='\\\x00']}) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000bc0)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000c00)={0x7, 0x9, 0x3, 0x3, 0x5, 0x0, 0x3}) r9 = openat$cgroup_ro(r5, &(0x7f0000000c80)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10024080}, 0x24004800) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000dc0)={0x0, 0x9}, 0x2) r10 = syz_open_dev$loop(&(0x7f0000000e00), 0x7, 0x141a01) ioctl$LOOP_SET_BLOCK_SIZE(r10, 0x4c09, 0x2) listen(r5, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000f40)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/35, 0x23, 0x1, &(0x7f0000000e80)=""/192, 0xc0}, &(0x7f0000000f80)=0x40) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000fc0)={{0x91, @broadcast, 0x4e22, 0x2, 'sed\x00', 0x10, 0x7f, 0x49}, {@local, 0x4e22, 0x0, 0x0, 0xfffff001, 0x6}}, 0x44) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000001040)) read$FUSE(r9, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f00000030c0)={0x18, 0x0, r11, {0xe5}}, 0x18) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000003100)=""/119) syz_open_procfs$namespace(r12, &(0x7f0000003180)='ns/cgroup\x00') 1.330330989s ago: executing program 7 (id=695): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff9, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x1) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r2, 0x6f50, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000020000000000000000000000000b1060000000000000000fcffffff"]}, 0x104) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex$unlock_pi_list64(0x0, 0x0, 0x7, &(0x7f00000000c0), 0x0, 0xfff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x10, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3}]}}]}}]}, 0x44}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2e, 0x6390a5ad, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x9, 0x6, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700, 0x1, 0x20000000}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x9, 0x6, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700, 0x1, 0x20000000}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) 1.279828178s ago: executing program 2 (id=696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x30, "86fffbb1716eccf680b74fa8cc995dfd3c8e41039f68bd4717ac6dc622ce592c8f7d4aeb0637e6958f3bca9242dd9183"}, &(0x7f00000001c0)=0x38) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0xc, 0x48}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0xaf}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x34}}, 0x800) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r8, 0xffffffffffffffff, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r9, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4a20, 0x2, @remote, 0x29}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x18}, 0x4004000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, {0xa, 0x4e20, 0x3, @private2, 0x20}, 0xffffffffffffffff, {[0x9, 0x3ff, 0x40, 0x5, 0x7fffffff, 0xcb, 0x9, 0x2]}}, 0x5c) 1.22536155s ago: executing program 9 (id=697): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0x956c, 0x3000}], 0x2) r0 = semget$private(0x0, 0x2, 0x694) semop(r0, &(0x7f0000000000)=[{0x2, 0x7d, 0x1000}, {0x4, 0xffff, 0x800}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x9, 0x1800}], 0x5) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0xfc01, 0x1000}], 0x1, &(0x7f00000000c0)={0x77359400}) 970.137378ms ago: executing program 2 (id=698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 945.335889ms ago: executing program 7 (id=699): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 887.144093ms ago: executing program 6 (id=700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="9723af4501000000010001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) recvmsg$can_bcm(r1, &(0x7f0000001e80)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/243, 0xf3}, {&(0x7f0000001a40)=""/248, 0xf8}, {&(0x7f0000001b40)=""/255, 0xff}, {&(0x7f0000001c40)=""/131, 0x83}, {&(0x7f0000001d00)=""/2, 0x2}, {&(0x7f0000001d40)=""/101, 0x65}], 0x7, &(0x7f0000001e40)=""/29, 0x1d}, 0x2000) 750.228834ms ago: executing program 7 (id=701): r0 = socket$inet6(0xa, 0x800, 0x38) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x8eec3816282631eb) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) recvfrom$inet6(r0, &(0x7f00000004c0)=""/257, 0xffffffffffffffa4, 0x40010062, 0x0, 0x0) 750.027314ms ago: executing program 6 (id=702): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xb01400, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noauto_da_alloc}, {@delalloc}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}, 0x3, 0x562, &(0x7f0000002280)="$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") syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x5, 0x1ca, &(0x7f0000000040)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 696.177425ms ago: executing program 7 (id=703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'veth0_to_bond\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = fsopen(&(0x7f0000000000)='xfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r8, r7, 0x15, 0x0, @void}, 0x10) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r2, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19c5f1212cfaaf1a, 0x0}, &(0x7f0000000740)=0x40) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="d067e049a207a5e5af9ab3a83df1dc4981682535a21e7e1c14338e20df88314fb818a6f2a7f703ecc5473ffe606b67b1488ee629c0735ed1c3e6701ef6fbf6afaeca598c05ffd08f18390453f61b566b135a096ffa1e8f3b58404a93e2e1511e6d7e7b78a978", 0x66, 0x8001, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="20002cbd7000fddbdf250d000000900003800600040000020000b3000600fc02000000000000000000000000000005000800070000001400020076657468315f766c616e000000000000140006000000000000000000000000000000000008000500e00000011400020076657468305f746f5f626f6e6400000014000200766c616e300000000000000000000000060007004e220000060004000700000008000400ff030000140002800800060004000000060002004e20000008000400030000000800060003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40090}, 0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000440)=0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000202, r10, &(0x7f0000000480)='./file0\x00') 640.447081ms ago: executing program 6 (id=704): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r0}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) unshare(0x40080) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000240)={{r2}, "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"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r4], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xd, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000000000c02e0ee648f7cc978a116b756119a8000000000095000000000001000000000000005d8e5c6d32759bc50b337d8483ca465345201ba368ec7ba6823ba888fc12c25be6da444f4a13ed61a8ef3eac1753296b181950a9c8d587c0a2e25e570d4fff98d2423e90e50e22319a4cdab4eecef28d9eed579c312473d604e254b3222c025f089e6bc6ed3815b4b22bdad80b381a3e5c47a77ad6d29a380a19c46e137cc35a896689a3f127389388f53a588c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x8}, 0x94) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) accept4$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) 376.042952ms ago: executing program 9 (id=705): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xf, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x3, 'hub\x00'}) 124.714857ms ago: executing program 6 (id=706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, r5, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc884) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, @private2}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 122.651719ms ago: executing program 7 (id=707): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 120.996828ms ago: executing program 2 (id=708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/serio/drivers/atkbd/bind_mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='me', 0x2) syz_io_uring_setup(0x2593, &(0x7f00000000c0)={0x0, 0x4ab6, 0x1000, 0x1, 0x36f, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newtaction={0x100, 0x30, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0xec, 0x1, [@m_sample={0xe8, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xce000000}]}, {0xb3, 0x6, "05592e623633cae4cb02bae2e6e726ad20b1c803a4bc9e93b5155a790bf86618341a27b570103a62e2c4a04382cabb332a1497e5b7753f73eb07a98d2c0977ed20c188c9c510ae115b5df6ba73d9ea17ad806bd72fec6d392062782ee9ac66c0efa7f6a58d335c30b002f86f94738b490edc5d7979fb8a8a93616320cee771291236394c5781573cc6f1ce1381a759ca4d3d158b2cea5ae1c1c0f67923e4ccfa4a72002aa090bbb48b4cd9d1c0457a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 1.016541ms ago: executing program 6 (id=709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0xa1}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0}, {0x0, 0x0, 0x0}], 0x2) setns(0xc9, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') lseek(r3, 0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e1f, @remote}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002ebd7000fddbdf25310000000a0001007770616e300000000500330081000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r6 = socket(0x10, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x138, 0x138, 0xffffffff, 0x268, 0x380, 0x548, 0x548, 0xffffffff, 0x548, 0x548, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1c, @ipv4=@rand_addr=0x64010102, @ipv4=@multicast1, @icmp_id=0x66, @port=0x4e20}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0xffffffff], 'batadv_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0xff, 0x64, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff8, 0x44, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x2, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x1, 0x1, [0x80, 0x5, 0x6, 0x8, 0x2b1, 0x1, 0x5, 0x0, 0x0, 0x6e9, 0x190, 0xf972, 0xffff, 0xc, 0x8001, 0x3], 0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x13, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e24, @gre_key=0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='none', 0x4) 0s ago: executing program 7 (id=710): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = getpid() syz_pidfd_open(r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): 6987] do_futex+0x320/0x378 [ 62.448245][ T6987] __arm64_sys_futex+0x2e4/0x418 [ 62.448254][ T6987] invoke_syscall+0x98/0x244 [ 62.448263][ T6987] el0_svc_common+0xec/0x23c [ 62.448277][ T6987] do_el0_svc+0x4c/0x5c [ 62.448286][ T6987] el0_svc+0x60/0x1d8 [ 62.448296][ T6987] el0t_64_sync_handler+0x44/0x104 [ 62.448304][ T6987] el0t_64_sync+0x198/0x19c [ 62.498720][ T6990] netlink: 'syz.9.340': attribute type 1 has an invalid length. [ 62.674678][ T7009] ecryptfs_get_tree: kern_path() failed [ 62.678865][ T7009] Reading sb failed; rc = [-2] [ 62.681538][ T7007] can: request_module (can-proto-0) failed. [ 62.806186][ T7017] dvmrp0: entered allmulticast mode [ 62.854775][ T7023] vfat: Unknown parameter 'nonumtcil' [ 62.881571][ T7023] ipvlan2: entered allmulticast mode [ 62.881595][ T7023] syz_tun: entered allmulticast mode [ 62.894098][ T1267] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 62.894115][ T1267] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 62.907335][ T1267] hid-generic 0000:FFFFFFFE:0800.0001: hidraw0: HID v0.04 Device [syz0] on syz1 [ 62.930885][ T7030] fido_id[7030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.995239][ T7044] pim6reg: entered allmulticast mode [ 63.011386][ T7044] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 63.024286][ T7044] fuse: Unknown parameter '' [ 63.045967][ T7056] set_capacity_and_notify: 3 callbacks suppressed [ 63.045979][ T7056] loop5: detected capacity change from 0 to 1024 [ 63.077690][ T7056] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 63.077820][ T7056] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 63.196521][ T7070] loop1: detected capacity change from 0 to 512 [ 63.225547][ T7070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.237145][ T7070] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.364: Invalid block bitmap block 0 in block_group 0 [ 63.237166][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.238444][ T7070] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 63.238456][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.238789][ T7070] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.364: attempt to clear invalid blocks 983261 len 1 [ 63.238809][ T7070] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.238957][ T7070] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.364: Invalid inode table block 0 in block_group 0 [ 63.238968][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.239778][ C0] EXT4-fs (loop1): error count since last fsck: 4 [ 63.239795][ C0] EXT4-fs (loop1): initial error at time 2000000282: ext4_read_block_bitmap_nowait:487 [ 63.239808][ C0] EXT4-fs (loop1): last error at time 2000000282: __ext4_get_inode_loc:4916 [ 63.241280][ T7070] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 63.241299][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.241779][ T7070] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 63.241792][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.241914][ T7070] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.364: Invalid inode table block 0 in block_group 0 [ 63.241925][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.242028][ T7070] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 63.242036][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.242140][ T7070] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.364: mark_inode_dirty error [ 63.242150][ T7070] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.242258][ T7070] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 63.242266][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.242376][ T7070] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.364: Invalid inode table block 0 in block_group 0 [ 63.242386][ T7070] loop1: lost filesystem error report for type 5 error -117 [ 63.242513][ T7070] EXT4-fs (loop1): 1 truncate cleaned up [ 63.299630][ T7074] CUSE: unknown device info "" [ 63.299643][ T7074] CUSE: unknown device info "" [ 63.299648][ T7074] CUSE: unknown device info "" [ 63.299652][ T7074] CUSE: unknown device info "" [ 63.299656][ T7074] CUSE: unknown device info "" [ 63.299660][ T7074] CUSE: unknown device info "" [ 63.299664][ T7074] CUSE: unknown device info "" [ 63.299668][ T7074] CUSE: unknown device info "" [ 63.299672][ T7074] CUSE: unknown device info "@" [ 63.299676][ T7074] CUSE: unknown device info "" [ 63.299680][ T7074] CUSE: unknown device info "" [ 63.299684][ T7074] CUSE: unknown device info "#" [ 63.299688][ T7074] CUSE: unknown device info "" [ 63.299692][ T7074] CUSE: unknown device info "" [ 63.299696][ T7074] CUSE: unknown device info "" [ 63.299700][ T7074] CUSE: DEVNAME unspecified [ 63.337115][ T7077] loop1: detected capacity change from 0 to 512 [ 63.346269][ T7077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.346283][ T7077] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (8) [ 63.417906][ T7087] loop5: detected capacity change from 0 to 256 [ 63.418264][ T7087] vfat: Unknown parameter ' ' [ 63.465876][ T7089] loop1: detected capacity change from 0 to 256 [ 63.531594][ T50] Bluetooth: hci5: command tx timeout [ 63.576497][ T7100] loop9: detected capacity change from 0 to 1024 [ 63.595992][ T7102] tmpfs: Bad value for 'mpol' [ 63.611107][ T7106] input: syz1 as /devices/virtual/input/input3 [ 63.614284][ T7100] EXT4-fs mount: 13 callbacks suppressed [ 63.614296][ T7100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.896516][ T7141] veth1_to_team: entered promiscuous mode [ 63.897339][ T7141] veth1_to_team: left promiscuous mode [ 63.920422][ T7140] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 63.963511][ T7157] __nla_validate_parse: 10 callbacks suppressed [ 63.963524][ T7157] netlink: 68 bytes leftover after parsing attributes in process `syz.8.375'. [ 63.997680][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.375'. [ 63.997730][ T7157] FAULT_INJECTION: forcing a failure. [ 63.997730][ T7157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 63.997744][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.8.375 Not tainted syzkaller #0 PREEMPT [ 63.997754][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.997759][ T7157] Call trace: [ 63.997762][ T7157] show_stack+0x2c/0x3c (C) [ 63.997783][ T7157] __dump_stack+0x30/0x40 [ 63.997797][ T7157] dump_stack_lvl+0xd8/0x12c [ 63.997808][ T7157] dump_stack+0x1c/0x28 [ 63.997819][ T7157] should_fail_ex+0x418/0x58c [ 63.997832][ T7157] should_fail+0x14/0x24 [ 63.997842][ T7157] get_futex_key+0x1ec/0x12b0 [ 63.997853][ T7157] futex_wake+0x10c/0x594 [ 63.997863][ T7157] do_futex+0x2c4/0x378 [ 63.997873][ T7157] __arm64_sys_futex+0x2e4/0x418 [ 63.997883][ T7157] invoke_syscall+0x98/0x244 [ 63.997895][ T7157] el0_svc_common+0xec/0x23c [ 63.997907][ T7157] do_el0_svc+0x4c/0x5c [ 63.997918][ T7157] el0_svc+0x60/0x1d8 [ 63.997929][ T7157] el0t_64_sync_handler+0x44/0x104 [ 63.997939][ T7157] el0t_64_sync+0x198/0x19c [ 64.233668][ T7187] 8021q: VLANs not supported on gre0 [ 64.278913][ T7191] loop8: detected capacity change from 0 to 128 [ 64.337435][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.379'. [ 64.338584][ T7193] loop5: detected capacity change from 0 to 128 [ 64.354438][ T7193] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.357450][ T7193] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.368174][ T5048] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.374830][ T7195] binder: 7190:7195 ioctl 4018620d 0 returned -22 [ 64.413036][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.480463][ T7204] loop9: detected capacity change from 0 to 2048 [ 64.482310][ T7204] ext4: Unknown parameter '' [ 64.502762][ T26] cfg80211: failed to load regulatory.db [ 64.503630][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503663][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.578840][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.9.384'. [ 64.638881][ T7215] loop4: detected capacity change from 0 to 512 [ 64.647354][ T7215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 64.647425][ T7215] System zones: 1-12 [ 64.648070][ T7215] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.387: missing EA_INODE flag [ 64.648089][ T7215] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.648376][ T7215] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.387: error while reading EA inode 12 err=-117 [ 64.648405][ T7215] loop4: lost filesystem error report for type 5 error -117 [ 64.649818][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 64.649841][ C0] EXT4-fs (loop4): initial error at time 2000000283: ext4_xattr_inode_iget:437: inode 12 [ 64.649870][ C0] EXT4-fs (loop4): last error at time 2000000283: ext4_xattr_inode_iget:442 [ 64.651977][ T7215] EXT4-fs (loop4): 1 orphan inode deleted [ 64.654597][ T7215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.734643][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.767907][ T7223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.769900][ T4822] psmouse serio1: Failed to reset mouse on : -5 [ 64.842560][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 64.844905][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 64.845482][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 64.845672][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 64.845878][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 64.910268][ T5048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.945998][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.390'. [ 64.967305][ T7231] nbd: nbd64 already in use [ 65.048876][ T4986] udevd[4986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 65.287159][ T7253] syzkaller0: entered promiscuous mode [ 65.287178][ T7253] syzkaller0: entered allmulticast mode [ 65.293885][ T7253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.294706][ T7253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.304864][ T7253] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 65.306052][ T7253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 65.306090][ T7253] System zones: 1-12 [ 65.306183][ T7253] EXT4-fs (loop8): orphan cleanup on readonly fs [ 65.590003][ T7253] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.395: attempt to clear invalid blocks 1024 len 1 [ 65.590351][ T7253] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.595118][ T7253] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.395: bg 0: block 361: padding at end of block bitmap is not set [ 65.595302][ T7253] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 65.595483][ T7253] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.395: invalid indirect mapped block 1811939328 (level 0) [ 65.595497][ T7253] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.595625][ T7253] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.395: invalid indirect mapped block 2 (level 2) [ 65.595640][ T7253] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.596313][ T7253] EXT4-fs (loop8): 1 truncate cleaned up [ 65.596787][ T7253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 65.722570][ T7271] FAULT_INJECTION: forcing a failure. [ 65.722570][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 65.722603][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT [ 65.722619][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.722627][ T7271] Call trace: [ 65.722631][ T7271] show_stack+0x2c/0x3c (C) [ 65.722655][ T7271] __dump_stack+0x30/0x40 [ 65.722669][ T7271] dump_stack_lvl+0xd8/0x12c [ 65.722680][ T7271] dump_stack+0x1c/0x28 [ 65.722692][ T7271] should_fail_ex+0x418/0x58c [ 65.722706][ T7271] should_failslab+0xc4/0x120 [ 65.722720][ T7271] kmem_cache_alloc_noprof+0x94/0x5d4 [ 65.722735][ T7271] skb_clone+0x1ac/0x320 [ 65.722747][ T7271] packet_rcv+0x534/0x1318 [ 65.722756][ T7271] deliver_skb+0x150/0x21c [ 65.722764][ T7271] dev_queue_xmit_nit+0x51c/0x920 [ 65.722772][ T7271] dev_hard_start_xmit+0xac/0x794 [ 65.722780][ T7271] __dev_queue_xmit+0xed4/0x2a9c [ 65.722789][ T7271] __netlink_deliver_tap+0x484/0x6f4 [ 65.722800][ T7271] netlink_deliver_tap+0x1d8/0x1dc [ 65.722809][ T7271] __netlink_sendskb+0x78/0xd0 [ 65.722819][ T7271] netlink_sendskb+0x2c/0xdc [ 65.722827][ T7271] netlink_unicast+0x2c0/0x7f8 [ 65.722837][ T7271] netlink_ack+0x570/0x890 [ 65.722846][ T7271] netlink_rcv_skb+0x21c/0x414 [ 65.722855][ T7271] rtnetlink_rcv+0x28/0x38 [ 65.722864][ T7271] netlink_unicast+0x600/0x7f8 [ 65.722873][ T7271] netlink_sendmsg+0x648/0x948 [ 65.722882][ T7271] __sock_sendmsg+0xc8/0x17c [ 65.722892][ T7271] ____sys_sendmsg+0x3d0/0x6c8 [ 65.722902][ T7271] ___sys_sendmsg+0x198/0x224 [ 65.722912][ T7271] __sys_sendmsg+0x158/0x204 [ 65.722922][ T7271] __arm64_sys_sendmsg+0x88/0x9c [ 65.722932][ T7271] invoke_syscall+0x98/0x244 [ 65.722944][ T7271] el0_svc_common+0xec/0x23c [ 65.722956][ T7271] do_el0_svc+0x4c/0x5c [ 65.722967][ T7271] el0_svc+0x60/0x1d8 [ 65.722978][ T7271] el0t_64_sync_handler+0x44/0x104 [ 65.722988][ T7271] el0t_64_sync+0x198/0x19c [ 65.777235][ T6357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 66.139004][ T7310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.582963][ T7347] ip_tables: iptables: counters copy to user failed while replacing table [ 66.583721][ T7348] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 66.587556][ T7347] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.688567][ T7351] Smack: duplicate mount options [ 66.916261][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.954813][ T7355] ext4: Unknown parameter 'defcontext' [ 66.996453][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.035082][ T7362] vfat: Unknown parameter 'uni_xla' [ 67.970868][ T7381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.994108][ T7383] FAULT_INJECTION: forcing a failure. [ 67.994108][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 67.994132][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.1.426 Not tainted syzkaller #0 PREEMPT [ 67.994143][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.994149][ T7383] Call trace: [ 67.994152][ T7383] show_stack+0x2c/0x3c (C) [ 67.994174][ T7383] __dump_stack+0x30/0x40 [ 67.994186][ T7383] dump_stack_lvl+0xd8/0x12c [ 67.994198][ T7383] dump_stack+0x1c/0x28 [ 67.994209][ T7383] should_fail_ex+0x418/0x58c [ 67.994222][ T7383] should_failslab+0xc4/0x120 [ 67.994235][ T7383] kmem_cache_alloc_node_noprof+0x98/0x604 [ 67.994248][ T7383] __alloc_skb+0x1f0/0x610 [ 67.994259][ T7383] netlink_alloc_large_skb+0xd4/0x114 [ 67.994269][ T7383] netlink_sendmsg+0x4c4/0x948 [ 67.994279][ T7383] __sock_sendmsg+0xc8/0x17c [ 67.994288][ T7383] ____sys_sendmsg+0x3d0/0x6c8 [ 67.994298][ T7383] ___sys_sendmsg+0x198/0x224 [ 67.994308][ T7383] __sys_sendmsg+0x158/0x204 [ 67.994317][ T7383] __arm64_sys_sendmsg+0x88/0x9c [ 67.994327][ T7383] invoke_syscall+0x98/0x244 [ 67.994339][ T7383] el0_svc_common+0xec/0x23c [ 67.994351][ T7383] do_el0_svc+0x4c/0x5c [ 67.994362][ T7383] el0_svc+0x60/0x1d8 [ 67.994373][ T7383] el0t_64_sync_handler+0x44/0x104 [ 67.994384][ T7383] el0t_64_sync+0x198/0x19c [ 68.059587][ T7389] syzkaller0: create flow: hash 2732843073 index 1 [ 68.072675][ T40] syzkaller0: tun_net_xmit 76 [ 68.072777][ T40] syzkaller0: tun_net_xmit 48 [ 68.099186][ T6357] bond0: (slave syz_tun): Releasing backup interface [ 68.104845][ T7387] syzkaller0: delete flow: hash 2732843073 index 1 [ 68.213800][ T7397] xt_hashlimit: max too large, truncated to 1048576 [ 68.213854][ T7397] xt_hashlimit: overflow, rate too high: 0 [ 68.219463][ T7403] xt_hashlimit: max too large, truncated to 1048576 [ 68.219486][ T7403] xt_hashlimit: overflow, rate too high: 0 [ 68.285977][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.291672][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.296038][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.297712][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.298050][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.571426][ T7413] set_capacity_and_notify: 11 callbacks suppressed [ 68.571456][ T7413] loop5: detected capacity change from 0 to 8 [ 68.854010][ T5425] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.948859][ T7436] loop4: detected capacity change from 0 to 512 [ 68.949606][ T7436] EXT4-fs: Ignoring removed i_version option [ 68.959342][ T7436] EXT4-fs: test_dummy_encryption requires encrypt feature [ 68.962196][ T5425] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.001046][ T7407] lo speed is unknown, defaulting to 1000 [ 69.009855][ T4822] misc userio: Buffer overflowed, userio client isn't keeping up [ 69.116642][ T5425] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.216390][ T5425] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.333962][ T7457] loop4: detected capacity change from 0 to 256 [ 69.334735][ T7457] vfat: Unknown parameter 'uniOxlate' [ 69.362966][ T7457] loop4: detected capacity change from 0 to 1024 [ 69.376918][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.377045][ T7457] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.378067][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.378104][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.378196][ T7407] bridge_slave_0: entered allmulticast mode [ 69.378665][ T7407] bridge_slave_0: entered promiscuous mode [ 69.381283][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.381333][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.381432][ T7407] bridge_slave_1: entered allmulticast mode [ 69.399180][ T7457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.440: bg 0: block 112: padding at end of block bitmap is not set [ 69.404389][ T7407] bridge_slave_1: entered promiscuous mode [ 69.503919][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.529595][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.533976][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.562699][ T5425] bridge_slave_1: left allmulticast mode [ 69.562720][ T5425] bridge_slave_1: left promiscuous mode [ 69.562798][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.563817][ T5425] bridge_slave_0: left allmulticast mode [ 69.563827][ T5425] bridge_slave_0: left promiscuous mode [ 69.563886][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.714666][ T7474] loop5: detected capacity change from 0 to 256 [ 69.728750][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.787126][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.811210][ T5425] bond0 (unregistering): Released all slaves [ 69.814607][ T5425] bond1 (unregistering): Released all slaves [ 69.834178][ T7407] team0: Port device team_slave_0 added [ 69.835822][ T7407] team0: Port device team_slave_1 added [ 69.851996][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.852011][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.852041][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.854398][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.854419][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.854434][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.885262][ T4397] 8021q: adding VLAN 0 to HW filter on device eth21 [ 69.902344][ T7407] hsr_slave_0: entered promiscuous mode [ 69.902636][ T7407] hsr_slave_1: entered promiscuous mode [ 70.127820][ T4822] input: PS/2 Generic Mouse as /devices/serio1/input/input4 [ 70.211417][ T7503] loop5: detected capacity change from 0 to 4096 [ 70.238083][ T7503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.245153][ T7498] bridge2: entered promiscuous mode [ 70.331917][ T4711] Bluetooth: hci2: command tx timeout [ 70.350147][ T4822] psmouse serio1: Failed to enable mouse on [ 70.367282][ T7510] FAULT_INJECTION: forcing a failure. [ 70.367282][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 70.367300][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.4.449 Not tainted syzkaller #0 PREEMPT [ 70.367310][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.367316][ T7510] Call trace: [ 70.367319][ T7510] show_stack+0x2c/0x3c (C) [ 70.367340][ T7510] __dump_stack+0x30/0x40 [ 70.367352][ T7510] dump_stack_lvl+0xd8/0x12c [ 70.367363][ T7510] dump_stack+0x1c/0x28 [ 70.367374][ T7510] should_fail_ex+0x418/0x58c [ 70.367387][ T7510] should_failslab+0xc4/0x120 [ 70.367399][ T7510] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 70.367413][ T7510] __d_alloc+0x50/0x600 [ 70.367421][ T7510] d_alloc+0x54/0x17c [ 70.367429][ T7510] lookup_one_qstr_excl+0x9c/0x200 [ 70.367440][ T7510] __start_dirop+0xb8/0xf4 [ 70.367448][ T7510] start_dirop+0x38/0x4c [ 70.367456][ T7510] simple_start_creating+0xcc/0x114 [ 70.367468][ T7510] debugfs_start_creating+0xd8/0x1bc [ 70.367480][ T7510] __debugfs_create_file+0x7c/0x36c [ 70.367492][ T7510] debugfs_create_file_full+0x58/0x70 [ 70.367504][ T7510] ref_tracker_dir_debugfs+0x174/0x2f0 [ 70.367514][ T7510] preinit_net+0x174/0x63c [ 70.367525][ T7510] copy_net_ns+0x23c/0x698 [ 70.367534][ T7510] create_new_namespaces+0x304/0x50c [ 70.367544][ T7510] unshare_nsproxy_namespaces+0x120/0x170 [ 70.367555][ T7510] ksys_unshare+0x438/0x6cc [ 70.367564][ T7510] __arm64_sys_unshare+0x40/0x54 [ 70.367573][ T7510] invoke_syscall+0x98/0x244 [ 70.367585][ T7510] el0_svc_common+0xec/0x23c [ 70.367605][ T7510] do_el0_svc+0x4c/0x5c [ 70.367616][ T7510] el0_svc+0x60/0x1d8 [ 70.367627][ T7510] el0t_64_sync_handler+0x44/0x104 [ 70.367637][ T7510] el0t_64_sync+0x198/0x19c [ 70.396675][ T7510] lo speed is unknown, defaulting to 1000 [ 70.479297][ T5425] hsr_slave_0: left promiscuous mode [ 70.481433][ T5425] hsr_slave_1: left promiscuous mode [ 70.482114][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.482138][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.482836][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.482847][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.486965][ T5425] veth1_macvtap: left promiscuous mode [ 70.487032][ T5425] veth0_macvtap: left promiscuous mode [ 70.487103][ T5425] veth1_vlan: left promiscuous mode [ 70.487167][ T5425] veth0_vlan: left promiscuous mode [ 70.607547][ T5425] team0 (unregistering): Port device team_slave_1 removed [ 70.617294][ T5425] team0 (unregistering): Port device team_slave_0 removed [ 70.697865][ T7523] __nla_validate_parse: 73 callbacks suppressed [ 70.697878][ T7523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.450'. [ 70.726304][ T4397] 8021q: adding VLAN 0 to HW filter on device eth20 [ 70.734544][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 70.734563][ T7523] FAULT_INJECTION: forcing a failure. [ 70.734563][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 70.734578][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.1.450 Not tainted syzkaller #0 PREEMPT [ 70.734596][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.734602][ T7523] Call trace: [ 70.734605][ T7523] show_stack+0x2c/0x3c (C) [ 70.734627][ T7523] __dump_stack+0x30/0x40 [ 70.734639][ T7523] dump_stack_lvl+0xd8/0x12c [ 70.734651][ T7523] dump_stack+0x1c/0x28 [ 70.734662][ T7523] should_fail_ex+0x418/0x58c [ 70.734674][ T7523] should_failslab+0xc4/0x120 [ 70.734686][ T7523] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.734699][ T7523] skb_clone+0x1ac/0x320 [ 70.734710][ T7523] __netlink_deliver_tap+0x364/0x6f4 [ 70.734721][ T7523] netlink_deliver_tap+0x1d8/0x1dc [ 70.734731][ T7523] __netlink_sendskb+0x78/0xd0 [ 70.734740][ T7523] netlink_sendskb+0x2c/0xdc [ 70.734748][ T7523] netlink_unicast+0x2c0/0x7f8 [ 70.734757][ T7523] netlink_ack+0x570/0x890 [ 70.734766][ T7523] netlink_rcv_skb+0x21c/0x414 [ 70.734775][ T7523] rtnetlink_rcv+0x28/0x38 [ 70.734784][ T7523] netlink_unicast+0x600/0x7f8 [ 70.734792][ T7523] netlink_sendmsg+0x648/0x948 [ 70.734802][ T7523] __sock_sendmsg+0xc8/0x17c [ 70.734811][ T7523] ____sys_sendmsg+0x3d0/0x6c8 [ 70.734820][ T7523] ___sys_sendmsg+0x198/0x224 [ 70.734830][ T7523] __sys_sendmsg+0x158/0x204 [ 70.734839][ T7523] __arm64_sys_sendmsg+0x88/0x9c [ 70.734849][ T7523] invoke_syscall+0x98/0x244 [ 70.734861][ T7523] el0_svc_common+0xec/0x23c [ 70.734872][ T7523] do_el0_svc+0x4c/0x5c [ 70.734883][ T7523] el0_svc+0x60/0x1d8 [ 70.734894][ T7523] el0t_64_sync_handler+0x44/0x104 [ 70.734904][ T7523] el0t_64_sync+0x198/0x19c [ 71.373691][ T4822] atkbd serio2: keyboard reset failed on [ 71.473199][ T7407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.475912][ T7407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.476425][ T7407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.478272][ T7407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.478880][ T7407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.488665][ T7407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.490410][ T7407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.495693][ T7407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.535547][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.545109][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.548287][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.548325][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.558650][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.558685][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.571867][ T7407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.571883][ T7407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.737398][ T7598] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 71.795440][ T4397] 8021q: adding VLAN 0 to HW filter on device eth22 [ 71.876965][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.918592][ T7407] veth0_vlan: entered promiscuous mode [ 71.925849][ T4397] 8021q: adding VLAN 0 to HW filter on device eth23 [ 71.927941][ T7407] veth1_vlan: entered promiscuous mode [ 71.957481][ T7407] veth0_macvtap: entered promiscuous mode [ 71.961365][ T7407] veth1_macvtap: entered promiscuous mode [ 71.968841][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.975375][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.010761][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.010984][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.011018][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.011049][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.029098][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.029114][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.043189][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.043201][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.118106][ T7635] loop0: detected capacity change from 0 to 8192 [ 72.123509][ T7635] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.146056][ T7635] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 72.146084][ T7635] FAT-fs (loop0): Filesystem has been set read-only [ 72.146584][ T7635] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 72.147200][ T7635] FAT-fs (loop0): error, clusters badly computed (3 != 2) [ 72.158987][ T7635] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 72.162290][ T7635] FAT-fs (loop0): error, clusters badly computed (5 != 4) [ 72.164093][ T7635] FAT-fs (loop0): error, clusters badly computed (6 != 5) [ 72.165619][ T7635] FAT-fs (loop0): error, clusters badly computed (7 != 6) [ 72.167028][ T7635] FAT-fs (loop0): error, clusters badly computed (8 != 7) [ 72.169615][ T7635] FAT-fs (loop0): error, clusters badly computed (9 != 8) [ 72.178501][ T7635] FAT-fs (loop0): error, clusters badly computed (10 != 9) [ 72.292822][ T5048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.406064][ T7660] Cannot find add_set index 0 as target [ 72.409821][ T4711] Bluetooth: hci2: command tx timeout [ 72.434898][ T7667] loop0: detected capacity change from 0 to 1024 [ 72.525685][ T7667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.996916][ T7695] loop4: detected capacity change from 0 to 512 [ 73.007396][ T7695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.071393][ T7706] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.464: Unimplemented hash flags: 0x0001 [ 73.071426][ T7706] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.464: Corrupt directory, running e2fsck is recommended [ 73.113500][ T7706] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.464: Unimplemented hash flags: 0x0001 [ 73.113528][ T7706] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.464: Corrupt directory, running e2fsck is recommended [ 73.127737][ T7709] netlink: 'syz.1.467': attribute type 3 has an invalid length. [ 73.159197][ T7713] ip_tables: iptables: counters copy to user failed while replacing table [ 73.167502][ T7695] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 73.182830][ T7407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.237153][ T7718] loop1: detected capacity change from 0 to 1024 [ 73.238411][ T7718] EXT4-fs: Ignoring removed oldalloc option [ 73.238423][ T7718] EXT4-fs: Ignoring removed orlov option [ 73.244117][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.287109][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.287207][ T7718] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.330649][ T7718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.469: bg 0: block 112: padding at end of block bitmap is not set [ 73.368240][ T7718] dvmrp0: entered allmulticast mode [ 73.464190][ T7733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.294198][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.294398][ T7407] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /3/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.295262][ T7407] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.297245][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.297425][ T7407] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /3/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.298026][ T7407] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.329184][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.329635][ T7407] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /3/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.339312][ T7407] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.339503][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.339643][ T7407] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /3/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.351909][ T7407] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.352059][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.352174][ T7407] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /3/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.353401][ T7407] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 74.353577][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.355468][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.364626][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.386765][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.393393][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.394997][ T7407] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 74.412175][ T7774] FAULT_INJECTION: forcing a failure. [ 74.412175][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.412208][ T7774] CPU: 0 UID: 0 PID: 7774 Comm: syz.9.478 Not tainted syzkaller #0 PREEMPT [ 74.412221][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.412227][ T7774] Call trace: [ 74.412229][ T7774] show_stack+0x2c/0x3c (C) [ 74.412251][ T7774] __dump_stack+0x30/0x40 [ 74.412263][ T7774] dump_stack_lvl+0xd8/0x12c [ 74.412274][ T7774] dump_stack+0x1c/0x28 [ 74.412285][ T7774] should_fail_ex+0x418/0x58c [ 74.412297][ T7774] should_fail+0x14/0x24 [ 74.412308][ T7774] should_fail_usercopy+0x20/0x30 [ 74.412320][ T7774] copy_from_sockptr+0x7c/0x1e0 [ 74.412332][ T7774] alg_setkey+0x7c/0x124 [ 74.412343][ T7774] alg_setsockopt+0x314/0x3b8 [ 74.412353][ T7774] do_sock_setsockopt+0x1f0/0x330 [ 74.412365][ T7774] __sys_setsockopt+0x104/0x170 [ 74.412374][ T7774] __arm64_sys_setsockopt+0xc8/0xe4 [ 74.412384][ T7774] invoke_syscall+0x98/0x244 [ 74.412396][ T7774] el0_svc_common+0xec/0x23c [ 74.412407][ T7774] do_el0_svc+0x4c/0x5c [ 74.412418][ T7774] el0_svc+0x60/0x1d8 [ 74.412429][ T7774] el0t_64_sync_handler+0x44/0x104 [ 74.412440][ T7774] el0t_64_sync+0x198/0x19c [ 74.415436][ T7784] set_capacity_and_notify: 1 callbacks suppressed [ 74.415446][ T7784] loop5: detected capacity change from 0 to 4096 [ 74.468344][ T7784] EXT4-fs (loop5): can't read group descriptor 0 [ 74.491065][ T4711] Bluetooth: hci2: command tx timeout [ 74.821174][ T7825] Console: switching to colour dummy device 80x25 [ 74.830977][ T7825] Console: switching to colour frame buffer device 128x48 [ 74.834691][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 74.834722][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 74.836792][ T7833] loop1: detected capacity change from 0 to 128 [ 74.854232][ T7825] loop9: detected capacity change from 0 to 512 [ 74.855566][ T7825] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.856578][ T7825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 74.856676][ T7825] EXT4-fs (loop9): orphan cleanup on readonly fs [ 74.856685][ T7825] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.483: bad orphan inode 267 [ 74.856697][ T7825] fserror_report: 2 callbacks suppressed [ 74.856703][ T7825] loop9: lost filesystem error report for type 5 error -117 [ 74.856869][ T7825] EXT4-fs (loop9): Remounting filesystem read-only [ 74.887103][ T7841] loop4: detected capacity change from 0 to 512 [ 74.888863][ T7837] loop5: detected capacity change from 0 to 1024 [ 74.890835][ T7841] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.890931][ T7841] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.893972][ T7841] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.485: bad orphan inode 131083 [ 74.894003][ T7841] loop4: lost filesystem error report for type 5 error -117 [ 74.894620][ T7825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 74.895575][ T7825] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.901941][ T7841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.902364][ T7833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.918176][ T7833] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.932756][ T7837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.002568][ T7841] FAULT_INJECTION: forcing a failure. [ 75.002568][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.002602][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.4.485 Not tainted syzkaller #0 PREEMPT [ 75.002618][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.002624][ T7841] Call trace: [ 75.002627][ T7841] show_stack+0x2c/0x3c (C) [ 75.002651][ T7841] __dump_stack+0x30/0x40 [ 75.002664][ T7841] dump_stack_lvl+0xd8/0x12c [ 75.002675][ T7841] dump_stack+0x1c/0x28 [ 75.002687][ T7841] should_fail_ex+0x418/0x58c [ 75.002700][ T7841] should_fail+0x14/0x24 [ 75.002711][ T7841] should_fail_usercopy+0x20/0x30 [ 75.002723][ T7841] _inline_copy_from_user+0x3c/0x3a4 [ 75.002734][ T7841] copy_from_sockptr+0x60/0x8c [ 75.002745][ T7841] sk_setsockopt+0x1058/0x2658 [ 75.002757][ T7841] sock_setsockopt+0x68/0x80 [ 75.002769][ T7841] unix_setsockopt+0x19c/0x3f8 [ 75.002783][ T7841] do_sock_setsockopt+0x1f0/0x330 [ 75.002793][ T7841] __sys_setsockopt+0x104/0x170 [ 75.002803][ T7841] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.002814][ T7841] invoke_syscall+0x98/0x244 [ 75.002826][ T7841] el0_svc_common+0xec/0x23c [ 75.002838][ T7841] do_el0_svc+0x4c/0x5c [ 75.002849][ T7841] el0_svc+0x60/0x1d8 [ 75.002860][ T7841] el0t_64_sync_handler+0x44/0x104 [ 75.002871][ T7841] el0t_64_sync+0x198/0x19c [ 75.025888][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.087326][ T7853] loop1: detected capacity change from 0 to 1024 [ 75.088330][ T7853] EXT4-fs: Ignoring removed orlov option [ 75.102810][ T7853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.108769][ T5048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.112217][ T4717] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /108/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 75.183981][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.203235][ T4717] bridge0: port 3(syz_tun) entered disabled state [ 75.238171][ T4717] syz_tun (unregistering): left allmulticast mode [ 75.238202][ T4717] syz_tun (unregistering): left promiscuous mode [ 75.238234][ T4717] bridge0: port 3(syz_tun) entered disabled state [ 75.325115][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.385697][ T7883] tipc: Can't bind to reserved service type 1 [ 75.447165][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.448217][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.448658][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.449017][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.449223][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.571025][ T7910] netlink: 68 bytes leftover after parsing attributes in process `syz.9.499'. [ 75.601031][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.9.499'. [ 75.601191][ T7910] FAULT_INJECTION: forcing a failure. [ 75.601191][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.601205][ T7910] CPU: 1 UID: 0 PID: 7910 Comm: syz.9.499 Not tainted syzkaller #0 PREEMPT [ 75.601215][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.601221][ T7910] Call trace: [ 75.601224][ T7910] show_stack+0x2c/0x3c (C) [ 75.601246][ T7910] __dump_stack+0x30/0x40 [ 75.601258][ T7910] dump_stack_lvl+0xd8/0x12c [ 75.601269][ T7910] dump_stack+0x1c/0x28 [ 75.601281][ T7910] should_fail_ex+0x418/0x58c [ 75.601293][ T7910] should_fail+0x14/0x24 [ 75.601304][ T7910] should_fail_usercopy+0x20/0x30 [ 75.601317][ T7910] _inline_copy_from_user+0x3c/0x174 [ 75.601329][ T7910] move_addr_to_kernel+0x88/0x168 [ 75.601338][ T7910] __sys_bind+0x12c/0x268 [ 75.601346][ T7910] __arm64_sys_bind+0x84/0x9c [ 75.601356][ T7910] invoke_syscall+0x98/0x244 [ 75.601368][ T7910] el0_svc_common+0xec/0x23c [ 75.601379][ T7910] do_el0_svc+0x4c/0x5c [ 75.601391][ T7910] el0_svc+0x60/0x1d8 [ 75.601402][ T7910] el0t_64_sync_handler+0x44/0x104 [ 75.601412][ T7910] el0t_64_sync+0x198/0x19c [ 75.602596][ T7912] loop5: detected capacity change from 0 to 512 [ 75.619279][ T7912] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.500: inode has both inline data and extents flags [ 75.619318][ T7912] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.619570][ T7912] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.500: couldn't read orphan inode 15 (err -117) [ 75.619609][ T7912] loop5: lost filesystem error report for type 5 error -117 [ 75.619779][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 75.619802][ C0] EXT4-fs (loop5): initial error at time 2000000295: ext4_orphan_get:1403: inode 15 [ 75.619836][ C0] EXT4-fs (loop5): last error at time 2000000295: ext4_orphan_get:1408 [ 75.627018][ T7912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.713452][ T7896] lo speed is unknown, defaulting to 1000 [ 75.814994][ T7935] loop9: detected capacity change from 0 to 1024 [ 75.842066][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.843182][ T7935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.846115][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.846187][ T7896] bridge_slave_0: entered allmulticast mode [ 75.846617][ T7896] bridge_slave_0: entered promiscuous mode [ 75.855872][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.855928][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.855982][ T7896] bridge_slave_1: entered allmulticast mode [ 75.856418][ T7896] bridge_slave_1: entered promiscuous mode [ 75.872877][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.873771][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.887813][ T7896] team0: Port device team_slave_0 added [ 75.888645][ T7896] team0: Port device team_slave_1 added [ 75.954059][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.954072][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.954089][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.954796][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.954803][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.954818][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.984426][ T7896] hsr_slave_0: entered promiscuous mode [ 75.984735][ T7896] hsr_slave_1: entered promiscuous mode [ 75.984924][ T7896] debugfs: 'hsr0' already exists in 'hsr' [ 75.984934][ T7896] Cannot create hsr debugfs directory [ 76.138763][ T6779] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.212526][ T7959] Injecting memory failure for pfn 0x14416d at process virtual address 0x20000000 [ 76.222220][ T7959] Memory failure: 0x14416d: Sending SIGBUS to syz.1.502:7959 due to hardware memory corruption [ 76.222295][ T7959] Memory failure: 0x14416d: recovery action for dirty LRU page: Recovered [ 76.222336][ T7959] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20001000 [ 76.222385][ T7959] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.502:7959 due to hardware memory corruption [ 76.222401][ T7959] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 76.258661][ T6779] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.368603][ T6779] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.448275][ T5048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.507770][ T6779] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.678070][ T7407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.839137][ T6779] bridge_slave_1: left allmulticast mode [ 76.839168][ T6779] bridge_slave_1: left promiscuous mode [ 76.839290][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.845820][ T6779] bridge_slave_0: left allmulticast mode [ 76.845845][ T6779] bridge_slave_0: left promiscuous mode [ 76.845941][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.855257][ T6779] dvmrp0: left allmulticast mode [ 76.903081][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.904001][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.904333][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.904650][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.904844][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.933907][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.986888][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.987769][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.988092][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.988413][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.988624][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.129225][ T6779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.141127][ T6779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.290960][ T8014] loop9: detected capacity change from 0 to 512 [ 77.320380][ T6779] bond0 (unregistering): Released all slaves [ 77.410228][ T7996] netlink: 344 bytes leftover after parsing attributes in process `syz.9.507'. [ 77.418957][ T7896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.424335][ T8014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.424422][ T8014] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.451359][ T7896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.451879][ T7896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.455626][ T7896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.455919][ T7896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.469558][ T7896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.470219][ T7896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.479519][ T7896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.531365][ T50] Bluetooth: hci2: command tx timeout [ 77.645705][ T7991] lo speed is unknown, defaulting to 1000 [ 77.653268][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.653419][ T7984] lo speed is unknown, defaulting to 1000 [ 77.710935][ T7896] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.761493][ T6779] hsr_slave_0: left promiscuous mode [ 77.761774][ T6779] hsr_slave_1: left promiscuous mode [ 77.762017][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.762027][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.762314][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.762323][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.766010][ T8051] netlink: 'syz.1.509': attribute type 83 has an invalid length. [ 77.771419][ T6779] veth1_macvtap: left promiscuous mode [ 77.771446][ T6779] veth0_macvtap: left promiscuous mode [ 77.771493][ T6779] veth1_vlan: left promiscuous mode [ 77.771532][ T6779] veth0_vlan: left promiscuous mode [ 77.810580][ T8056] loop1: detected capacity change from 0 to 512 [ 77.811889][ T8056] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.843149][ T8056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.843419][ T8056] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.510: Block bitmap for bg 0 marked uninitialized [ 77.843453][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.849358][ T8056] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 77.849376][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.849568][ T8056] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.510: Block bitmap for bg 0 marked uninitialized [ 77.849585][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.849747][ T8056] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 77.849759][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.849796][ C0] EXT4-fs (loop1): error count since last fsck: 4 [ 77.849807][ C0] EXT4-fs (loop1): initial error at time 2000000297: ext4_read_block_bitmap_nowait:521 [ 77.849828][ C0] EXT4-fs (loop1): last error at time 2000000297: ext4_mb_clear_bb:6680 [ 77.850776][ T8056] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.510: Block bitmap for bg 0 marked uninitialized [ 77.850792][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.851195][ T8056] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 77.851207][ T8056] loop1: lost filesystem error report for type 5 error -117 [ 77.851387][ T8056] EXT4-fs (loop1): 1 orphan inode deleted [ 77.851859][ T8056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.893277][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.963785][ T6779] team0 (unregistering): Port device team_slave_1 removed [ 77.966525][ T8061] netlink: 'syz.9.511': attribute type 16 has an invalid length. [ 77.966555][ T8061] netlink: 'syz.9.511': attribute type 17 has an invalid length. [ 77.975405][ T6779] team0 (unregistering): Port device team_slave_0 removed [ 78.082393][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.083200][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.115192][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.115235][ T8061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.116276][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.116299][ T8061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.156809][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.156854][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.157999][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.158030][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.187541][ T7896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.187566][ T7896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.203324][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.269332][ T8070] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.275151][ T8070] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.354941][ T8070] Bluetooth: MGMT ver 1.23 [ 78.372467][ T6397] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.483028][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.483086][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.483168][ T7984] bridge_slave_0: entered allmulticast mode [ 78.498705][ T7984] bridge_slave_0: entered promiscuous mode [ 78.535829][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.535922][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.536086][ T7984] bridge_slave_1: entered allmulticast mode [ 78.538079][ T7984] bridge_slave_1: entered promiscuous mode [ 78.549440][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.549486][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.549622][ T7991] bridge_slave_0: entered allmulticast mode [ 78.556101][ T7991] bridge_slave_0: entered promiscuous mode [ 78.565972][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.566062][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566165][ T7991] bridge_slave_1: entered allmulticast mode [ 78.567169][ T7991] bridge_slave_1: entered promiscuous mode [ 78.817134][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.823177][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.824289][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.835679][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.845677][ T7991] team0: Port device team_slave_0 added [ 78.851861][ T7991] team0: Port device team_slave_1 added [ 78.857619][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.857630][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.857644][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.858198][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.858205][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.858217][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.862708][ T7984] team0: Port device team_slave_0 added [ 78.864277][ T7984] team0: Port device team_slave_1 added [ 78.893244][ T6779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.907976][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.907991][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.908006][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.908751][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.908759][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.908773][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.914162][ T7896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.936803][ T7991] hsr_slave_0: entered promiscuous mode [ 78.937203][ T7991] hsr_slave_1: entered promiscuous mode [ 78.937420][ T7991] debugfs: 'hsr0' already exists in 'hsr' [ 78.937430][ T7991] Cannot create hsr debugfs directory [ 78.964840][ T7984] hsr_slave_0: entered promiscuous mode [ 78.965233][ T7984] hsr_slave_1: entered promiscuous mode [ 78.965440][ T7984] debugfs: 'hsr0' already exists in 'hsr' [ 78.965450][ T7984] Cannot create hsr debugfs directory [ 78.971280][ T50] Bluetooth: hci0: command tx timeout [ 78.986916][ T6779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.035057][ T7896] veth0_vlan: entered promiscuous mode [ 79.037069][ T7896] veth1_vlan: entered promiscuous mode [ 79.053771][ T50] Bluetooth: hci4: command tx timeout [ 79.075575][ T6779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.086643][ T7896] veth0_macvtap: entered promiscuous mode [ 79.095527][ T7896] veth1_macvtap: entered promiscuous mode [ 79.110308][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.112837][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.133809][ T6779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.171476][ T6771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171581][ T6771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171696][ T6771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171711][ T6771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.199613][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.199631][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.218755][ T6778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.218770][ T6778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.322936][ T6779] bridge_slave_1: left allmulticast mode [ 79.322959][ T6779] bridge_slave_1: left promiscuous mode [ 79.323055][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.326893][ T6779] bridge_slave_0: left allmulticast mode [ 79.326906][ T6779] bridge_slave_0: left promiscuous mode [ 79.326974][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.357904][ T8142] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.372672][ T8142] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.372688][ T8142] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 79.386146][ T8142] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.518: attempt to clear invalid blocks 2 len 1 [ 79.386175][ T8142] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.387434][ T8142] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.387505][ T8142] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.518: invalid indirect mapped block 1819239214 (level 0) [ 79.387522][ T8142] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.389755][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 79.389770][ C1] EXT4-fs (loop1): initial error at time 2000000299: ext4_clear_blocks:876: inode 13 [ 79.389786][ C1] EXT4-fs (loop1): last error at time 2000000299: ext4_free_branches:1023: inode 13 [ 79.408306][ T8142] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.518: invalid indirect mapped block 1819239214 (level 1) [ 79.408333][ T8142] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.416376][ T8142] EXT4-fs (loop1): 1 truncate cleaned up [ 79.416852][ T8142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.447026][ T8148] set_capacity_and_notify: 2 callbacks suppressed [ 79.447042][ T8148] loop9: detected capacity change from 0 to 512 [ 79.448273][ T8148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.457937][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.478455][ T8148] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.478503][ T8148] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.519378][ T8152] loop1: detected capacity change from 0 to 512 [ 79.521657][ T8152] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.525867][ T8152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.525880][ T8152] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 79.527221][ T8152] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.520: attempt to clear invalid blocks 2 len 1 [ 79.527243][ T8152] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.527514][ T8152] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.527574][ T8152] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.520: invalid indirect mapped block 1819239214 (level 0) [ 79.527587][ T8152] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.527848][ T8152] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.520: invalid indirect mapped block 1819239214 (level 1) [ 79.527861][ T8152] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.528821][ T8152] EXT4-fs (loop1): 1 truncate cleaned up [ 79.529505][ T8152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.570864][ T8154] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.519: bg 0: block 217: padding at end of block bitmap is not set [ 79.572502][ T8154] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 79.575078][ T6779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.601293][ T6779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.610122][ T50] Bluetooth: hci2: command tx timeout [ 79.630834][ T6779] bond0 (unregistering): Released all slaves [ 79.655430][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.690794][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.702300][ T8164] loop1: detected capacity change from 0 to 1024 [ 79.704168][ T8164] EXT4-fs: Ignoring removed bh option [ 79.735653][ T8164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.808469][ T8164] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.828664][ T8164] Injecting memory failure for pfn 0x120c74 at process virtual address 0x20000000 [ 79.845461][ T8164] Memory failure: 0x120c74: Sending SIGBUS to syz.1.521:8164 due to hardware memory corruption [ 79.845882][ T8164] Memory failure: 0x120c74: recovery action for dirty LRU page: Recovered [ 79.845978][ T8164] Injecting memory failure for pfn 0x145e79 at process virtual address 0x20001000 [ 79.846158][ T8164] Memory failure: 0x145e79: corrupted page was clean: dropped without side effects [ 79.846210][ T8164] Memory failure: 0x145e79: recovery action for clean LRU page: Recovered [ 79.846222][ T8164] Injecting memory failure for pfn 0x140742 at process virtual address 0x20002000 [ 79.846275][ T8164] Memory failure: 0x140742: corrupted page was clean: dropped without side effects [ 79.846310][ T8164] Memory failure: 0x140742: recovery action for clean LRU page: Recovered [ 79.846320][ T8164] Injecting memory failure for pfn 0x145e88 at process virtual address 0x20003000 [ 79.846362][ T8164] Memory failure: 0x145e88: corrupted page was clean: dropped without side effects [ 79.846392][ T8164] Memory failure: 0x145e88: recovery action for clean LRU page: Recovered [ 79.846411][ T8164] Injecting memory failure for pfn 0x144a2d at process virtual address 0x20004000 [ 79.846480][ T8164] Memory failure: 0x144a2d: corrupted page was clean: dropped without side effects [ 79.846516][ T8164] Memory failure: 0x144a2d: recovery action for clean LRU page: Recovered [ 79.846536][ T8164] Injecting memory failure for pfn 0x121553 at process virtual address 0x20005000 [ 79.846572][ T8164] Memory failure: 0x121553: corrupted page was clean: dropped without side effects [ 79.846618][ T8164] Memory failure: 0x121553: recovery action for clean LRU page: Recovered [ 79.846640][ T8164] Injecting memory failure for pfn 0x14228a at process virtual address 0x20006000 [ 79.846673][ T8164] Memory failure: 0x14228a: corrupted page was clean: dropped without side effects [ 79.846706][ T8164] Memory failure: 0x14228a: recovery action for clean LRU page: Recovered [ 79.846716][ T8164] Injecting memory failure for pfn 0x13fa8f at process virtual address 0x20007000 [ 79.846753][ T8164] Memory failure: 0x13fa8f: corrupted page was clean: dropped without side effects [ 79.846797][ T8164] Memory failure: 0x13fa8f: recovery action for clean LRU page: Recovered [ 79.846807][ T8164] Injecting memory failure for pfn 0x144f08 at process virtual address 0x20008000 [ 79.846908][ T8164] Memory failure: 0x144f08: corrupted page was clean: dropped without side effects [ 79.846940][ T8164] Memory failure: 0x144f08: recovery action for clean LRU page: Recovered [ 79.846949][ T8164] Injecting memory failure for pfn 0x121508 at process virtual address 0x20009000 [ 79.847006][ T8164] Memory failure: 0x121508: corrupted page was clean: dropped without side effects [ 79.847044][ T8164] Memory failure: 0x121508: recovery action for clean LRU page: Recovered [ 79.847065][ T8164] Injecting memory failure for pfn 0x13e541 at process virtual address 0x2000a000 [ 79.847098][ T8164] Memory failure: 0x13e541: corrupted page was clean: dropped without side effects [ 79.847132][ T8164] Memory failure: 0x13e541: recovery action for clean LRU page: Recovered [ 79.847142][ T8164] Injecting memory failure for pfn 0x121917 at process virtual address 0x2000b000 [ 79.847319][ T8164] Memory failure: 0x121917: corrupted page was clean: dropped without side effects [ 79.847353][ T8164] Memory failure: 0x121917: recovery action for clean LRU page: Recovered [ 79.847362][ T8164] Injecting memory failure for pfn 0x146c0a at process virtual address 0x2000c000 [ 79.850059][ T8164] Memory failure: 0x146c0a: corrupted page was clean: dropped without side effects [ 79.853628][ T8164] Memory failure: 0x146c0a: recovery action for clean LRU page: Recovered [ 79.853665][ T8164] Injecting memory failure for pfn 0x120aa3 at process virtual address 0x2000d000 [ 79.855000][ T8164] Memory failure: 0x120aa3: corrupted page was clean: dropped without side effects [ 79.855043][ T8164] Memory failure: 0x120aa3: recovery action for clean LRU page: Recovered [ 79.855063][ T8164] Injecting memory failure for pfn 0x13e54c at process virtual address 0x2000e000 [ 79.855104][ T8164] Memory failure: 0x13e54c: corrupted page was clean: dropped without side effects [ 79.855138][ T8164] Memory failure: 0x13e54c: recovery action for clean LRU page: Recovered [ 79.855158][ T8164] Injecting memory failure for pfn 0x13fe69 at process virtual address 0x2000f000 [ 79.855198][ T8164] Memory failure: 0x13fe69: corrupted page was clean: dropped without side effects [ 79.855236][ T8164] Memory failure: 0x13fe69: recovery action for clean LRU page: Recovered [ 79.855318][ T8164] Injecting memory failure for pfn 0x121916 at process virtual address 0x20010000 [ 79.855385][ T8164] Memory failure: 0x121916: corrupted page was clean: dropped without side effects [ 79.855420][ T8164] Memory failure: 0x121916: recovery action for clean LRU page: Recovered [ 79.855431][ T8164] Injecting memory failure for pfn 0x120309 at process virtual address 0x20011000 [ 79.855467][ T8164] Memory failure: 0x120309: corrupted page was clean: dropped without side effects [ 79.855499][ T8164] Memory failure: 0x120309: recovery action for clean LRU page: Recovered [ 79.855518][ T8164] Injecting memory failure for pfn 0x1420d0 at process virtual address 0x20012000 [ 79.855554][ T8164] Memory failure: 0x1420d0: corrupted page was clean: dropped without side effects [ 79.855594][ T8164] Memory failure: 0x1420d0: recovery action for clean LRU page: Recovered [ 79.855615][ T8164] Injecting memory failure for pfn 0x144a9a at process virtual address 0x20013000 [ 79.855653][ T8164] Memory failure: 0x144a9a: corrupted page was clean: dropped without side effects [ 79.855685][ T8164] Memory failure: 0x144a9a: recovery action for clean LRU page: Recovered [ 79.855694][ T8164] Injecting memory failure for pfn 0x13f93f at process virtual address 0x20014000 [ 79.855742][ T8164] Memory failure: 0x13f93f: corrupted page was clean: dropped without side effects [ 79.855776][ T8164] Memory failure: 0x13f93f: recovery action for clean LRU page: Recovered [ 79.855786][ T8164] Injecting memory failure for pfn 0x11e664 at process virtual address 0x20015000 [ 79.855827][ T8164] Memory failure: 0x11e664: corrupted page was clean: dropped without side effects [ 79.855860][ T8164] Memory failure: 0x11e664: recovery action for clean LRU page: Recovered [ 79.855879][ T8164] Injecting memory failure for pfn 0x1420af at process virtual address 0x20016000 [ 79.855920][ T8164] Memory failure: 0x1420af: corrupted page was clean: dropped without side effects [ 79.855952][ T8164] Memory failure: 0x1420af: recovery action for clean LRU page: Recovered [ 79.855972][ T8164] Injecting memory failure for pfn 0x144a78 at process virtual address 0x20017000 [ 79.856010][ T8164] Memory failure: 0x144a78: corrupted page was clean: dropped without side effects [ 79.856041][ T8164] Memory failure: 0x144a78: recovery action for clean LRU page: Recovered [ 79.856050][ T8164] Injecting memory failure for pfn 0x144a3b at process virtual address 0x20018000 [ 79.856087][ T8164] Memory failure: 0x144a3b: corrupted page was clean: dropped without side effects [ 79.856123][ T8164] Memory failure: 0x144a3b: recovery action for clean LRU page: Recovered [ 79.856141][ T8164] Injecting memory failure for pfn 0x14495d at process virtual address 0x20019000 [ 79.856176][ T8164] Memory failure: 0x14495d: corrupted page was clean: dropped without side effects [ 79.856210][ T8164] Memory failure: 0x14495d: recovery action for clean LRU page: Recovered [ 79.856219][ T8164] Injecting memory failure for pfn 0x144c23 at process virtual address 0x2001a000 [ 79.856258][ T8164] Memory failure: 0x144c23: corrupted page was clean: dropped without side effects [ 79.856299][ T8164] Memory failure: 0x144c23: recovery action for clean LRU page: Recovered [ 79.856309][ T8164] Injecting memory failure for pfn 0x1420ff at process virtual address 0x2001b000 [ 79.856346][ T8164] Memory failure: 0x1420ff: corrupted page was clean: dropped without side effects [ 79.856385][ T8164] Memory failure: 0x1420ff: recovery action for clean LRU page: Recovered [ 79.856405][ T8164] Injecting memory failure for pfn 0x142b5f at process virtual address 0x2001c000 [ 79.856441][ T8164] Memory failure: 0x142b5f: corrupted page was clean: dropped without side effects [ 79.856473][ T8164] Memory failure: 0x142b5f: recovery action for clean LRU page: Recovered [ 79.856482][ T8164] Injecting memory failure for pfn 0x11e924 at process virtual address 0x2001d000 [ 79.856516][ T8164] Memory failure: 0x11e924: corrupted page was clean: dropped without side effects [ 79.856549][ T8164] Memory failure: 0x11e924: recovery action for clean LRU page: Recovered [ 79.856567][ T8164] Injecting memory failure for pfn 0x121559 at process virtual address 0x2001e000 [ 79.856606][ T8164] Memory failure: 0x121559: corrupted page was clean: dropped without side effects [ 79.856640][ T8164] Memory failure: 0x121559: recovery action for clean LRU page: Recovered [ 79.856649][ T8164] Injecting memory failure for pfn 0x13ecfa at process virtual address 0x2001f000 [ 79.856695][ T8164] Memory failure: 0x13ecfa: corrupted page was clean: dropped without side effects [ 79.856730][ T8164] Memory failure: 0x13ecfa: recovery action for clean LRU page: Recovered [ 79.856773][ T8164] Injecting memory failure for pfn 0x13ffa0 at process virtual address 0x20020000 [ 79.857170][ T8164] Memory failure: 0x13ffa0: recovery action for clean LRU page: Recovered [ 79.857223][ T8164] Injecting memory failure for pfn 0x11ea70 at process virtual address 0x20030000 [ 79.857296][ T8164] Memory failure: 0x11ea70: recovery action for clean LRU page: Recovered [ 79.857331][ T8164] Injecting memory failure for pfn 0x144900 at process virtual address 0x20040000 [ 79.857399][ T8164] Memory failure: 0x144900: recovery action for clean LRU page: Recovered [ 79.857431][ T8164] Injecting memory failure for pfn 0x142948 at process virtual address 0x20050000 [ 79.857492][ T8164] Memory failure: 0x142948: recovery action for clean LRU page: Recovered [ 79.905589][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.001676][ T6779] hsr_slave_0: left promiscuous mode [ 80.003342][ T6779] hsr_slave_1: left promiscuous mode [ 80.003836][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.003847][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.006468][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.008860][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.034527][ T6779] veth1_macvtap: left promiscuous mode [ 80.034572][ T6779] veth0_macvtap: left promiscuous mode [ 80.034669][ T6779] veth1_vlan: left promiscuous mode [ 80.034733][ T6779] veth0_vlan: left promiscuous mode [ 80.185447][ T6779] team0 (unregistering): Port device team_slave_1 removed [ 80.189274][ T6779] team0 (unregistering): Port device team_slave_0 removed [ 80.303860][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.310089][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.310528][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.310849][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.311111][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.311367][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.311641][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.311928][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.312198][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.312493][ T8192] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.350753][ T8211] loop9: detected capacity change from 0 to 512 [ 80.469259][ T8218] loop9: detected capacity change from 0 to 512 [ 80.498454][ T8218] EXT4-fs (loop9): orphan cleanup on readonly fs [ 80.499329][ T8218] Quota error (device loop9): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 80.499471][ T8218] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.515282][ T8218] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 80.517887][ T8218] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #14: comm syz.9.530: invalid orphan symlink nlink 1 [ 80.517908][ T8218] loop9: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 80.519409][ T8218] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.530: couldn't read orphan inode 14 (err -117) [ 80.519434][ T8218] loop9: lost filesystem error report for type 5 error -117 [ 80.519752][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 80.519768][ C1] EXT4-fs (loop9): last error at time 2000000300: ext4_orphan_get:1408 [ 80.526557][ T8218] EXT4-fs (loop9): 1 truncate cleaned up [ 80.527121][ T8218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.549258][ T8218] netlink: 40 bytes leftover after parsing attributes in process `syz.9.530'. [ 80.594333][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.704513][ T7984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.711683][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.768230][ T8241] loop9: detected capacity change from 0 to 256 [ 80.774329][ T8241] vfat: Bad value for 'shortname' [ 80.774876][ T7984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.777531][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.790257][ T7984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.796974][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.797328][ T7984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.798790][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.864781][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.869559][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.872333][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.872359][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.874985][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.875005][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.893788][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.026272][ T8268] loop2: detected capacity change from 0 to 256 [ 81.049988][ T50] Bluetooth: hci0: command tx timeout [ 81.053455][ T8268] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.125643][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.133406][ T50] Bluetooth: hci4: command tx timeout [ 81.165582][ T7984] veth0_vlan: entered promiscuous mode [ 81.174477][ T7991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 81.178642][ T7991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.180995][ T7984] veth1_vlan: entered promiscuous mode [ 81.182766][ T7991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 81.185124][ T7991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.185439][ T7991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 81.187080][ T7991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.188953][ T7991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 81.195492][ T7991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.215739][ T7984] veth0_macvtap: entered promiscuous mode [ 81.219089][ T7984] veth1_macvtap: entered promiscuous mode [ 81.237595][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.246776][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.292087][ T6779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.292456][ T6779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.292547][ T6779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.292649][ T6779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.303338][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.344318][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.348595][ T6779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.348604][ T6779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.361740][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.361769][ T6779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.367253][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.367277][ T6779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.386855][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.386872][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.403631][ T7991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.555095][ T8325] loop9: detected capacity change from 0 to 1024 [ 81.567013][ T8325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.605119][ T8325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.605180][ T8325] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.663523][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.678933][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.690855][ T50] Bluetooth: hci2: command tx timeout [ 81.852310][ T8341] syzkaller0: entered promiscuous mode [ 81.852337][ T8341] syzkaller0: entered allmulticast mode [ 81.963775][ T7991] veth0_vlan: entered promiscuous mode [ 81.966476][ T7991] veth1_vlan: entered promiscuous mode [ 81.986942][ T7991] veth0_macvtap: entered promiscuous mode [ 81.988269][ T7991] veth1_macvtap: entered promiscuous mode [ 82.014583][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.016439][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.046721][ T5417] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.095458][ T8366] loop9: detected capacity change from 0 to 512 [ 82.097618][ T8366] EXT4-fs: Ignoring removed bh option [ 82.100535][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.100558][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.100790][ T6778] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.102299][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.102455][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.103458][ T8366] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 82.108421][ T8366] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 82.128390][ T8366] FAULT_INJECTION: forcing a failure. [ 82.128390][ T8366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.128424][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.9.543 Not tainted syzkaller #0 PREEMPT [ 82.128444][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.128452][ T8366] Call trace: [ 82.128456][ T8366] show_stack+0x2c/0x3c (C) [ 82.128478][ T8366] __dump_stack+0x30/0x40 [ 82.128490][ T8366] dump_stack_lvl+0xd8/0x12c [ 82.128502][ T8366] dump_stack+0x1c/0x28 [ 82.128513][ T8366] should_fail_ex+0x418/0x58c [ 82.128526][ T8366] should_fail+0x14/0x24 [ 82.128536][ T8366] should_fail_usercopy+0x20/0x30 [ 82.128548][ T8366] _copy_from_iter+0x188/0x1064 [ 82.128561][ T8366] copy_page_from_iter+0x220/0x2e8 [ 82.128574][ T8366] rds_message_copy_from_user+0x434/0xb1c [ 82.128592][ T8366] rds_sendmsg+0xb10/0x1c64 [ 82.128604][ T8366] __sock_sendmsg+0xc8/0x17c [ 82.128615][ T8366] ____sys_sendmsg+0x3d0/0x6c8 [ 82.128625][ T8366] ___sys_sendmsg+0x198/0x224 [ 82.128635][ T8366] __sys_sendmsg+0x158/0x204 [ 82.128645][ T8366] __arm64_sys_sendmsg+0x88/0x9c [ 82.128655][ T8366] invoke_syscall+0x98/0x244 [ 82.128667][ T8366] el0_svc_common+0xec/0x23c [ 82.128678][ T8366] do_el0_svc+0x4c/0x5c [ 82.128689][ T8366] el0_svc+0x60/0x1d8 [ 82.128700][ T8366] el0t_64_sync_handler+0x44/0x104 [ 82.128711][ T8366] el0t_64_sync+0x198/0x19c [ 82.164855][ T6778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.164884][ T6778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.286110][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.545'. [ 82.286133][ T8379] openvswitch: netlink: nsh attribute has 220 unknown bytes. [ 82.307828][ T8378] loop9: detected capacity change from 0 to 512 [ 82.614967][ T8401] EXT4-fs: Ignoring removed bh option [ 82.622358][ T8401] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 82.625978][ T8401] EXT4-fs (loop7): 1 truncate cleaned up [ 82.628152][ T8401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.751728][ T7991] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.811829][ T50] Bluetooth: hci3: command tx timeout [ 83.140688][ T50] Bluetooth: hci0: command tx timeout [ 83.185159][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185263][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185338][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185408][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185477][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185544][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.185629][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.187179][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.187287][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.209954][ T50] Bluetooth: hci4: command tx timeout [ 83.412366][ T8446] input: syz1 as /devices/virtual/input/input9 [ 83.607838][ T8455] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 83.627623][ T8460] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 83.770808][ T50] Bluetooth: hci2: command tx timeout [ 83.797961][ T8469] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.798781][ T8469] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.073759][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.9.561'. [ 84.073778][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.9.561'. [ 84.073787][ T8480] netlink: 64 bytes leftover after parsing attributes in process `syz.9.561'. [ 84.078209][ T8480] FAULT_INJECTION: forcing a failure. [ 84.078209][ T8480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.078228][ T8480] CPU: 1 UID: 0 PID: 8480 Comm: syz.9.561 Not tainted syzkaller #0 PREEMPT [ 84.078239][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.078245][ T8480] Call trace: [ 84.078248][ T8480] show_stack+0x2c/0x3c (C) [ 84.078270][ T8480] __dump_stack+0x30/0x40 [ 84.078284][ T8480] dump_stack_lvl+0xd8/0x12c [ 84.078295][ T8480] dump_stack+0x1c/0x28 [ 84.078306][ T8480] should_fail_ex+0x418/0x58c [ 84.078319][ T8480] should_fail+0x14/0x24 [ 84.078329][ T8480] should_fail_usercopy+0x20/0x30 [ 84.078341][ T8480] _inline_copy_from_user+0x3c/0x174 [ 84.078354][ T8480] __arm64_sys_mount+0x19c/0x388 [ 84.078365][ T8480] invoke_syscall+0x98/0x244 [ 84.078377][ T8480] el0_svc_common+0xec/0x23c [ 84.078388][ T8480] do_el0_svc+0x4c/0x5c [ 84.078399][ T8480] el0_svc+0x60/0x1d8 [ 84.078415][ T8480] el0t_64_sync_handler+0x44/0x104 [ 84.078426][ T8480] el0t_64_sync+0x198/0x19c [ 84.121760][ T8480] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.125921][ T8480] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.158744][ T6397] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.382959][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.780219][ T8520] Cannot find set identified by id 0 to match [ 84.880641][ T8530] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 85.209938][ T50] Bluetooth: hci0: command tx timeout [ 85.290846][ T50] Bluetooth: hci4: command tx timeout [ 85.440074][ T8585] ip6t_srh: unknown srh invflags 4000 [ 85.616212][ T8592] tap0: tun_chr_ioctl cmd 1074812118 [ 85.637727][ T8592] set_capacity_and_notify: 6 callbacks suppressed [ 85.637752][ T8592] loop1: detected capacity change from 0 to 512 [ 85.673885][ T8592] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.574: casefold flag without casefold feature [ 85.673924][ T8592] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.674419][ T8592] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.574: couldn't read orphan inode 15 (err -117) [ 85.674481][ T8592] loop1: lost filesystem error report for type 5 error -117 [ 85.675853][ T8592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.739366][ T8602] lo speed is unknown, defaulting to 1000 [ 85.750345][ T8553] cgroup: fork rejected by pids controller in /syz9 [ 85.798265][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.327947][ T8633] capability: warning: `syz.7.579' uses deprecated v2 capabilities in a way that may be insecure [ 86.351945][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.580'. [ 86.413024][ T8638] FAULT_INJECTION: forcing a failure. [ 86.413024][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 86.413065][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.7.581 Not tainted syzkaller #0 PREEMPT [ 86.413087][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.413095][ T8638] Call trace: [ 86.413098][ T8638] show_stack+0x2c/0x3c (C) [ 86.413123][ T8638] __dump_stack+0x30/0x40 [ 86.413136][ T8638] dump_stack_lvl+0xd8/0x12c [ 86.413148][ T8638] dump_stack+0x1c/0x28 [ 86.413159][ T8638] should_fail_ex+0x418/0x58c [ 86.413172][ T8638] should_failslab+0xc4/0x120 [ 86.413185][ T8638] kmem_cache_alloc_noprof+0x94/0x5d4 [ 86.413198][ T8638] anon_vma_clone+0x360/0x8c0 [ 86.413210][ T8638] anon_vma_fork+0x124/0x4d4 [ 86.413221][ T8638] dup_mmap+0x7d4/0x1998 [ 86.413231][ T8638] copy_mm+0xe8/0x324 [ 86.413239][ T8638] copy_process+0x1658/0x34bc [ 86.413248][ T8638] kernel_clone+0x234/0x8e8 [ 86.413256][ T8638] __arm64_sys_clone+0x168/0x1d4 [ 86.413265][ T8638] invoke_syscall+0x98/0x244 [ 86.413278][ T8638] el0_svc_common+0xec/0x23c [ 86.413289][ T8638] do_el0_svc+0x4c/0x5c [ 86.413301][ T8638] el0_svc+0x60/0x1d8 [ 86.413312][ T8638] el0t_64_sync_handler+0x44/0x104 [ 86.413323][ T8638] el0t_64_sync+0x198/0x19c [ 86.693272][ T8653] loop7: detected capacity change from 0 to 1024 [ 86.704011][ T8653] ext4: Unknown parameter 'fscontext' [ 86.816153][ T8660] Bluetooth: MGMT ver 1.23 [ 86.828288][ T8666] netlink: 'syz.1.586': attribute type 26 has an invalid length. [ 86.846064][ T8660] loop7: detected capacity change from 0 to 128 [ 86.846381][ T8660] vfat: Unknown parameter '00000000000536870976T\iN 1 [ 92.285552][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.287823][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.289232][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.289642][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.358012][ T8922] loop7: detected capacity change from 0 to 8192 [ 92.376109][ T8922] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.427899][ T8935] loop9: detected capacity change from 0 to 2048 [ 92.526180][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.536482][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.561953][ T5417] pim6reg: left allmulticast mode [ 92.562041][ T5417] dvmrp0: left allmulticast mode [ 92.702791][ T8954] nvme nvme1: rdma_resolve_addr failed (-19). [ 92.803419][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.833358][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.861143][ T5417] bond0 (unregistering): Released all slaves [ 92.870979][ T5417] bond1 (unregistering): Released all slaves [ 92.967724][ T8975] netlink: 68 bytes leftover after parsing attributes in process `syz.9.650'. [ 93.008516][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.650'. [ 93.008708][ T8975] FAULT_INJECTION: forcing a failure. [ 93.008708][ T8975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.008725][ T8975] CPU: 1 UID: 0 PID: 8975 Comm: syz.9.650 Not tainted syzkaller #0 PREEMPT [ 93.008737][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.008743][ T8975] Call trace: [ 93.008746][ T8975] show_stack+0x2c/0x3c (C) [ 93.008767][ T8975] __dump_stack+0x30/0x40 [ 93.008781][ T8975] dump_stack_lvl+0xd8/0x12c [ 93.008792][ T8975] dump_stack+0x1c/0x28 [ 93.008804][ T8975] should_fail_ex+0x418/0x58c [ 93.008817][ T8975] should_fail+0x14/0x24 [ 93.008828][ T8975] should_fail_usercopy+0x20/0x30 [ 93.008841][ T8975] _inline_copy_from_user+0x3c/0x174 [ 93.008853][ T8975] move_addr_to_kernel+0x88/0x168 [ 93.008863][ T8975] __sys_bind+0x12c/0x268 [ 93.008872][ T8975] __arm64_sys_bind+0x84/0x9c [ 93.008881][ T8975] invoke_syscall+0x98/0x244 [ 93.008894][ T8975] el0_svc_common+0xec/0x23c [ 93.008906][ T8975] do_el0_svc+0x4c/0x5c [ 93.008917][ T8975] el0_svc+0x60/0x1d8 [ 93.008928][ T8975] el0t_64_sync_handler+0x44/0x104 [ 93.008939][ T8975] el0t_64_sync+0x198/0x19c [ 93.166423][ T8926] lo speed is unknown, defaulting to 1000 [ 93.246386][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.246413][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.246865][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.246874][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.495255][ T5417] team0 (unregistering): Port device team_slave_1 removed [ 93.508863][ T5417] team0 (unregistering): Port device team_slave_0 removed [ 93.865424][ T9010] loop9: detected capacity change from 0 to 1024 [ 93.929432][ T9010] EXT4-fs mount: 6 callbacks suppressed [ 93.929449][ T9010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.970646][ T9010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.971814][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.655'. [ 93.971830][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.655'. [ 93.981084][ T9015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.014626][ T9018] bond2: (slave geneve2): making interface the new active one [ 94.015288][ T9018] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 94.059688][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.066909][ T9012] bond2: (slave bond0): making interface the new active one [ 94.068228][ T9012] bond2: (slave bond0): Enslaving as an active interface with an up link [ 94.091698][ T30] audit: type=1326 audit(2000000313.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 94.091750][ T30] audit: type=1326 audit(2000000313.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 94.091761][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.091824][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.091877][ T8926] bridge_slave_0: entered allmulticast mode [ 94.092289][ T8926] bridge_slave_0: entered promiscuous mode [ 94.093784][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.093832][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.093883][ T8926] bridge_slave_1: entered allmulticast mode [ 94.094303][ T8926] bridge_slave_1: entered promiscuous mode [ 94.099609][ T30] audit: type=1326 audit(2000000313.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 94.099648][ T30] audit: type=1326 audit(2000000313.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 94.099675][ T30] audit: type=1326 audit(2000000313.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81779368 code=0x7ffc0000 [ 94.099693][ T30] audit: type=1326 audit(2000000313.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff81779060 code=0x7ffc0000 [ 94.099760][ T30] audit: type=1326 audit(2000000313.970:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff817790cc code=0x7ffc0000 [ 94.099790][ T30] audit: type=1326 audit(2000000313.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff81758078 code=0x7ffc0000 [ 94.099821][ T30] audit: type=1326 audit(2000000313.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff8177a368 code=0x7ffc0000 [ 94.099846][ T30] audit: type=1326 audit(2000000313.970:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.658" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff817580d0 code=0x7ffc0000 [ 94.160108][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.160985][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.166899][ T8926] team0: Port device team_slave_0 added [ 94.167616][ T8926] team0: Port device team_slave_1 added [ 94.177895][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.177905][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.177918][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.178414][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.178421][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.178436][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.206401][ T8926] hsr_slave_0: entered promiscuous mode [ 94.206687][ T8926] hsr_slave_1: entered promiscuous mode [ 94.360007][ T4711] Bluetooth: hci1: command tx timeout [ 94.555309][ T9059] netlink: 68 bytes leftover after parsing attributes in process `syz.9.661'. [ 94.592045][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.661'. [ 94.592100][ T9059] FAULT_INJECTION: forcing a failure. [ 94.592100][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 94.592115][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.9.661 Not tainted syzkaller #0 PREEMPT [ 94.592127][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.592133][ T9059] Call trace: [ 94.592136][ T9059] show_stack+0x2c/0x3c (C) [ 94.592154][ T9059] __dump_stack+0x30/0x40 [ 94.592166][ T9059] dump_stack_lvl+0xd8/0x12c [ 94.592177][ T9059] dump_stack+0x1c/0x28 [ 94.592188][ T9059] should_fail_ex+0x418/0x58c [ 94.592201][ T9059] should_failslab+0xc4/0x120 [ 94.592213][ T9059] kmem_cache_alloc_noprof+0x94/0x5d4 [ 94.592226][ T9059] skb_clone+0x1ac/0x320 [ 94.592238][ T9059] dev_queue_xmit_nit+0x280/0x920 [ 94.592246][ T9059] dev_hard_start_xmit+0xac/0x794 [ 94.592254][ T9059] __dev_queue_xmit+0xed4/0x2a9c [ 94.592263][ T9059] __netlink_deliver_tap+0x484/0x6f4 [ 94.592274][ T9059] netlink_deliver_tap+0x1d8/0x1dc [ 94.592284][ T9059] __netlink_sendskb+0x78/0xd0 [ 94.592293][ T9059] netlink_sendskb+0x2c/0xdc [ 94.592301][ T9059] netlink_unicast+0x2c0/0x7f8 [ 94.592310][ T9059] netlink_ack+0x570/0x890 [ 94.592320][ T9059] netlink_rcv_skb+0x21c/0x414 [ 94.592329][ T9059] rtnetlink_rcv+0x28/0x38 [ 94.592337][ T9059] netlink_unicast+0x600/0x7f8 [ 94.592346][ T9059] netlink_sendmsg+0x648/0x948 [ 94.592356][ T9059] __sock_sendmsg+0xc8/0x17c [ 94.592365][ T9059] ____sys_sendmsg+0x3d0/0x6c8 [ 94.592375][ T9059] ___sys_sendmsg+0x198/0x224 [ 94.592385][ T9059] __sys_sendmsg+0x158/0x204 [ 94.592394][ T9059] __arm64_sys_sendmsg+0x88/0x9c [ 94.592404][ T9059] invoke_syscall+0x98/0x244 [ 94.592417][ T9059] el0_svc_common+0xec/0x23c [ 94.592428][ T9059] do_el0_svc+0x4c/0x5c [ 94.592439][ T9059] el0_svc+0x60/0x1d8 [ 94.592450][ T9059] el0t_64_sync_handler+0x44/0x104 [ 94.592461][ T9059] el0t_64_sync+0x198/0x19c [ 94.597493][ T9062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'. [ 94.599153][ T9062] ip6gre1: entered promiscuous mode [ 94.599165][ T9062] ip6gre1: entered allmulticast mode [ 94.671777][ T9070] fuse: Unknown parameter 'rotmode' [ 94.919471][ T8926] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.929525][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.934182][ T8926] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.936411][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.943488][ T8926] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.945892][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.946435][ T8926] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.956369][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.997966][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.006197][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.009183][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.009211][ T6778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.014220][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.014260][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.035502][ T8926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.035521][ T8926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.243511][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.417771][ T8926] veth0_vlan: entered promiscuous mode [ 95.422225][ T8926] veth1_vlan: entered promiscuous mode [ 95.438939][ T8926] veth0_macvtap: entered promiscuous mode [ 95.445250][ T8926] veth1_macvtap: entered promiscuous mode [ 95.462249][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.469030][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.490923][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490960][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490976][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490991][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.532068][ T6771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.532119][ T6771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.554795][ T6778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.554809][ T6778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.658927][ T9162] loop9: detected capacity change from 0 to 512 [ 95.663174][ T9162] EXT4-fs: Ignoring removed nobh option [ 95.665147][ T9162] EXT4-fs: Mount option(s) incompatible with ext2 [ 95.759027][ T9170] tipc: Started in network mode [ 95.759046][ T9170] tipc: Node identity da38419e1b4a, cluster identity 4711 [ 95.759156][ T9170] tipc: Enabled bearer , priority 0 [ 95.759418][ T9170] syzkaller0: entered promiscuous mode [ 95.759428][ T9170] syzkaller0: entered allmulticast mode [ 95.769252][ T9170] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 95.784967][ T9170] tipc: Resetting bearer [ 95.788157][ T9170] loop2: detected capacity change from 0 to 256 [ 95.849083][ T9169] tipc: Resetting bearer [ 95.900644][ T9169] tipc: Disabling bearer [ 96.419869][ T4711] Bluetooth: hci1: command tx timeout [ 96.462354][ T9180] usb usb5: usbfs: process 9180 (syz.2.673) did not claim interface 0 before use [ 96.467876][ T9180] 9p: Bad value for 'rfdno' [ 96.612410][ T9197] bridge1: entered promiscuous mode [ 96.777507][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.778268][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.780091][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.780439][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.780653][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.853014][ T9222] loop6: detected capacity change from 0 to 256 [ 96.962596][ T9208] lo speed is unknown, defaulting to 1000 [ 97.106022][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.106087][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.106142][ T9208] bridge_slave_0: entered allmulticast mode [ 97.106547][ T9208] bridge_slave_0: entered promiscuous mode [ 97.107508][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.107553][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.107609][ T9208] bridge_slave_1: entered allmulticast mode [ 97.108143][ T9208] bridge_slave_1: entered promiscuous mode [ 97.115282][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.116320][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.123229][ T9208] team0: Port device team_slave_0 added [ 97.124040][ T9208] team0: Port device team_slave_1 added [ 97.134685][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.134696][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.134711][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.135226][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.135233][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.135248][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.157863][ T9208] hsr_slave_0: entered promiscuous mode [ 97.158144][ T9208] hsr_slave_1: entered promiscuous mode [ 97.158315][ T9208] debugfs: 'hsr0' already exists in 'hsr' [ 97.158325][ T9208] Cannot create hsr debugfs directory [ 97.175653][ T9247] loop6: detected capacity change from 0 to 256 [ 97.233615][ T6778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.315776][ T6778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.425146][ T6778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.435053][ T9273] FAULT_INJECTION: forcing a failure. [ 97.435053][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 97.435074][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.9.684 Not tainted syzkaller #0 PREEMPT [ 97.435087][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.435093][ T9273] Call trace: [ 97.435096][ T9273] show_stack+0x2c/0x3c (C) [ 97.435115][ T9273] __dump_stack+0x30/0x40 [ 97.435126][ T9273] dump_stack_lvl+0xd8/0x12c [ 97.435136][ T9273] dump_stack+0x1c/0x28 [ 97.435145][ T9273] should_fail_ex+0x418/0x58c [ 97.435156][ T9273] should_failslab+0xc4/0x120 [ 97.435167][ T9273] __kmalloc_cache_noprof+0x94/0x5fc [ 97.435175][ T9273] sctp_datamsg_from_user+0x8c/0xdd0 [ 97.435184][ T9273] sctp_sendmsg_to_asoc+0xf74/0x13c0 [ 97.435192][ T9273] sctp_sendmsg+0xc70/0x17bc [ 97.435202][ T9273] inet_sendmsg+0xb4/0xd8 [ 97.435211][ T9273] __sock_sendmsg+0xc8/0x17c [ 97.435220][ T9273] sock_sendmsg+0x154/0x228 [ 97.435227][ T9273] splice_to_socket+0x6f8/0xbc4 [ 97.435236][ T9273] do_splice+0x9c0/0x1228 [ 97.435245][ T9273] __arm64_sys_splice+0x2c8/0x4ec [ 97.435254][ T9273] invoke_syscall+0x98/0x244 [ 97.435264][ T9273] el0_svc_common+0xec/0x23c [ 97.435273][ T9273] do_el0_svc+0x4c/0x5c [ 97.435282][ T9273] el0_svc+0x60/0x1d8 [ 97.435291][ T9273] el0t_64_sync_handler+0x44/0x104 [ 97.435300][ T9273] el0t_64_sync+0x198/0x19c [ 97.461398][ T9275] loop7: detected capacity change from 0 to 256 [ 97.565337][ T6778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.843101][ T9285] loop7: detected capacity change from 0 to 1024 [ 97.868707][ T9285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.966528][ T9294] loop2: detected capacity change from 0 to 256 [ 98.032899][ T9294] __nla_validate_parse: 1 callbacks suppressed [ 98.032941][ T9294] netlink: 48 bytes leftover after parsing attributes in process `syz.2.688'. [ 98.088682][ T6778] bridge_slave_1: left allmulticast mode [ 98.088926][ T6778] bridge_slave_1: left promiscuous mode [ 98.089132][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.142436][ T6778] bridge_slave_0: left allmulticast mode [ 98.144209][ T6778] bridge_slave_0: left promiscuous mode [ 98.144548][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.441674][ T9301] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 98.490010][ T50] Bluetooth: hci1: command tx timeout [ 98.654516][ T9313] loop9: detected capacity change from 0 to 512 [ 98.704411][ T9313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.704458][ T9313] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.705294][ T6778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.734450][ T6778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.737402][ T6397] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.738044][ T9310] overlay: Unknown parameter 'euid' [ 98.758116][ T6778] bond0 (unregistering): Released all slaves [ 98.776411][ T9319] tipc: Enabled bearer , priority 0 [ 98.779368][ T9316] syzkaller0: MTU too low for tipc bearer [ 98.779380][ T9316] tipc: Disabling bearer [ 98.811023][ T50] Bluetooth: hci5: command tx timeout [ 98.922794][ T7991] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.981463][ T9330] FAULT_INJECTION: forcing a failure. [ 98.981463][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 98.981487][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT [ 98.981500][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.981507][ T9330] Call trace: [ 98.981510][ T9330] show_stack+0x2c/0x3c (C) [ 98.981531][ T9330] __dump_stack+0x30/0x40 [ 98.981545][ T9330] dump_stack_lvl+0xd8/0x12c [ 98.981556][ T9330] dump_stack+0x1c/0x28 [ 98.981567][ T9330] should_fail_ex+0x418/0x58c [ 98.981582][ T9330] should_failslab+0xc4/0x120 [ 98.981602][ T9330] kmem_cache_alloc_noprof+0x94/0x5d4 [ 98.981615][ T9330] security_inode_alloc+0x40/0x304 [ 98.981625][ T9330] inode_init_always_gfp+0x704/0xb20 [ 98.981636][ T9330] alloc_inode+0x9c/0x198 [ 98.981646][ T9330] sock_alloc+0x4c/0x204 [ 98.981656][ T9330] __sock_create+0x108/0x670 [ 98.981665][ T9330] __sys_socket_create+0xc0/0x11c [ 98.981674][ T9330] __sys_socket+0x44/0xec [ 98.981683][ T9330] __arm64_sys_socket+0x84/0x9c [ 98.981692][ T9330] invoke_syscall+0x98/0x244 [ 98.981704][ T9330] el0_svc_common+0xec/0x23c [ 98.981715][ T9330] do_el0_svc+0x4c/0x5c [ 98.981726][ T9330] el0_svc+0x60/0x1d8 [ 98.981738][ T9330] el0t_64_sync_handler+0x44/0x104 [ 98.981748][ T9330] el0t_64_sync+0x198/0x19c [ 98.981766][ T9330] net_ratelimit: 56 callbacks suppressed [ 98.981772][ T9330] socket: no more sockets [ 98.983580][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 99.252899][ T6778] hsr_slave_0: left promiscuous mode [ 99.253991][ T6778] hsr_slave_1: left promiscuous mode [ 99.254276][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.254288][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.256506][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.256518][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.290351][ T6778] veth1_macvtap: left promiscuous mode [ 99.290386][ T6778] veth0_macvtap: left promiscuous mode [ 99.290435][ T6778] veth1_vlan: left promiscuous mode [ 99.290479][ T6778] veth0_vlan: left promiscuous mode [ 99.495620][ T9362] loop6: detected capacity change from 0 to 512 [ 99.749095][ T6778] team0 (unregistering): Port device team_slave_1 removed [ 99.775014][ T6778] team0 (unregistering): Port device team_slave_0 removed [ 100.068744][ T9208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.087126][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.091668][ T9208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.127098][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.127487][ T9208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.136674][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.137178][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.706'. [ 100.138676][ T9208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.148720][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.161733][ T9394] sit1: entered promiscuous mode [ 100.161754][ T9394] sit1: entered allmulticast mode [ 100.247364][ T9406] ================================================================== [ 100.247376][ T9406] BUG: KASAN: slab-use-after-free in dvb_device_open+0xd0/0x254 [ 100.247399][ T9406] Read of size 8 at addr ffff0000cb555e18 by task syz.7.710/9406 [ 100.247407][ T9406] [ 100.247412][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.7.710 Not tainted syzkaller #0 PREEMPT [ 100.247422][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.247428][ T9406] Call trace: [ 100.247430][ T9406] show_stack+0x2c/0x3c (C) [ 100.247445][ T9406] __dump_stack+0x30/0x40 [ 100.247457][ T9406] dump_stack_lvl+0xd8/0x12c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 100.247469][ T9406] print_address_description+0xb0/0x238 [ 100.247478][ T9406] print_report+0x68/0x84 [ 100.247485][ T9406] kasan_report+0x8c/0xc4 [ 100.247495][ T9406] __asan_report_load8_noabort+0x20/0x2c [ 100.247505][ T9406] dvb_device_open+0xd0/0x254 [ 100.247515][ T9406] chrdev_open+0x398/0x3e8 [ 100.247526][ T9406] do_dentry_open+0x5c4/0xfbc [ 100.247537][ T9406] vfs_open+0x44/0x2dc [ 100.247547][ T9406] path_openat+0x1084/0x18f0 [ 100.247556][ T9406] do_file_open+0x1c8/0x2e8 [ 100.247565][ T9406] do_sys_openat2+0x114/0x1e8 [ 100.247576][ T9406] do_sys_open+0xb0/0xe0 [ 100.247587][ T9406] __arm64_sys_openat+0xa8/0xc4 [ 100.247606][ T9406] invoke_syscall+0x98/0x244 [ 100.247618][ T9406] el0_svc_common+0xec/0x23c [ 100.247630][ T9406] do_el0_svc+0x4c/0x5c [ 100.247641][ T9406] el0_svc+0x60/0x1d8 [ 100.247652][ T9406] el0t_64_sync_handler+0x44/0x104 [ 100.247662][ T9406] el0t_64_sync+0x198/0x19c [ 100.247672][ T9406] [ 100.247674][ T9406] Allocated by task 1: [ 100.247678][ T9406] kasan_save_track+0x40/0x78 [ 100.247685][ T9406] kasan_save_alloc_info+0x40/0x50 [ 100.247694][ T9406] __kasan_kmalloc+0x9c/0xb4 [ 100.247701][ T9406] __kmalloc_cache_noprof+0x2f4/0x5fc [ 100.247708][ T9406] dvb_register_device+0x1a4/0x16e0 [ 100.247716][ T9406] dvb_register_frontend+0x474/0x6d0 [ 100.247726][ T9406] vidtv_bridge_probe+0x5a4/0xa58 [ 100.247734][ T9406] platform_probe+0x100/0x1a4 [ 100.247743][ T9406] really_probe+0x29c/0x800 [ 100.247754][ T9406] __driver_probe_device+0x1e0/0x350 [ 100.247764][ T9406] driver_probe_device+0x6c/0x19c [ 100.247775][ T9406] __driver_attach+0x168/0x384 [ 100.247785][ T9406] bus_for_each_dev+0x128/0x1b4 [ 100.247794][ T9406] driver_attach+0x50/0x60 [ 100.247804][ T9406] bus_add_driver+0x208/0x500 [ 100.247812][ T9406] driver_register+0x220/0x310 [ 100.247818][ T9406] __platform_driver_register+0x90/0xa4 [ 100.247826][ T9406] vidtv_bridge_init+0x4c/0x74 [ 100.247835][ T9406] do_one_initcall+0x274/0x9f8 [ 100.247845][ T9406] do_initcall_level+0x12c/0x1c4 [ 100.247856][ T9406] do_initcalls+0x70/0xd0 [ 100.247865][ T9406] do_basic_setup+0x7c/0x90 [ 100.247875][ T9406] kernel_init_freeable+0x258/0x398 [ 100.247885][ T9406] kernel_init+0x28/0x1e0 [ 100.247891][ T9406] ret_from_fork+0x10/0x20 [ 100.247897][ T9406] [ 100.247899][ T9406] Freed by task 9391: [ 100.247902][ T9406] kasan_save_track+0x40/0x78 [ 100.247909][ T9406] kasan_save_free_info+0x54/0x6c [ 100.247917][ T9406] __kasan_slab_free+0x74/0xa4 [ 100.247924][ T9406] kfree+0x188/0x658 [ 100.247934][ T9406] dvb_device_put+0x64/0xd0 [ 100.247942][ T9406] dvb_device_open+0x23c/0x254 [ 100.247950][ T9406] chrdev_open+0x398/0x3e8 [ 100.247958][ T9406] do_dentry_open+0x5c4/0xfbc [ 100.247967][ T9406] vfs_open+0x44/0x2dc [ 100.247976][ T9406] path_openat+0x1084/0x18f0 [ 100.247984][ T9406] do_file_open+0x1c8/0x2e8 [ 100.247991][ T9406] do_sys_openat2+0x114/0x1e8 [ 100.248000][ T9406] do_sys_open+0xb0/0xe0 [ 100.248009][ T9406] __arm64_sys_openat+0xa8/0xc4 [ 100.248018][ T9406] invoke_syscall+0x98/0x244 [ 100.248029][ T9406] el0_svc_common+0xec/0x23c [ 100.248038][ T9406] do_el0_svc+0x4c/0x5c [ 100.248048][ T9406] el0_svc+0x60/0x1d8 [ 100.248056][ T9406] el0t_64_sync_handler+0x44/0x104 [ 100.248065][ T9406] el0t_64_sync+0x198/0x19c [ 100.248071][ T9406] [ 100.248073][ T9406] The buggy address belongs to the object at ffff0000cb555e00 [ 100.248073][ T9406] which belongs to the cache kmalloc-256 of size 256 [ 100.248080][ T9406] The buggy address is located 24 bytes inside of [ 100.248080][ T9406] freed 256-byte region [ffff0000cb555e00, ffff0000cb555f00) [ 100.248089][ T9406] [ 100.248091][ T9406] The buggy address belongs to the physical page: [ 100.248095][ T9406] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b554 [ 100.248102][ T9406] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.248108][ T9406] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 100.248116][ T9406] page_type: f5(slab) [ 100.248124][ T9406] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 100.248131][ T9406] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.248139][ T9406] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 100.248145][ T9406] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.248153][ T9406] head: 05ffc00000000001 fffffdffc32d5501 00000000ffffffff 00000000ffffffff [ 100.248160][ T9406] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.248164][ T9406] page dumped because: kasan: bad access detected [ 100.248167][ T9406] [ 100.248169][ T9406] Memory state around the buggy address: [ 100.248173][ T9406] ffff0000cb555d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248178][ T9406] ffff0000cb555d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248184][ T9406] >ffff0000cb555e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.248188][ T9406] ^ [ 100.248192][ T9406] ffff0000cb555e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.248198][ T9406] ffff0000cb555f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248202][ T9406] ================================================================== [ 100.248206][ T9406] Disabling lock debugging due to kernel taint [ 100.248211][ T9406] ------------[ cut here ]------------ [ 100.248214][ T9406] refcount_t: addition on 0; use-after-free. [ 100.248337][ T9406] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#1: syz.7.710/9406 [ 100.350849][ T9406] Modules linked in: [ 100.351602][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.7.710 Tainted: G B syzkaller #0 PREEMPT [ 100.353505][ T9406] Tainted: [B]=BAD_PAGE [ 100.354273][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.356066][ T9406] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.357490][ T9406] pc : refcount_warn_saturate+0x134/0x1f8 [ 100.358568][ T9406] lr : refcount_warn_saturate+0x134/0x1f8 [ 100.359621][ T9406] sp : ffff800093917700 [ 100.360371][ T9406] x29: ffff800093917700 x28: dfff800000000000 x27: 1fffe0001b2e1e39 [ 100.361818][ T9406] x26: dfff800000000000 x25: ffff700012722ef4 x24: dfff800000000000 [ 100.363288][ T9406] x23: ffff8000873d1f28 x22: ffff0000cb7f4800 x21: ffff0000cb555e00 [ 100.364808][ T9406] x20: ffff0000cb555e10 x19: ffff80008a0cf000 x18: 0000000000000000 [ 100.366269][ T9406] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 100.367815][ T9406] x14: 0000000000001e19 x13: 0000000000000001 x12: 0000000000000003 [ 100.369253][ T9406] x11: 0000000000000000 x10: 0000000000080000 x9 : 6ac78b189f797400 [ 100.370749][ T9406] x8 : 6ac78b189f797400 x7 : 0000000000000000 x6 : ffff8000804823d8 [ 100.372199][ T9406] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e90 [ 100.373660][ T9406] x2 : 0000000100000000 x1 : ffff0000c4b7d880 x0 : 0000000000000001 [ 100.375146][ T9406] Call trace: [ 100.375766][ T9406] refcount_warn_saturate+0x134/0x1f8 (P) [ 100.376802][ T9406] dvb_device_get+0x9c/0xc0 [ 100.377612][ T9406] dvb_device_open+0x100/0x254 [ 100.378457][ T9406] chrdev_open+0x398/0x3e8 [ 100.379255][ T9406] do_dentry_open+0x5c4/0xfbc [ 100.380110][ T9406] vfs_open+0x44/0x2dc [ 100.380748][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.381985][ T9406] path_openat+0x1084/0x18f0 [ 100.382823][ T9406] do_file_open+0x1c8/0x2e8 [ 100.383635][ T9406] do_sys_openat2+0x114/0x1e8 [ 100.384455][ T9406] do_sys_open+0xb0/0xe0 [ 100.385201][ T9406] __arm64_sys_openat+0xa8/0xc4 [ 100.385569][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.387256][ T9406] invoke_syscall+0x98/0x244 [ 100.388098][ T9406] el0_svc_common+0xec/0x23c [ 100.388924][ T9406] do_el0_svc+0x4c/0x5c [ 100.389664][ T9406] el0_svc+0x60/0x1d8 [ 100.390363][ T9406] el0t_64_sync_handler+0x44/0x104 [ 100.391256][ T9406] el0t_64_sync+0x198/0x19c [ 100.392052][ T9406] irq event stamp: 341 [ 100.392767][ T9406] hardirqs last enabled at (341): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 100.394563][ T9406] hardirqs last disabled at (340): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 100.396241][ T9406] softirqs last enabled at (318): [] do_sve_acc+0x32c/0x4b8 [ 100.397833][ T9406] softirqs last disabled at (316): [] do_sve_acc+0x10c/0x4b8 [ 100.399468][ T9406] ---[ end trace 0000000000000000 ]--- [ 100.428130][ T9208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.428158][ T9208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.541513][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.541553][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.542275][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.542318][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.560477][ T9406] ------------[ cut here ]------------ [ 100.560493][ T9406] refcount_t: underflow; use-after-free. [ 100.560645][ T9406] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#1: syz.7.710/9406 [ 100.564166][ T9406] Modules linked in: [ 100.564783][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.7.710 Tainted: G B W syzkaller #0 PREEMPT [ 100.566423][ T9406] Tainted: [B]=BAD_PAGE, [W]=WARN [ 100.567198][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.568741][ T9406] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.570019][ T9406] pc : refcount_warn_saturate+0x154/0x1f8 [ 100.571056][ T9406] lr : refcount_warn_saturate+0x154/0x1f8 [ 100.572100][ T9406] sp : ffff8000939175b0 [ 100.572803][ T9406] x29: ffff8000939175b0 x28: ffff0000cb1ca800 x27: ffff0000cb555e00 [ 100.574265][ T9406] x26: ffff0000cae70308 x25: dfff800000000000 x24: ffff0000cabbc180 [ 100.575709][ T9406] x23: 00000000fffffffc x22: 1fffe000196aabc7 x21: 00000000c0000000 [ 100.577162][ T9406] x20: ffff0000cb555e10 x19: ffff80008a0cf000 x18: 0000000000000000 [ 100.578560][ T9406] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 100.579994][ T9406] x14: 0000000000001e66 x13: 0000000000000001 x12: 0000000000000003 [ 100.581444][ T9406] x11: 0000000000000000 x10: 0000000000080000 x9 : 6ac78b189f797400 [ 100.582935][ T9406] x8 : 6ac78b189f797400 x7 : 0000000000000000 x6 : ffff8000804823d8 [ 100.584371][ T9406] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e90 [ 100.585839][ T9406] x2 : 0000000100000000 x1 : ffff0000c4b7d880 x0 : 0000000000000001 [ 100.587307][ T9406] Call trace: [ 100.587921][ T9406] refcount_warn_saturate+0x154/0x1f8 (P) [ 100.588980][ T9406] dvb_device_put+0xac/0xd0 [ 100.589766][ T9406] dvb_generic_release+0xec/0x158 [ 100.590676][ T9406] __dvb_frontend_open+0x5c4/0xa34 [ 100.591608][ T9406] dvb_frontend_open+0x19c/0x70c [ 100.592533][ T9406] dvb_device_open+0x1f8/0x254 [ 100.593422][ T9406] chrdev_open+0x398/0x3e8 [ 100.594231][ T9406] do_dentry_open+0x5c4/0xfbc [ 100.595083][ T9406] vfs_open+0x44/0x2dc [ 100.595817][ T9406] path_openat+0x1084/0x18f0 [ 100.596668][ T9406] do_file_open+0x1c8/0x2e8 [ 100.597506][ T9406] do_sys_openat2+0x114/0x1e8 [ 100.598372][ T9406] do_sys_open+0xb0/0xe0 [ 100.599128][ T9406] __arm64_sys_openat+0xa8/0xc4 [ 100.600017][ T9406] invoke_syscall+0x98/0x244 [ 100.600855][ T9406] el0_svc_common+0xec/0x23c [ 100.601701][ T9406] do_el0_svc+0x4c/0x5c [ 100.602447][ T9406] el0_svc+0x60/0x1d8 [ 100.603186][ T9406] el0t_64_sync_handler+0x44/0x104 [ 100.604117][ T9406] el0t_64_sync+0x198/0x19c [ 100.604918][ T9406] irq event stamp: 341 [ 100.605658][ T9406] hardirqs last enabled at (341): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 100.607477][ T9406] hardirqs last disabled at (340): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 100.609269][ T9406] softirqs last enabled at (318): [] do_sve_acc+0x32c/0x4b8 [ 100.610865][ T9406] softirqs last disabled at (316): [] do_sve_acc+0x10c/0x4b8 [ 100.612388][ T9406] ---[ end trace 0000000000000000 ]--- [ 100.807757][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 100.926511][ T6771] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.929569][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.023004][ T6771] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.059069][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 101.111513][ T6771] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.165357][ T6771] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.182700][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 101.254265][ T6771] bridge_slave_1: left allmulticast mode [ 101.254284][ T6771] bridge_slave_1: left promiscuous mode [ 101.254345][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.255951][ T6771] bridge_slave_0: left allmulticast mode [ 101.255965][ T6771] bridge_slave_0: left promiscuous mode [ 101.256029][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.304413][ T6771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.330878][ T6771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.341496][ T6771] bond0 (unregistering): Released all slaves [ 101.536744][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 101.556633][ T6771] hsr_slave_0: left promiscuous mode [ 101.559966][ T6771] hsr_slave_1: left promiscuous mode [ 101.560217][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.560227][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.560493][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.560501][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.563716][ T6771] veth1_macvtap: left promiscuous mode [ 101.563738][ T6771] veth0_macvtap: left promiscuous mode [ 101.563784][ T6771] veth1_vlan: left promiscuous mode [ 101.563814][ T6771] veth0_vlan: left promiscuous mode [ 101.642046][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 101.644463][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 101.688428][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 101.922260][ T6771] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.942271][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 101.962728][ T6771] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.023359][ T6771] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.054638][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 102.074284][ T6771] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.156640][ T6771] bridge_slave_1: left allmulticast mode [ 102.156661][ T6771] bridge_slave_1: left promiscuous mode [ 102.156719][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.159381][ T6771] bridge_slave_0: left allmulticast mode [ 102.159394][ T6771] bridge_slave_0: left promiscuous mode [ 102.159459][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.174777][ T6771] pim6reg: left allmulticast mode [ 102.214061][ T6771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.229087][ T6771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.251603][ T6771] bond0 (unregistering): Released all slaves [ 102.253515][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 102.391713][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 102.523048][ T6771] hsr_slave_0: left promiscuous mode [ 102.523316][ T6771] hsr_slave_1: left promiscuous mode [ 102.523723][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.523740][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.524192][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.524201][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.527808][ T6771] veth1_macvtap: left promiscuous mode [ 102.527838][ T6771] veth0_macvtap: left promiscuous mode [ 102.527905][ T6771] veth1_vlan: left promiscuous mode [ 102.527964][ T6771] veth0_vlan: left promiscuous mode [ 102.602924][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 102.605290][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 102.648985][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.773020][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.841239][ T6771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.891434][ T6771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.956705][ T6771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.003973][ T6771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.331619][ T6771] bridge_slave_1: left allmulticast mode [ 103.331638][ T6771] bridge_slave_1: left promiscuous mode [ 103.331736][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.333880][ T6771] bridge_slave_0: left allmulticast mode [ 103.333893][ T6771] bridge_slave_0: left promiscuous mode [ 103.333989][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.345757][ T6771] bridge_slave_1: left allmulticast mode [ 103.345785][ T6771] bridge_slave_1: left promiscuous mode [ 103.345875][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.346788][ T6771] bridge_slave_0: left allmulticast mode [ 103.346800][ T6771] bridge_slave_0: left promiscuous mode [ 103.346868][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.424685][ T6771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.425972][ T6771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.435875][ T6771] bond0 (unregistering): Released all slaves [ 103.456351][ T6771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.467431][ T6771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.481275][ T6771] bond0 (unregistering): Released all slaves [ 103.531541][ T6771] tipc: Left network mode [ 103.743379][ T6771] hsr_slave_0: left promiscuous mode [ 103.743552][ T6771] hsr_slave_1: left promiscuous mode [ 103.743756][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.743766][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.743999][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.744008][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.745238][ T6771] hsr_slave_0: left promiscuous mode [ 103.745575][ T6771] hsr_slave_1: left promiscuous mode [ 103.745768][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.745976][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.749626][ T6771] veth1_macvtap: left promiscuous mode [ 103.749647][ T6771] veth0_macvtap: left promiscuous mode [ 103.749690][ T6771] veth1_vlan: left promiscuous mode [ 103.769919][ T6771] veth0_vlan: left promiscuous mode [ 103.866627][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 103.868923][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 103.946335][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 103.948651][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 104.781681][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 104.895639][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 105.002588][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 105.113202][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 105.789673][ T4397] 8021q: adding VLAN 0 to HW filter on device eth17 [ 105.898567][ T4397] 8021q: adding VLAN 0 to HW filter on device eth19 [ 106.015439][ T4397] 8021q: adding VLAN 0 to HW filter on device eth18 [ 106.132047][ T4397] 8021q: adding VLAN 0 to HW filter on device eth20 [ 106.249860][ T4397] 8021q: adding VLAN 0 to HW filter on device eth21 [ 106.360172][ T4397] 8021q: adding VLAN 0 to HW filter on device eth22 [ 106.477917][ T4397] 8021q: adding VLAN 0 to HW filter on device eth23 [ 106.593162][ T4397] 8021q: adding VLAN 0 to HW filter on device eth24 [ 106.705944][ T4397] 8021q: adding VLAN 0 to HW filter on device eth25 [ 106.833696][ T4397] 8021q: adding VLAN 0 to HW filter on device eth26 [ 106.943175][ T4397] 8021q: adding VLAN 0 to HW filter on device eth27 [ 107.064577][ T4397] 8021q: adding VLAN 0 to HW filter on device eth28 [ 107.174462][ T4397] 8021q: adding VLAN 0 to HW filter on device eth29 [ 107.283736][ T4397] 8021q: adding VLAN 0 to HW filter on device eth30 [ 107.418625][ T4397] 8021q: adding VLAN 0 to HW filter on device eth31 [ 107.529873][ T4397] 8021q: adding VLAN 0 to HW filter on device eth32