last executing test programs: 1m46.618134862s ago: executing program 3 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0xb0, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeb4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401c4}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xb0}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0xfffffffc) r3 = eventfd2(0x7fff, 0x1) read$eventfd(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$eJzs3dFvG3cdAPDvOXabtinJgAeYtDHYUDtB7WZhW8TDGBIST5MQ472ExI2iOnEUO1sTTTT9FxASSDzBMxJ/ABKqxAuPCGkSPIM0BELQgQQPsENnn5PUOSfe5sSt8/lI1/v9fue77/eX+s5355/OAZxbz0XE6xHxQZqmL0bEbN5eyqfY607Z695/+M5yNiWRpm/+PYkkb+ttK8nnV/LVpiPi29+M+F5yNG5rZ/fOUqNR38rrtfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdvjqSfVyPitW/8OcvktV99+e0/3frr9e9nlZl8+eF+fEjl4xZ2u165ON23wtZHDPY4yvpT6VUuDbfO/VPMBwCAwbJz/E9GxBci4sWYjanjT2cBAACAJ1D6tZn4bxKRFrswoB0AAAB4gpQ6Y2CTUjUfCzATpVK12h3D++m4XGo0W+0v3W5ub6x0x8rORaV0e61Rv5mPFZ6LSpLV5zvlg/pLffWFiHgqIn44e6lTry43GyvjvvkBAAAA58SVvuv/f812r/8BAACACTM37gQAAACAU+f6HwAAACaf638AAACYaN96441sSnu/f73y1s72neZbN1bqrTvV9e3l6nJza7O62myudp7Zt37S9hrN5uZXYmP7bq1db7VrrZ3dW+vN7Y32rbWYPpMOAQAAAEc89bkHf0giYu+rlzpT5sK4kwLORHm/lOTzgr3/j1Pd+XuPtKZpeu9UcwNO19QQr3nvYnG78wR4spX7Gwbs68DkqYw7AWDskhOWDxy889t8/vnR5gMAAIzetc/2ff9f7t7XP/57gXK2RunMkgROhZ0Yzq++z/l0dlyJAGeu8/3/sAN5nCzARKkMNQIQmGQf+/v/E6Xph0oIAAAYuZnOlJSq+e29mSiVqtWIq52fBagkt9ca9ZsR8YmI+P1s5WJWn++smZx4zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEikAAAAw0SJKf0l+3X2W/7XZF2b67w9cSP7T+UngCxHx9k/e/NHdpXZ7az5r/8d+e/vHeftL47iDAQAAAPTrXad35v8edzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr3H76z3JuGePmlUcX929cjYq4ofjmmO/PpqETE5X8mUT60XhIRUyOIv3c/Ij5TFD/J0toPWRR/FH+EE+LHXP5XKIp/ZQTx4Tx7kB1/Xi/a/0rxXGdevP+VIx6pf1SDj3+xf/ybGrD/Xx0yxtPv/qI2MP79iKfLj8Yv98VPBsR/fsj43/3O7u6gZelPI671Pn86R7zDEQ5Ktfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdv1m6vNer5v4UxfvDMLz84rv+XCz//kjybwf1/oWB7RZ9J/3v37sNP9Sp7R+Nff74g/m9+1pndK4hfyuN8MS9ny6/1ynvd8mHP/vx3zx7X/5WD/lcO9/+k///rgzba78iO8sywbx0A4BS0dnbvLDUa9a2JLWRX6Y9BGgqPU+FiRNS3Wvd6LZVRvEnSNE2zfapg0YOIGGY7SYy4p6XifA4KA48A4z4yAQAAo3Zw0j/uTAAAAAAAAAAAAAAAAAAAAOD8OovHrfXHPHgEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzE/wMAAP//lDPSjg==") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m46.164764704s ago: executing program 3 (id=829): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x2800, 0x0, @local}, 0x10) 1m46.085773772s ago: executing program 3 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21048a, &(0x7f0000000140)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x1, 0x51a, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d76cf9321e8e2320c4e8ca6131b30e324bd42ec7178de66f1beeefd41ad7e477b8791c4b083a613aa5284b929ba1f08fff84f896f97bd7885cdfd1e4dc6ce3", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00cd0006000700ff7f00004600330040840000080211000000080211000001c631cd7cdc17530cf01fcc00000601010101010101002d1a00200608000000000000000f000100110000000008050000001b0000"], 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 1m45.784567964s ago: executing program 3 (id=833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="10000000011413032abd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x9, 0x9}, {0xffff, 0xffff}, {0x5, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xf6, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4c850) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x3c, r8, 0x801, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x2000) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_within_size}]}) renameat2(r0, &(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_BALANCE(r9, 0x5000940c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1m45.727024883s ago: executing program 3 (id=834): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m44.972349564s ago: executing program 3 (id=844): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 1m44.904914184s ago: executing program 32 (id=844): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 1m36.269793716s ago: executing program 2 (id=907): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) read(r1, &(0x7f0000000180)=""/118, 0x76) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) 1m35.227883256s ago: executing program 2 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}], [{@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x34, 0x32, 0x34, 0x63, 0x66, 0x33], 0x2d, [0x62, 0x33, 0x65, 0x64], 0x2d, [0x33, 0x63, 0x34, 0x30], 0x2d, [0x30, 0x30, 0x32, 0x34], 0x2d, [0x35, 0x62, 0x62, 0x39, 0x35, 0x31, 0x32, 0x31]}}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, 'workdir'}}]}) chdir(&(0x7f0000000200)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) 1m35.157408263s ago: executing program 2 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x8c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ae}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m35.119081197s ago: executing program 2 (id=925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x1, 0xa0, 0x8}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @loopback}}}, 0x118) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="f9ffbaffffffffffd461b88b"], 0x8) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.state\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x80000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m33.494127017s ago: executing program 2 (id=937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x800, 0x45) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000780)=[{&(0x7f0000000e80)='/', 0x1}, {&(0x7f0000000600)}], 0x2) 1m33.073795376s ago: executing program 2 (id=941): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff}, 0xe) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) bpf$MAP_CREATE(0x500, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x2) 1m33.044950609s ago: executing program 33 (id=941): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff}, 0xe) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) bpf$MAP_CREATE(0x500, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x2) 1m28.954781298s ago: executing program 0 (id=963): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async) unshare(0x22020400) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x20000000, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x0, 0x4, {{{0x4, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "a6c32ac7104b63c6"}, 0x5}}]}, 0x51}, 0x1, 0x0, 0x0, 0x11}, 0x880) 1m28.857283579s ago: executing program 0 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a8008000400790000000c0003000fbc789d2a8d405e14000100"], 0x5c}}, 0x20000040) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x9, &(0x7f00000000c0)) r8 = dup(r0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) sendmsg$inet6(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="66e0", 0x2}], 0x1}, 0x8081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x706, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x7, 0x2e, 0xffffffb9, 0x1a}, 0x9c) 1m27.756507688s ago: executing program 0 (id=971): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00150007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 1m27.621489395s ago: executing program 0 (id=973): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x11d, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x20006, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x2000000008, 0xffffffff, 0x8, 0x0, 0x80002, 0x8000, 0x0, r2, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) r5 = getuid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r8, r9) r10 = timerfd_create(0x4, 0x80000) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) fsetxattr$trusted_overlay_upper(r12, &(0x7f00000000c0), 0x0, 0x0, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000880)={'\x00', 0x7, 0x4, 0xfffffffb, 0x0, 0x8000, 0xffffffffffffffff}) r14 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r15, r15, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"/1152], 0x480}], 0x1, &(0x7f0000006380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x5}, 0x4000000) r17 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xee) fallocate(r17, 0x0, 0x1, 0x8ffff) r18 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xa2600, 0x19b) sendfile(r18, r18, 0x0, 0x18800) setsockopt$XDP_TX_RING(r17, 0x11b, 0x3, &(0x7f0000000000)=0x8000, 0x4) r19 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) ioctl$EXT4_IOC_MOVE_EXT(r19, 0x40305829, &(0x7f0000000140)={0x17c04, r19, 0x6, 0x973f, 0x81, 0x1}) 1m27.538434303s ago: executing program 0 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)) getgroups(0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) write$UHID_CREATE2(r3, 0x0, 0x194) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000240)={0x8, &(0x7f00000001c0)=[{0x9, 0x2}, {0x1, 0xe2bd}, {0xaa, 0xd3}, {0x7f, 0x4}, {0x81, 0x4}, {0x291, 0x6}, {0x5, 0x5}, {0x8, 0xd2b6}]}) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 1m27.245412336s ago: executing program 0 (id=977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0xfffffffffffffffe, 0x60) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r1, 0xffffd000) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 1m27.088427513s ago: executing program 34 (id=977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0xfffffffffffffffe, 0x60) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r1, 0xffffd000) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 1m20.425315016s ago: executing program 1 (id=1023): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x10000000, 0x3, {0xa, 0x3, 0x9, 0xfffffffe}}) (fail_nth: 2) 1m19.320935289s ago: executing program 1 (id=1026): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='blacklist\x00', &(0x7f0000000100)='-%\x00') keyctl$get_keyring_id(0x0, r0, 0xedb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000100)="140000001a004f", 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) r4 = signalfd4(r2, &(0x7f0000000240)={[0x2]}, 0x8, 0x80000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_dump={0x3e}}) r6 = memfd_secret(0x80000) ioctl$UBLK_U_CMD_GET_FEATURES(r6, 0x80207513, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r4, 0x20, &(0x7f00000008c0)={&(0x7f00000006c0)=""/215, 0xd7, 0x0, &(0x7f00000007c0)=""/195, 0xc3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018290000", @ANYRES32=r4, @ANYBLOB="98bb9cdbd6c5430f00000500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000000200000000000000ff7f0000457b020010000000186400000200000000000000ec00000085000000ba00000095000000000000001859000007000000000000000000000018610000070000000000000002000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x1ff, 0x72, &(0x7f0000000540)=""/114, 0x41100, 0x8, '\x00', r3, @fallback=0x21, r6, 0x8, &(0x7f00000005c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000940)=[r4, r1, r4], &(0x7f0000000980)=[{0x4, 0x3, 0xe, 0xa}, {0x4, 0x4, 0xe, 0x4}, {0x4, 0x1, 0xa, 0x2}, {0x3, 0x4, 0x5, 0x7}, {0x3, 0x5, 0x0, 0x1}, {0x4, 0x4, 0x1, 0xc}], 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {0x0, 0x5}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x21, {0xffe0, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r11 = mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x100000a, 0x10010, r6, 0x8000000) r12 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x2000004, 0x10, r4, 0x10000000) r13 = syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000600)='./file0\x00', 0x2805000, &(0x7f0000000ac0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}], [{@dont_hash}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfsdef}, {@fowner_lt={'fowner<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, &(0x7f0000000c00)="4dd42a366ae8aa89e5d3f4178bcf11c9f2b91b154b97c60c8df1d3bc7ecf66a9b2b782b676e0b4667a616dc7f339b2d85ae3fb2e9b8599fc5dac4565b7bf8764415c453e0b0b0ad52c90930a6f4b3ec5d519a83a5121db003ee7d9ae7861a046b9a7bf9a95b484643d3cc3b9b3610057dbcc8f18e2815a9defe88bed1aa6fe7feb") r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r11, r12, &(0x7f0000000e00)=@IORING_OP_STATX={0x15, 0x1, 0x0, r13, &(0x7f0000000cc0), &(0x7f0000000dc0)='./file0\x00', 0x800, 0x5c06d0549f4ce66c, 0x0, {0x0, r14}}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @xdp={0x2c, 0xb, r3, 0x11}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='ipvlan0\x00', 0x5, 0x4, 0x8000}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000180)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x0, 0x0, {0x0, @sctp_ip6_spec={@rand_addr=' \x01\x00', @private2}, {0x0, @random="e48e1fa8d5c5"}, @udp_ip4_spec={@local}, {0x0, @random="098330218876"}}}}) setxattr$smack_xattr_label(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x1) 1m19.170620851s ago: executing program 1 (id=1028): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x110) close(0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 12) 1m18.79746261s ago: executing program 1 (id=1029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x1010051, &(0x7f00000007c0)={[{@auto_da_alloc}, {@noload}, {@errors_remount}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x581340, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xf, 0x0, &(0x7f00000002c0)="1638fe79d55c57f6b1b96d78717bb2", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000003d0007012bbd7000fedbdf25037c00000400c2800c000180080016"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000b40)={&(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x6, 0x5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000b80)=[0x0, r5], 0x40000000000000eb, 0xb9b18b79ebd8a468, 0x0, 0xffffffffffffffff}) openat(r7, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) lseek(r1, 0x5, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000180)={0x4, 0x30314752, 0x2, @discrete={0x213a, 0x7fffffff}}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000780)={r7}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000700)=0x2000) 1m18.782715905s ago: executing program 1 (id=1030): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, 0x0) (fail_nth: 4) 1m18.37717015s ago: executing program 1 (id=1034): socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2$watch_queue(&(0x7f00000002c0), 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x48}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m18.257881783s ago: executing program 35 (id=1034): socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2$watch_queue(&(0x7f00000002c0), 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x48}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m15.067721022s ago: executing program 4 (id=1048): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={0x0}, 0x18) bind$bt_hci(r5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, 0x0, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1m14.800549682s ago: executing program 4 (id=1049): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xffffffff, 0x8000, 0x5c000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value, @void, @value=r0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000003c0), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @loopback}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b00000000000500100005000000080028010045000048b22c73308ab123cf2fd2ba538e56adf4e313b704afe866bc7b798cc4071c98433aca1d4980a62da71a12290293b4849dff28651174b4282ce2b686f7e687b46929142b1ef374c4dc07eb7a01de551070684751ad3ff83c19a7b08196871b894d2ae346ac587c5cc410c4ea77f4622d616fc1a4b1ce09317c"], 0x38}, 0x1, 0xffffa888}, 0x20000880) r6 = io_uring_setup(0x2ead, &(0x7f0000000000)={0x0, 0x959, 0x0, 0xfffffffe, 0x271, 0x0, r0}) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x1, 0x9, 0x6, 0x81, 0xde2, 0x2, 0x21, 0xb0], &(0x7f0000000100), 0x6) syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=") io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) get_mempolicy(&(0x7f0000000280), &(0x7f0000000440), 0x5, &(0x7f00001a9000/0x4000)=nil, 0x3) 1m13.593939113s ago: executing program 4 (id=1055): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x17, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c032fd90c087fea440010028bd5500010000e9ac8dd423599301", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x240088c5}, 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x200, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x59455247}) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/79, 0x4f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x20001}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfd}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) epoll_create1(0x0) 1m12.226409143s ago: executing program 4 (id=1064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000e35a6d41f480ec4600000000000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x2, 0x40) read$FUSE(r5, &(0x7f0000001700)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) fsmount(r8, 0x0, 0x0) fsmount(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r13, {0x5, 0xf}}, './file1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e19f2cbd0730ffdbcf25164000000c000635a600000000000000e2ad554d050b3a553864"], 0x20}, 0x1, 0x7000000, 0x0, 0x4018010}, 0x4000) 1m12.133575127s ago: executing program 4 (id=1065): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x4200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0xffffffffffffc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f00000028c0)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000001800000000000000", @ANYRES32, @ANYBLOB="c2e6be15afa1b816dacc532a1da5d11c709a75bacc91a07bf092e08b74848635615367202b9f1355a149ee0b2fb67858d23d31d0c68a47d70abc4c440518c84be2d2339bc7cb54842347ca47916c1bdf6518669d4f243b0e29baa6bd1785f06320b0cde15c475af1bb51099026350b712c83c04489e729ed34a783f1e582275532391096", @ANYRES64=0x0], 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) read$FUSE(r6, &(0x7f0000002000)={0x2020}, 0x2020) socket$alg(0x26, 0x5, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000001540)=""/113) getsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000140)=0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000002e0003050000040000000000140bcde006000080080000000000000008001f8005a142dc31c5bd77fb2d3ce92d125c8aee493cd07b26e27eb4301dfaa48697d14f8d246154b73a11815e32ee9562e70e079c3067ca4fc5ec51c37ddb6e79460ace2cfc31b1be1b750c339ba607488da6132ff50641a59701aa22763c3cf955a6595ad0139c5ab15db13601162ad01c753a4f5d133348"], 0x24}], 0x1, 0x0, 0x0, 0xc084}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000000180)) 1m11.484952146s ago: executing program 4 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m11.43270711s ago: executing program 36 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 51.921924603s ago: executing program 6 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getrlimit(0xf, &(0x7f00000010c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = fsopen(&(0x7f0000001080)='ufs\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001100)) fsmount(r3, 0x1, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdfc}, 0x70) syz_read_part_table(0x1077, &(0x7f0000000000)="$eJzs0LFNBDEUBNA5zt69EwSkVECBxIg9iQpICSiFlJxmEAQfrY9gGwCS9xJbXx6P5fCvjq/9Nkk9JMfsx+iQtCRzkqfNyX3yUclXzVVV2eX9Osm05jImGbnqVT11t8bvX1o/5OZUrc5G02e1zKefO6dlXa8uR/VbljxPyWOSnt2m+WJslvPrNvoffBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/LrvAAAA//8ghCX8") listen(0xffffffffffffffff, 0x9) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) write$tun(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r10, 0x0, 0x154) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r11, r8, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x3, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, 0x0, 0x0) 50.419371457s ago: executing program 8 (id=1201): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c005a0012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 50.381765703s ago: executing program 6 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0xb0, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeb4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401c4}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xb0}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 50.315552618s ago: executing program 8 (id=1204): setsockopt(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) socket(0x1d, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffe, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x28, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0xffffff1e, 0x2, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = socket(0x33, 0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500000000000000e64e9da5000008000300", @ANYRES32=r10, @ANYBLOB="080005"], 0x24}}, 0x200400c4) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BSS_SELECT={0x44, 0xe3, 0x0, 0x1, {0x40, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0xb3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x9}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9d}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8001}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0xf8}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4008004) 50.219754453s ago: executing program 6 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 49.49640012s ago: executing program 6 (id=1208): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 49.460771297s ago: executing program 7 (id=1209): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 49.423815611s ago: executing program 7 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) listen(r0, 0x2005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000028c0)="f2990e196a679b77", 0x8}, {0x0}], 0x2}}], 0x1, 0x48045) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r0, 0xffffffffffffffff, 0x0) 49.281395707s ago: executing program 8 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x24000894) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 12) 49.277513266s ago: executing program 9 (id=1215): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x36}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96178d1df793eeacfa00ffffffffff0000000500", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "909e8b1c550000000000c6c0f0f950c30000000000ffff00", [0x5, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$TIOCCONS(r1, 0x541d) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a90bd458b32e0194ac86881700"/29}}) 48.897896269s ago: executing program 7 (id=1216): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 48.778034625s ago: executing program 9 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0xb0, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeb4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401c4}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xb0}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 48.777258994s ago: executing program 7 (id=1218): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r3, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {0x0}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x6dd, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x10123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_pidfd_open(r0, 0x0) 48.705862658s ago: executing program 5 (id=1219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 48.70553928s ago: executing program 6 (id=1220): set_mempolicy(0x8006, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000009112c100000000009500000000000000066aa11741b54f547932cdc5206e1dd0e26052269b6869f25c0121bf57e129179861904791f906edd25bb9599d1fc9adda9f79108f3be11e9c3fe6e0d739b56a3b5a4d7854a84205d955c71e5385b509937907d347e785bb34b080b30e640662d5739672d31bce89e4596c7e30069b4745dd472dab6fe90a3a3b8c007b3b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x241, &(0x7f0000000b80)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs$userns(0x0, &(0x7f0000000840)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) 48.642079568s ago: executing program 5 (id=1221): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 48.599445875s ago: executing program 5 (id=1222): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x4}) 48.479643694s ago: executing program 8 (id=1223): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 48.478851867s ago: executing program 7 (id=1224): setsockopt(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) socket(0x1d, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffe, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x28, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0xffffff1e, 0x2, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket(0x33, 0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0500000000000000e64e9da5000008000300", @ANYRES32=r9, @ANYBLOB="080005"], 0x24}}, 0x200400c4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f00000007c0)={[{@utf8}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@check_normal}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@rodir}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x66}}, {@shortname_win95}], [{@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x1, 0x32, 0x32, 0x34, 0x63, 0x32, 0x50, 0x39], 0x2d, [0x65, 0x37, 0x37, 0x39], 0x2d, [0x63, 0x62, 0x30, 0x38], 0x2d, [0x50, 0x37, 0x62, 0x31], 0x2d, [0x37, 0x36, 0x5f, 0x65, 0x34, 0x36, 0x36, 0x34]}}}]}, 0x85, 0x2ff, &(0x7f0000000200)="$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") 48.170531892s ago: executing program 9 (id=1225): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRESDEC=r1, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000400000b00", [0x7, 0xffffffff9673e35d]}}) 48.142871002s ago: executing program 9 (id=1226): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1f}]}, 0x20}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1ea, &(0x7f0000000640)="$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") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @loopback}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfd4b}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x20000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12dc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8a7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x40400c0) listen(r0, 0x10) 47.770177289s ago: executing program 6 (id=1227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x800, 0x45) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000e80)='/', 0x1}, {&(0x7f0000000600)}], 0x2) 47.751196523s ago: executing program 8 (id=1228): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) read(r0, &(0x7f0000000680)=""/254, 0xfe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1}, 0x4) io_uring_enter(0xffffffffffffffff, 0x1, 0x2, 0x4c, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80440) ioctl$CEC_G_MODE(r1, 0x80046108, &(0x7f0000000100)) 47.681896504s ago: executing program 9 (id=1229): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 47.659066282s ago: executing program 9 (id=1230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 47.629872118s ago: executing program 5 (id=1231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 47.575394699s ago: executing program 5 (id=1232): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 47.574905752s ago: executing program 5 (id=1233): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x6a040000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x5aa, &(0x7f0000000a80)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x200) 26.043003768s ago: executing program 7 (id=1234): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x3}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) r1 = gettid() prlimit64(r1, 0xa, &(0x7f0000000080)={0x2, 0x6}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) signalfd4(r4, 0x0, 0x0, 0x100000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r5, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x10002}, {0xa, 0xce23, 0x3, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 22.336735154s ago: executing program 8 (id=1235): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000fff10000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x100}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000003380)=[{&(0x7f0000000040)="00214717a70731163ceb9d0671200000000510000000", 0x16}], 0x1, 0x3, 0x7) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r0}, 0x18) 0s ago: executing program 37 (id=1227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x800, 0x45) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000e80)='/', 0x1}, {&(0x7f0000000600)}], 0x2) kernel console output (not intermixed with test programs): T4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.091029][ T8286] syzkaller0: entered promiscuous mode [ 157.091063][ T8286] syzkaller0: entered allmulticast mode [ 157.155022][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'. [ 157.158750][ T8291] veth1_to_batadv: entered promiscuous mode [ 157.160528][ T8291] veth1_to_batadv: left promiscuous mode [ 157.178280][ T8293] loop5: detected capacity change from 0 to 128 [ 157.182292][ T8293] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.205428][ T8291] tmpfs: Bad value for 'mpol' [ 157.286329][ T8297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.914'. [ 157.353587][ T4715] Bluetooth: hci1: command tx timeout [ 157.369001][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.562158][ T8319] overlayfs: overlapping lowerdir path [ 157.849138][ T8324] fuse: Bad value for 'fd' [ 157.881689][ T8326] binder: 8325:8326 tried to acquire reference to desc 0, got 1 instead [ 157.888272][ T8326] FAULT_INJECTION: forcing a failure. [ 157.888272][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.888306][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: syz.0.921 Tainted: G L syzkaller #0 PREEMPT [ 157.888320][ T8326] Tainted: [L]=SOFTLOCKUP [ 157.888323][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 157.888328][ T8326] Call trace: [ 157.888331][ T8326] show_stack+0x2c/0x3c (C) [ 157.888347][ T8326] __dump_stack+0x30/0x40 [ 157.888358][ T8326] dump_stack_lvl+0xd8/0x12c [ 157.888372][ T8326] dump_stack+0x1c/0x28 [ 157.888382][ T8326] should_fail_ex+0x41c/0x590 [ 157.888392][ T8326] should_fail+0x14/0x24 [ 157.888400][ T8326] should_fail_usercopy+0x20/0x30 [ 157.888409][ T8326] binder_ioctl_write_read+0x7dd8/0x9828 [ 157.888419][ T8326] binder_ioctl+0x438/0x1c38 [ 157.888425][ T8326] __arm64_sys_ioctl+0x14c/0x1c4 [ 157.888436][ T8326] invoke_syscall+0x98/0x244 [ 157.888446][ T8326] el0_svc_common+0xec/0x23c [ 157.888455][ T8326] do_el0_svc+0x4c/0x5c [ 157.888464][ T8326] el0_svc+0x64/0x260 [ 157.888473][ T8326] el0t_64_sync_handler+0x48/0x148 [ 157.888480][ T8326] el0t_64_sync+0x198/0x19c [ 157.888498][ T8326] binder: 8325:8326 ioctl c0306201 20000780 returned -14 [ 157.888699][ T4805] binder: release 8325:8326 transaction 24 out, still active [ 157.918153][ T8329] overlay: Unknown parameter 'dont_hash' [ 157.924013][ T8330] syzkaller0: entered promiscuous mode [ 157.924873][ T8330] syzkaller0: entered allmulticast mode [ 157.927701][ T4805] binder: undelivered TRANSACTION_COMPLETE [ 157.971236][ T4805] binder: send failed reply for transaction 24, target dead [ 158.074190][ T8339] loop0: detected capacity change from 0 to 128 [ 158.117765][ T8339] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.124345][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.151506][ T8337] loop2: detected capacity change from 0 to 128 [ 158.152756][ T8337] EXT4-fs: Ignoring removed nobh option [ 158.157674][ T8337] /dev/loop2: Can't open blockdev [ 158.529529][ T8357] loop4: detected capacity change from 0 to 512 [ 158.539491][ T8357] EXT4-fs: inline encryption not supported [ 158.544447][ T8357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.563602][ T8357] EXT4-fs (loop4): 1 truncate cleaned up [ 158.564044][ T8357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.570668][ T8357] FAULT_INJECTION: forcing a failure. [ 158.570668][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 158.573453][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.4.930 Tainted: G L syzkaller #0 PREEMPT [ 158.573484][ T8357] Tainted: [L]=SOFTLOCKUP [ 158.573488][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 158.573495][ T8357] Call trace: [ 158.573499][ T8357] show_stack+0x2c/0x3c (C) [ 158.573522][ T8357] __dump_stack+0x30/0x40 [ 158.573535][ T8357] dump_stack_lvl+0xd8/0x12c [ 158.573545][ T8357] dump_stack+0x1c/0x28 [ 158.573554][ T8357] should_fail_ex+0x41c/0x590 [ 158.573565][ T8357] should_failslab+0xc4/0x120 [ 158.573575][ T8357] kmem_cache_alloc_noprof+0x8c/0x610 [ 158.573584][ T8357] security_inode_alloc+0x40/0x304 [ 158.573593][ T8357] inode_init_always_gfp+0x704/0xbac [ 158.573603][ T8357] alloc_inode+0x9c/0x198 [ 158.573610][ T8357] iget_locked+0xd8/0x37c [ 158.573619][ T8357] __ext4_iget+0x1c4/0x2e18 [ 158.573627][ T8357] ext4_lookup+0x224/0x5f0 [ 158.573634][ T8357] lookup_one_qstr_excl+0xe8/0x200 [ 158.573643][ T8357] __start_renaming+0x178/0x344 [ 158.573650][ T8357] filename_renameat2+0x500/0x72c [ 158.573659][ T8357] __arm64_sys_renameat2+0xec/0x11c [ 158.573667][ T8357] invoke_syscall+0x98/0x244 [ 158.573677][ T8357] el0_svc_common+0xec/0x23c [ 158.573687][ T8357] do_el0_svc+0x4c/0x5c [ 158.573696][ T8357] el0_svc+0x64/0x260 [ 158.573705][ T8357] el0t_64_sync_handler+0x48/0x148 [ 158.573713][ T8357] el0t_64_sync+0x198/0x19c [ 158.609650][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.626296][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 158.756791][ T8370] loop5: detected capacity change from 0 to 512 [ 158.758442][ T8370] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 158.829013][ T8372] loop4: detected capacity change from 0 to 256 [ 158.831278][ T8372] vfat: Bad value for 'uni_xlate' [ 159.597234][ T4704] udevd[4704]: incorrect ext4 checksum on /dev/loop5 [ 159.638292][ T4711] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.645394][ T8374] loop5: detected capacity change from 0 to 1024 [ 159.676441][ T8374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.688925][ T8374] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 35: comm syz.5.935: bad entry in directory: directory entry overrun - offset=3200, inode=0, rec_len=1024, size=1024 fake=0 [ 159.778164][ T8379] syzkaller0: entered promiscuous mode [ 159.778194][ T8379] syzkaller0: entered allmulticast mode [ 159.786650][ T8380] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.973136][ T8386] FAULT_INJECTION: forcing a failure. [ 159.973136][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 159.973169][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.0.940 Tainted: G L syzkaller #0 PREEMPT [ 159.973184][ T8386] Tainted: [L]=SOFTLOCKUP [ 159.973187][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 159.973192][ T8386] Call trace: [ 159.973195][ T8386] show_stack+0x2c/0x3c (C) [ 159.973212][ T8386] __dump_stack+0x30/0x40 [ 159.973223][ T8386] dump_stack_lvl+0xd8/0x12c [ 159.973233][ T8386] dump_stack+0x1c/0x28 [ 159.973242][ T8386] should_fail_ex+0x41c/0x590 [ 159.973252][ T8386] should_failslab+0xc4/0x120 [ 159.973260][ T8386] __kmalloc_node_track_caller_noprof+0x100/0x748 [ 159.973270][ T8386] kstrndup+0x84/0x154 [ 159.973279][ T8386] smk_parse_smack+0x50/0x78 [ 159.973286][ T8386] smk_import_entry+0x28/0x64 [ 159.973293][ T8386] smk_fetch+0xf8/0x154 [ 159.973303][ T8386] smack_d_instantiate+0x5c0/0x7a0 [ 159.973312][ T8386] security_d_instantiate+0xf8/0x1dc [ 159.973323][ T8386] d_splice_alias_ops+0x74/0x314 [ 159.973331][ T8386] d_splice_alias+0x2c/0x3c [ 159.973338][ T8386] ovl_lookup+0x560/0x162c [ 159.973348][ T8386] lookup_one_qstr_excl+0xe8/0x200 [ 159.973357][ T8386] __start_renaming+0x178/0x344 [ 159.973365][ T8386] filename_renameat2+0x500/0x72c [ 159.973379][ T8386] __arm64_sys_renameat2+0xec/0x11c [ 159.973387][ T8386] invoke_syscall+0x98/0x244 [ 159.973397][ T8386] el0_svc_common+0xec/0x23c [ 159.973407][ T8386] do_el0_svc+0x4c/0x5c [ 159.973416][ T8386] el0_svc+0x64/0x260 [ 159.973424][ T8386] el0t_64_sync_handler+0x48/0x148 [ 159.973432][ T8386] el0t_64_sync+0x198/0x19c [ 160.029091][ T8183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.064672][ T8388] IPVS: lc: FWM 3 0x00000003 - no destination available [ 160.066083][ T4388] IPVS: starting estimator thread 0... [ 160.103570][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.104783][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.105109][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.105457][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.105683][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.128633][ T4725] Bluetooth: hci0: command 0x0406 tx timeout [ 160.129682][ T8183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.166221][ T8390] IPVS: using max 58 ests per chain, 139200 per kthread [ 160.199349][ T8183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.201848][ T8393] lo speed is unknown, defaulting to 1000 [ 160.234321][ T8283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.256742][ T7931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.287098][ T8183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.309391][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.945'. [ 160.311135][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.945'. [ 160.320177][ T8409] gretap0: entered promiscuous mode [ 160.327837][ T8409] gretap0: left promiscuous mode [ 160.330239][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'. [ 160.330273][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'. [ 160.337989][ T8412] syz_tun: entered promiscuous mode [ 160.339105][ T8412] syz_tun: left promiscuous mode [ 160.364736][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.945'. [ 160.364773][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.945'. [ 160.373041][ T8416] gretap0: entered promiscuous mode [ 160.375926][ T8416] gretap0: left promiscuous mode [ 160.386213][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'. [ 160.386269][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'. [ 160.393427][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.395386][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.395576][ T8393] bridge_slave_0: entered allmulticast mode [ 160.396054][ T8393] bridge_slave_0: entered promiscuous mode [ 160.406139][ T8417] syz_tun: entered promiscuous mode [ 160.406693][ T8417] syz_tun: left promiscuous mode [ 160.423328][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.424955][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.425064][ T8393] bridge_slave_1: entered allmulticast mode [ 160.425556][ T8393] bridge_slave_1: entered promiscuous mode [ 160.474871][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.477066][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.520020][ T8393] team0: Port device team_slave_0 added [ 160.521551][ T8393] team0: Port device team_slave_1 added [ 160.535311][ T8419] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.589074][ T8423] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 160.963995][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.074015][ T8183] bridge_slave_1: left allmulticast mode [ 161.074055][ T8183] bridge_slave_1: left promiscuous mode [ 161.074166][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.087481][ T8183] bridge_slave_0: left allmulticast mode [ 161.087520][ T8183] bridge_slave_0: left promiscuous mode [ 161.087600][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.099889][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 161.123410][ T8438] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 161.124319][ T8438] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 161.393671][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.394923][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.618598][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.647664][ T8183] erspan0 (unregistering): left promiscuous mode [ 161.658958][ T8183] gretap0 (unregistering): left promiscuous mode [ 162.064673][ T8183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.086700][ T8183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.112807][ T8183] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 162.122334][ T8183] bond0 (unregistering): Released all slaves [ 162.129836][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.130142][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.130165][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.132127][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.132135][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.132147][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.150035][ T8393] hsr_slave_0: entered promiscuous mode [ 162.150387][ T8393] hsr_slave_1: entered promiscuous mode [ 162.150584][ T8393] debugfs: 'hsr0' already exists in 'hsr' [ 162.150601][ T8393] Cannot create hsr debugfs directory [ 162.150977][ T8436] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.295207][ T4715] Bluetooth: hci3: command tx timeout [ 163.564782][ T8393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.857678][ T8465] Invalid logical block size (3) [ 163.881916][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.892827][ T8393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.906123][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.178073][ T8475] set_capacity_and_notify: 3 callbacks suppressed [ 164.178118][ T8475] loop5: detected capacity change from 0 to 128 [ 164.202456][ T8475] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.256390][ T8393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.259076][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.259413][ T8393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.260427][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.275735][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.277079][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.964'. [ 164.593672][ T4715] Bluetooth: hci3: command tx timeout [ 164.683147][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.705131][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.737053][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.737097][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.737704][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.737732][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.748994][ T8183] hsr_slave_0: left promiscuous mode [ 164.750295][ T8183] hsr_slave_1: left promiscuous mode [ 164.751561][ T8183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.752977][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.756475][ T8183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.757979][ T8183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.765241][ T8183] veth1_macvtap: left promiscuous mode [ 164.766722][ T8183] veth0_macvtap: left promiscuous mode [ 164.767757][ T8183] veth1_vlan: left promiscuous mode [ 164.768986][ T8183] veth0_vlan: left promiscuous mode [ 164.883877][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.897639][ T8525] loop4: detected capacity change from 0 to 128 [ 164.910376][ T8528] FAULT_INJECTION: forcing a failure. [ 164.910376][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.910408][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.5.968 Tainted: G L syzkaller #0 PREEMPT [ 164.910424][ T8528] Tainted: [L]=SOFTLOCKUP [ 164.910427][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 164.910433][ T8528] Call trace: [ 164.910436][ T8528] show_stack+0x2c/0x3c (C) [ 164.910455][ T8528] __dump_stack+0x30/0x40 [ 164.910467][ T8528] dump_stack_lvl+0xd8/0x12c [ 164.910477][ T8528] dump_stack+0x1c/0x28 [ 164.910486][ T8528] should_fail_ex+0x41c/0x590 [ 164.910497][ T8528] should_fail+0x14/0x24 [ 164.910504][ T8528] should_fail_usercopy+0x20/0x30 [ 164.910513][ T8528] _inline_copy_from_user+0x3c/0x174 [ 164.910522][ T8528] copy_msghdr_from_user+0xb8/0x194 [ 164.910530][ T8528] ___sys_sendmsg+0x14c/0x224 [ 164.910536][ T8528] __sys_sendmsg+0x160/0x214 [ 164.910543][ T8528] __arm64_sys_sendmsg+0x80/0x94 [ 164.910550][ T8528] invoke_syscall+0x98/0x244 [ 164.910560][ T8528] el0_svc_common+0xec/0x23c [ 164.910569][ T8528] do_el0_svc+0x4c/0x5c [ 164.910578][ T8528] el0_svc+0x64/0x260 [ 164.910586][ T8528] el0t_64_sync_handler+0x48/0x148 [ 164.910594][ T8528] el0t_64_sync+0x198/0x19c [ 164.940643][ T8525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.949915][ T8531] loop5: detected capacity change from 0 to 512 [ 165.011341][ T8531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.051906][ T8183] team0 (unregistering): Port device team_slave_1 removed [ 165.055813][ T8183] team0 (unregistering): Port device team_slave_0 removed [ 165.346160][ T7931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.465553][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 165.467031][ T8529] syzkaller0: entered promiscuous mode [ 165.467074][ T8529] syzkaller0: entered allmulticast mode [ 165.485168][ T8548] loop0: detected capacity change from 0 to 1024 [ 165.486746][ T8548] EXT4-fs: Ignoring removed bh option [ 165.501328][ T8548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.507483][ T8548] fuse: Bad value for 'fd' [ 165.562941][ T4711] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /194/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 165.572640][ T4711] EXT4-fs (loop0): Remounting filesystem read-only [ 165.733755][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 165.733801][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 165.821543][ T8553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.870928][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.930541][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 166.056160][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 166.056205][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 166.084299][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.150399][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.151702][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.152906][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.154069][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.154299][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.322809][ T8393] veth0_vlan: entered promiscuous mode [ 166.329810][ T8393] veth1_vlan: entered promiscuous mode [ 166.367871][ T8393] veth0_macvtap: entered promiscuous mode [ 166.374946][ T8393] veth1_macvtap: entered promiscuous mode [ 166.411849][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.447143][ T8624] xt_NFQUEUE: number of total queues is 0 [ 166.449138][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.528662][ T8194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.528772][ T8194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.528878][ T8194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.528963][ T8194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.544075][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 166.569732][ T8188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.569761][ T8188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.599895][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 166.603857][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.603890][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.617923][ T8598] lo speed is unknown, defaulting to 1000 [ 166.803856][ T4715] Bluetooth: hci3: command tx timeout [ 166.855454][ T8655] loop4: detected capacity change from 0 to 128 [ 166.864732][ T8655] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.879777][ T8658] netlink: 36 bytes leftover after parsing attributes in process `syz.6.988'. [ 166.949938][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.958169][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.959764][ T8598] bridge_slave_0: entered allmulticast mode [ 166.962904][ T8598] bridge_slave_0: entered promiscuous mode [ 166.968878][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.968941][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.969041][ T8598] bridge_slave_1: entered allmulticast mode [ 166.969487][ T8598] bridge_slave_1: entered promiscuous mode [ 166.986698][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.231059][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.278504][ T8598] team0: Port device team_slave_0 added [ 167.279360][ T8598] team0: Port device team_slave_1 added [ 167.290914][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.293077][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.297503][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.299942][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.301405][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.306144][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.325836][ T8598] hsr_slave_0: entered promiscuous mode [ 167.327766][ T8598] hsr_slave_1: entered promiscuous mode [ 167.329267][ T8598] debugfs: 'hsr0' already exists in 'hsr' [ 167.330505][ T8598] Cannot create hsr debugfs directory [ 167.415163][ T8598] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 167.680444][ T8598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.682265][ T8598] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 167.684838][ T8598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.686761][ T8598] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 167.687992][ T8598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.690873][ T8598] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 167.693805][ T8598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.720978][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.721024][ T8598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.763565][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.767722][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.775030][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.777886][ T3196] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.777941][ T3196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.789061][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.789089][ T8183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.801694][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.879384][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 167.879411][ T8704] binder: 8702:8704 ioctl 4018620d 20004a80 returned -16 [ 167.884223][ T8704] binder: 8702:8704 got transaction to invalid handle, 1 [ 167.884253][ T8704] binder: 8702:8704 cannot find target node [ 167.884277][ T8704] binder: 8702:8704 transaction call to 0:0 failed 27/29201/-22, code 0 size 0-0 line 3236 [ 167.884338][ T8703] binder: tried to use weak ref as strong ref [ 167.884344][ T8703] binder: 8702:8703 Acquire 1 refcount change on invalid ref 0 ret -22 [ 167.886210][ T8704] binder: 8702:8704 ERROR: BC_REGISTER_LOOPER called without request [ 167.886270][ T8703] binder: 8702:8703 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.886281][ T8703] binder: 8703 RLIMIT_NICE not set [ 168.408932][ T8725] loop5: detected capacity change from 0 to 128 [ 168.419034][ T4715] Bluetooth: hci0: command tx timeout [ 168.524539][ T8725] netlink: 2 bytes leftover after parsing attributes in process `syz.5.997'. [ 169.010098][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.043688][ T8731] lo speed is unknown, defaulting to 1000 [ 169.068189][ T4715] Bluetooth: hci3: command tx timeout [ 169.321658][ T8744] loop6: detected capacity change from 0 to 128 [ 169.346408][ T8744] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.126201][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.297554][ T8393] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.333096][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 170.619246][ T4715] Bluetooth: hci0: command tx timeout [ 170.637761][ T8785] loop1: detected capacity change from 0 to 4096 [ 170.648583][ T8785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.722787][ T6982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.735190][ T8598] veth0_vlan: entered promiscuous mode [ 170.747985][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 170.750162][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 170.797968][ T8803] syz_tun: entered promiscuous mode [ 170.798538][ T8803] syz_tun: left promiscuous mode [ 170.803021][ T8598] veth1_vlan: entered promiscuous mode [ 170.809584][ T8804] syz_tun: entered promiscuous mode [ 170.810690][ T8804] syz_tun: left promiscuous mode [ 170.817421][ T8598] veth0_macvtap: entered promiscuous mode [ 170.820569][ T8598] veth1_macvtap: entered promiscuous mode [ 170.825038][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.828509][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.832596][ T1251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.832634][ T1251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.832657][ T1251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.832671][ T1251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.152724][ T8193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.152755][ T8193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.165477][ T8809] FAULT_INJECTION: forcing a failure. [ 171.165477][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.165515][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.5.1012 Tainted: G L syzkaller #0 PREEMPT [ 171.165531][ T8809] Tainted: [L]=SOFTLOCKUP [ 171.165534][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 171.165539][ T8809] Call trace: [ 171.165542][ T8809] show_stack+0x2c/0x3c (C) [ 171.165561][ T8809] __dump_stack+0x30/0x40 [ 171.165571][ T8809] dump_stack_lvl+0xd8/0x12c [ 171.165581][ T8809] dump_stack+0x1c/0x28 [ 171.165590][ T8809] should_fail_ex+0x41c/0x590 [ 171.165599][ T8809] should_fail+0x14/0x24 [ 171.165607][ T8809] should_fail_usercopy+0x20/0x30 [ 171.165616][ T8809] _inline_copy_from_user+0x3c/0x174 [ 171.165625][ T8809] copy_msghdr_from_user+0xb8/0x194 [ 171.165632][ T8809] ___sys_recvmsg+0x11c/0x1f4 [ 171.165639][ T8809] do_recvmmsg+0x294/0x7e8 [ 171.165646][ T8809] __sys_recvmmsg+0x1e0/0x270 [ 171.165653][ T8809] __arm64_sys_recvmmsg+0xdc/0x104 [ 171.165660][ T8809] invoke_syscall+0x98/0x244 [ 171.165670][ T8809] el0_svc_common+0xec/0x23c [ 171.165679][ T8809] do_el0_svc+0x4c/0x5c [ 171.165688][ T8809] el0_svc+0x64/0x260 [ 171.165697][ T8809] el0t_64_sync_handler+0x48/0x148 [ 171.165704][ T8809] el0t_64_sync+0x198/0x19c [ 171.193507][ T8811] __nla_validate_parse: 2 callbacks suppressed [ 171.194538][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.196017][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.218472][ T8811] syz_tun: entered promiscuous mode [ 171.221205][ T8811] syz_tun: left promiscuous mode [ 171.250466][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.250510][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.253742][ T8193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.253777][ T8193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.261134][ T8816] syz_tun: entered promiscuous mode [ 171.262232][ T8816] syz_tun: left promiscuous mode [ 171.450253][ T8813] syzkaller1: entered promiscuous mode [ 171.450299][ T8813] syzkaller1: entered allmulticast mode [ 172.200993][ T8829] loop5: detected capacity change from 0 to 128 [ 172.213138][ T8829] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.685113][ T8843] FAULT_INJECTION: forcing a failure. [ 172.685113][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 172.685148][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.1.1023 Tainted: G L syzkaller #0 PREEMPT [ 172.685163][ T8843] Tainted: [L]=SOFTLOCKUP [ 172.685167][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 172.685176][ T8843] Call trace: [ 172.685179][ T8843] show_stack+0x2c/0x3c (C) [ 172.685199][ T8843] __dump_stack+0x30/0x40 [ 172.685211][ T8843] dump_stack_lvl+0xd8/0x12c [ 172.685221][ T8843] dump_stack+0x1c/0x28 [ 172.685230][ T8843] should_fail_ex+0x41c/0x590 [ 172.685240][ T8843] should_failslab+0xc4/0x120 [ 172.685248][ T8843] __kmalloc_noprof+0x100/0x6f0 [ 172.685257][ T8843] tomoyo_encode2+0x10c/0x330 [ 172.685268][ T8843] tomoyo_encode+0x34/0x50 [ 172.685278][ T8843] tomoyo_realpath_from_path+0x488/0x4dc [ 172.685288][ T8843] tomoyo_path_number_perm+0x1f0/0x500 [ 172.685298][ T8843] tomoyo_file_ioctl+0x2c/0x3c [ 172.685305][ T8843] security_file_ioctl+0xdc/0x2b0 [ 172.685315][ T8843] __arm64_sys_ioctl+0xa8/0x1c4 [ 172.685326][ T8843] invoke_syscall+0x98/0x244 [ 172.685336][ T8843] el0_svc_common+0xec/0x23c [ 172.685345][ T8843] do_el0_svc+0x4c/0x5c [ 172.685354][ T8843] el0_svc+0x64/0x260 [ 172.685363][ T8843] el0t_64_sync_handler+0x48/0x148 [ 172.685370][ T8843] el0t_64_sync+0x198/0x19c [ 172.685396][ T8843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.900714][ T4715] Bluetooth: hci0: command tx timeout [ 173.724008][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.782421][ T8854] xt_NFQUEUE: number of total queues is 0 [ 174.249067][ T8874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.249097][ T8874] IPv6: NLM_F_CREATE should be set when creating new route [ 174.276874][ T8878] loop1: detected capacity change from 0 to 512 [ 174.279057][ T8878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.280957][ T8878] EXT4-fs: Mount option(s) incompatible with ext2 [ 174.284096][ T8878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.502876][ T8890] loop7: detected capacity change from 0 to 256 [ 174.506503][ T8890] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.518850][ T30] audit: type=1326 audit(166.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8889 comm="syz.7.1032" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d577b68 code=0x0 [ 174.545855][ T8892] misc userio: Invalid payload size [ 174.767431][ T8188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.776700][ T8897] loop5: detected capacity change from 0 to 128 [ 174.784049][ T8897] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.896256][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.901820][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.904802][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.132625][ T8188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.134770][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.136434][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.137948][ T4725] Bluetooth: hci0: command tx timeout [ 175.200483][ T8188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.238306][ T8901] lo speed is unknown, defaulting to 1000 [ 175.282801][ T8188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.346108][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.346196][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.346558][ T8901] bridge_slave_0: entered allmulticast mode [ 175.347435][ T8901] bridge_slave_0: entered promiscuous mode [ 175.348500][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.348548][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.348607][ T8901] bridge_slave_1: entered allmulticast mode [ 175.349069][ T8901] bridge_slave_1: entered promiscuous mode [ 175.362077][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.364380][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.391324][ T8901] team0: Port device team_slave_0 added [ 175.403160][ T8901] team0: Port device team_slave_1 added [ 175.447778][ T8920] netlink: 'syz.7.1037': attribute type 1 has an invalid length. [ 175.795216][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.831390][ T8188] bridge_slave_1: left allmulticast mode [ 175.831433][ T8188] bridge_slave_1: left promiscuous mode [ 175.831649][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.836791][ T8188] bridge_slave_0: left allmulticast mode [ 175.837851][ T8188] bridge_slave_0: left promiscuous mode [ 175.839183][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.207833][ T8188] erspan0 (unregistering): left promiscuous mode [ 176.212810][ T8188] gretap0 (unregistering): left promiscuous mode [ 176.246731][ T8188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.266457][ T8188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.310229][ T8188] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 176.320309][ T8188] bond0 (unregistering): Released all slaves [ 176.327067][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.327095][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.327117][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.338979][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.339001][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.339016][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.369852][ T8901] hsr_slave_0: entered promiscuous mode [ 176.376566][ T8901] hsr_slave_1: entered promiscuous mode [ 176.377086][ T8901] debugfs: 'hsr0' already exists in 'hsr' [ 176.377099][ T8901] Cannot create hsr debugfs directory [ 176.486813][ T8940] loop6: detected capacity change from 0 to 128 [ 177.534137][ T4725] Bluetooth: hci2: command tx timeout [ 177.650899][ T8901] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 177.655381][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.655969][ T8901] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 177.660412][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.660868][ T8901] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 177.667287][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.668511][ T8901] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 177.671557][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.792009][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 177.941682][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 177.944641][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 177.944689][ T8971] netlink: 'syz.4.1044': attribute type 7 has an invalid length. [ 177.944705][ T8971] netlink: 'syz.4.1044': attribute type 14 has an invalid length. [ 178.024112][ T8188] hsr_slave_0: left promiscuous mode [ 178.027010][ T8188] hsr_slave_1: left promiscuous mode [ 178.027316][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.027336][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.032577][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.035091][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.040269][ T8982] misc userio: Invalid payload size [ 178.050838][ T8188] vlan0: left promiscuous mode [ 178.051084][ T8188] veth1_macvtap: left promiscuous mode [ 178.051118][ T8188] veth0_macvtap: left promiscuous mode [ 178.051158][ T8188] veth1_vlan: left promiscuous mode [ 178.051179][ T8188] veth0_vlan: left promiscuous mode [ 178.166925][ T8188] team0 (unregistering): Port device team_slave_1 removed [ 178.186630][ T8188] team0 (unregistering): Port device team_slave_0 removed [ 178.254934][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 178.256296][ T4923] lo speed is unknown, defaulting to 1000 [ 178.256317][ T4923] syz2: Port: 1 Link DOWN [ 178.262078][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.266864][ T8901] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.271245][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.271299][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.274751][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.274809][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.476879][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.511166][ T9011] loop4: detected capacity change from 0 to 32768 [ 178.543818][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 178.558776][ T9011] loop4: p1 p2 p3 [ 178.616154][ T8901] veth0_vlan: entered promiscuous mode [ 178.624810][ T8901] veth1_vlan: entered promiscuous mode [ 178.660051][ T8901] veth0_macvtap: entered promiscuous mode [ 178.664182][ T8901] veth1_macvtap: entered promiscuous mode [ 178.670511][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.675287][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.691032][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.691083][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.691163][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.691253][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.752117][ T8188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.754165][ T8188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.775869][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.775905][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.785376][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 178.827304][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1036'. [ 178.827345][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1036'. [ 178.828712][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1036'. [ 178.828730][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1036'. [ 178.933252][ T9050] FAULT_INJECTION: forcing a failure. [ 178.933252][ T9050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.933289][ T9050] CPU: 1 UID: 0 PID: 9050 Comm: syz.8.1051 Tainted: G L syzkaller #0 PREEMPT [ 178.933305][ T9050] Tainted: [L]=SOFTLOCKUP [ 178.933309][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 178.933317][ T9050] Call trace: [ 178.933320][ T9050] show_stack+0x2c/0x3c (C) [ 178.933344][ T9050] __dump_stack+0x30/0x40 [ 178.933356][ T9050] dump_stack_lvl+0xd8/0x12c [ 178.933366][ T9050] dump_stack+0x1c/0x28 [ 178.933380][ T9050] should_fail_ex+0x41c/0x590 [ 178.933390][ T9050] should_fail_alloc_page+0xec/0x10c [ 178.933399][ T9050] prepare_alloc_pages+0x194/0x4a4 [ 178.933408][ T9050] __alloc_frozen_pages_noprof+0x134/0x320 [ 178.933417][ T9050] __alloc_pages_noprof+0x18/0x100 [ 178.933425][ T9050] alloc_pages_bulk_noprof+0x570/0x73c [ 178.933434][ T9050] __kasan_populate_vmalloc+0xc0/0x1d0 [ 178.933444][ T9050] alloc_vmap_area+0xdf4/0x13e8 [ 178.933454][ T9050] __get_vm_area_node+0x210/0x32c [ 178.933463][ T9050] __vmalloc_node_range_noprof+0x2c8/0x105c [ 178.933473][ T9050] __vmalloc_node_noprof+0xec/0x14c [ 178.933482][ T9050] __vmalloc_noprof+0x64/0x8c [ 178.933491][ T9050] bpf_prog_alloc_no_stats+0x60/0x488 [ 178.933502][ T9050] bpf_prog_alloc+0x48/0x110 [ 178.933511][ T9050] bpf_prog_load+0x564/0x1448 [ 178.933521][ T9050] __sys_bpf+0x3f4/0x5f0 [ 178.933530][ T9050] __arm64_sys_bpf+0x80/0x98 [ 178.933539][ T9050] invoke_syscall+0x98/0x244 [ 178.933549][ T9050] el0_svc_common+0xec/0x23c [ 178.933558][ T9050] do_el0_svc+0x4c/0x5c [ 178.933567][ T9050] el0_svc+0x64/0x260 [ 178.933575][ T9050] el0t_64_sync_handler+0x48/0x148 [ 178.933583][ T9050] el0t_64_sync+0x198/0x19c [ 178.933607][ T9050] syz.8.1051: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 178.933641][ T9050] CPU: 1 UID: 0 PID: 9050 Comm: syz.8.1051 Tainted: G L syzkaller #0 PREEMPT [ 178.933651][ T9050] Tainted: [L]=SOFTLOCKUP [ 178.933654][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 178.933658][ T9050] Call trace: [ 178.933660][ T9050] show_stack+0x2c/0x3c (C) [ 178.933669][ T9050] __dump_stack+0x30/0x40 [ 178.933679][ T9050] dump_stack_lvl+0xd8/0x12c [ 178.933688][ T9050] dump_stack+0x1c/0x28 [ 178.933697][ T9050] warn_alloc+0x1bc/0x2dc [ 178.933705][ T9050] __vmalloc_node_range_noprof+0x2e8/0x105c [ 178.933715][ T9050] __vmalloc_node_noprof+0xec/0x14c [ 178.933724][ T9050] __vmalloc_noprof+0x64/0x8c [ 178.933733][ T9050] bpf_prog_alloc_no_stats+0x60/0x488 [ 178.933743][ T9050] bpf_prog_alloc+0x48/0x110 [ 178.933752][ T9050] bpf_prog_load+0x564/0x1448 [ 178.933762][ T9050] __sys_bpf+0x3f4/0x5f0 [ 178.933771][ T9050] __arm64_sys_bpf+0x80/0x98 [ 178.933779][ T9050] invoke_syscall+0x98/0x244 [ 178.933789][ T9050] el0_svc_common+0xec/0x23c [ 178.933798][ T9050] do_el0_svc+0x4c/0x5c [ 178.933807][ T9050] el0_svc+0x64/0x260 [ 178.933814][ T9050] el0t_64_sync_handler+0x48/0x148 [ 178.933821][ T9050] el0t_64_sync+0x198/0x19c [ 178.933829][ T9050] Mem-Info: [ 178.933834][ T9050] active_anon:4113 inactive_anon:17454 isolated_anon:0 [ 178.933834][ T9050] active_file:2932 inactive_file:4558 isolated_file:0 [ 178.933834][ T9050] unevictable:768 dirty:232 writeback:0 [ 178.933834][ T9050] slab_reclaimable:9412 slab_unreclaimable:98007 [ 178.933834][ T9050] mapped:36610 shmem:10948 pagetables:1313 [ 178.933834][ T9050] sec_pagetables:0 bounce:0 [ 178.933834][ T9050] kernel_misc_reclaimable:0 [ 178.933834][ T9050] free:1456561 free_pcp:10131 free_cma:7616 [ 178.933856][ T9050] Node 0 active_anon:16452kB inactive_anon:69816kB active_file:11728kB inactive_file:18232kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:146440kB dirty:928kB writeback:0kB shmem:43792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:10824kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.933876][ T9050] Node 0 DMA free:3077888kB boost:0kB min:20352kB low:25440kB high:30528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 178.933898][ T9050] lowmem_reserve[]: 0 0 3652 3652 3652 [ 178.933915][ T9050] Node 0 Normal free:2748356kB boost:0kB min:24700kB low:30872kB high:37044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16452kB inactive_anon:69816kB active_file:11728kB inactive_file:18232kB unevictable:3072kB writepending:928kB zspages:0kB present:5242880kB managed:3740468kB mlocked:0kB bounce:0kB free_pcp:40524kB local_pcp:16876kB free_cma:0kB [ 178.933938][ T9050] lowmem_reserve[]: 0 0 0 0 0 [ 178.933954][ T9050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 178.934010][ T9050] Node 0 Normal: 3081*4kB (UM) 2052*8kB (UE) 987*16kB (UM) 786*32kB (UE) 325*64kB (UME) 102*128kB (UE) 57*256kB (UM) 51*512kB (UM) 31*1024kB (UME) 16*2048kB (UME) 620*4096kB (M) = 2748276kB [ 178.934082][ T9050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.934089][ T9050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 178.934096][ T9050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 178.934102][ T9050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 178.934108][ T9050] 18435 total pagecache pages [ 178.934111][ T9050] 0 pages in swap cache [ 178.934114][ T9050] Free swap = 124996kB [ 178.934118][ T9050] Total swap = 124996kB [ 178.934121][ T9050] 2097152 pages RAM [ 178.934124][ T9050] 0 pages HighMem/MovableOnly [ 178.934127][ T9050] 391987 pages reserved [ 178.934130][ T9050] 8192 pages cma reserved [ 178.934133][ T9050] 9 pages hwpoisoned [ 179.004785][ T9055] loop8: detected capacity change from 0 to 128 [ 179.089403][ T9055] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.101809][ T8901] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.722384][ T4725] Bluetooth: hci2: command tx timeout [ 180.848217][ T9090] loop6: detected capacity change from 0 to 128 [ 180.887533][ T9090] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.922747][ T9098] misc userio: Invalid payload size [ 181.244159][ T9103] overlayfs: overlapping lowerdir path [ 181.714825][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.716076][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.717138][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.718478][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.718755][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.738658][ T3777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.764459][ T8393] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.584855][ T4715] Bluetooth: hci2: command tx timeout [ 182.609386][ T9116] netlink: 172 bytes leftover after parsing attributes in process `syz.8.1070'. [ 182.614569][ T9116] netlink: 172 bytes leftover after parsing attributes in process `syz.8.1070'. [ 182.634125][ T3777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.082234][ T9124] netlink: 'syz.7.1068': attribute type 10 has an invalid length. [ 183.082274][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1068'. [ 183.198559][ T9124] dummy0: entered promiscuous mode [ 183.198597][ T9124] dummy0: entered allmulticast mode [ 183.199611][ T9124] bridge0: port 3(dummy0) entered blocking state [ 183.199657][ T9124] bridge0: port 3(dummy0) entered disabled state [ 183.200547][ T9124] bridge0: port 3(dummy0) entered blocking state [ 183.200607][ T9124] bridge0: port 3(dummy0) entered forwarding state [ 183.288973][ T3777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.341351][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1075'. [ 183.345988][ T4715] block nbd2: Receive control failed (result -32) [ 183.345989][ T4725] block nbd2: Receive control failed (result -32) [ 183.364701][ T9148] __nla_validate_parse: 1 callbacks suppressed [ 183.364746][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 183.367634][ T3777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.615830][ T9179] netlink: 'syz.5.1083': attribute type 11 has an invalid length. [ 183.683653][ T9188] overlayfs: overlapping lowerdir path [ 183.896711][ T3777] batman_adv: batadv0: Interface deactivated: geneve2 [ 183.970711][ T4715] Bluetooth: hci4: command tx timeout [ 184.009500][ T3777] batman_adv: batadv0: Removing interface: geneve2 [ 184.125414][ T3777] bond0 (unregistering): Released all slaves [ 184.128333][ T3777] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 184.161568][ T3777] bond1 (unregistering): Released all slaves [ 184.295328][ T9212] loop5: detected capacity change from 0 to 512 [ 184.298398][ T9212] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.322964][ T9212] EXT4-fs (loop5): invalid journal inode [ 184.323040][ T9212] EXT4-fs (loop5): can't get journal size [ 184.326976][ T9212] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.1086: blocks 4-4 from inode overlap system zone [ 184.327021][ T9212] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 184.329329][ T9212] EXT4-fs (loop5): Remounting filesystem read-only [ 184.329365][ T9212] EXT4-fs (loop5): failed to initialize system zone (-117) [ 184.329493][ T9212] EXT4-fs (loop5): mount failed [ 184.416319][ T9212] loop5: detected capacity change from 0 to 4096 [ 184.433757][ T9212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.504055][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.504102][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.504194][ T9107] bridge_slave_0: entered allmulticast mode [ 184.512188][ T9107] bridge_slave_0: entered promiscuous mode [ 184.513989][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.514028][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.514106][ T9107] bridge_slave_1: entered allmulticast mode [ 184.514546][ T9107] bridge_slave_1: entered promiscuous mode [ 184.644613][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.649703][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1089'. [ 184.658959][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.660851][ T9245] vlan2: entered allmulticast mode [ 184.660871][ T9245] bond_slave_1: entered allmulticast mode [ 184.661898][ T7931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.855954][ T4715] Bluetooth: hci2: command tx timeout [ 184.998681][ T3777] hsr_slave_0: left promiscuous mode [ 184.999231][ T3777] hsr_slave_1: left promiscuous mode [ 185.013539][ T3777] veth1_vlan: left promiscuous mode [ 185.014841][ T3777] veth0_vlan: left promiscuous mode [ 185.389487][ T9267] loop5: detected capacity change from 0 to 128 [ 185.395426][ T9267] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.473678][ T9107] team0: Port device team_slave_0 added [ 185.474712][ T9107] team0: Port device team_slave_1 added [ 185.484480][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.485856][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.499508][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.501880][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.501889][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.501906][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.539293][ T9107] hsr_slave_0: entered promiscuous mode [ 185.539678][ T9107] hsr_slave_1: entered promiscuous mode [ 185.539891][ T9107] debugfs: 'hsr0' already exists in 'hsr' [ 185.539901][ T9107] Cannot create hsr debugfs directory [ 185.611971][ T9107] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 185.613128][ T9107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.613516][ T9107] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 185.625477][ T9107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.625830][ T9107] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 185.628036][ T9107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.633901][ T9107] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 185.636674][ T9107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.690011][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.690772][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 185.699647][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.705688][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.705737][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.710322][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.710364][ T8188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.871275][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.886030][ T4715] Bluetooth: hci5: command 0x1003 tx timeout [ 185.887778][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.923354][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 185.969563][ T9107] veth0_vlan: entered promiscuous mode [ 185.972013][ T9107] veth1_vlan: entered promiscuous mode [ 185.982208][ T9107] veth0_macvtap: entered promiscuous mode [ 185.984099][ T9107] veth1_macvtap: entered promiscuous mode [ 186.010372][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.020782][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.027420][ T1058] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.027464][ T1058] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.027496][ T1058] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.027517][ T1058] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.045581][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1096'. [ 186.045625][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1096'. [ 186.049938][ T9329] gretap0: entered promiscuous mode [ 186.051047][ T9329] gretap0: left promiscuous mode [ 186.093674][ T8193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.093701][ T8193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.111857][ T8193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.111884][ T8193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.143912][ T9337] loop8: detected capacity change from 0 to 128 [ 186.148062][ T9337] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.226472][ T4725] Bluetooth: hci4: command tx timeout [ 186.245493][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 186.529042][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.668583][ T9363] overlayfs: overlapping lowerdir path [ 186.683859][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 187.128784][ T8901] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.673609][ T9382] loop6: detected capacity change from 0 to 8192 [ 188.417194][ T9393] loop5: detected capacity change from 0 to 256 [ 188.417632][ T9393] vfat: Unknown parameter 'shortncme' [ 188.481853][ T4725] Bluetooth: hci4: command tx timeout [ 188.496430][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1106'. [ 188.496471][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1106'. [ 188.507472][ T9399] gretap0: entered promiscuous mode [ 188.509847][ T9401] loop8: detected capacity change from 0 to 128 [ 188.515860][ T9401] EXT4-fs (loop8): Test dummy encryption mode enabled [ 188.517451][ T9399] gretap0: left promiscuous mode [ 188.530906][ T9401] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.546318][ T9401] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 188.558833][ T9401] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 188.599918][ T9403] 9pnet_fd: Insufficient options for proto=fd [ 189.307795][ T9416] loop5: detected capacity change from 0 to 128 [ 189.317660][ T9416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.663787][ T9418] loop7: detected capacity change from 0 to 512 [ 189.708975][ T8901] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.718247][ T9418] EXT4-fs (loop7): orphan cleanup on readonly fs [ 189.718954][ T9418] EXT4-fs (loop7): 1 orphan inode deleted [ 189.719428][ T9418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.195251][ T8598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.229220][ T9433] overlayfs: overlapping lowerdir path [ 190.242542][ T9435] loop7: detected capacity change from 0 to 1024 [ 190.287086][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.447381][ T9443] FAULT_INJECTION: forcing a failure. [ 190.447381][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.447421][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.5.1120 Tainted: G L syzkaller #0 PREEMPT [ 190.447439][ T9443] Tainted: [L]=SOFTLOCKUP [ 190.447444][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 190.447451][ T9443] Call trace: [ 190.447455][ T9443] show_stack+0x2c/0x3c (C) [ 190.447474][ T9443] __dump_stack+0x30/0x40 [ 190.447485][ T9443] dump_stack_lvl+0xd8/0x12c [ 190.447495][ T9443] dump_stack+0x1c/0x28 [ 190.447505][ T9443] should_fail_ex+0x41c/0x590 [ 190.447515][ T9443] should_fail+0x14/0x24 [ 190.447523][ T9443] should_fail_usercopy+0x20/0x30 [ 190.447531][ T9443] _inline_copy_from_user+0x3c/0x174 [ 190.447540][ T9443] copy_msghdr_from_user+0xb8/0x194 [ 190.447547][ T9443] ___sys_sendmsg+0x14c/0x224 [ 190.447554][ T9443] __sys_sendmsg+0x160/0x214 [ 190.447561][ T9443] __arm64_sys_sendmsg+0x80/0x94 [ 190.447568][ T9443] invoke_syscall+0x98/0x244 [ 190.447578][ T9443] el0_svc_common+0xec/0x23c [ 190.447587][ T9443] do_el0_svc+0x4c/0x5c [ 190.447596][ T9443] el0_svc+0x64/0x260 [ 190.447604][ T9443] el0t_64_sync_handler+0x48/0x148 [ 190.447611][ T9443] el0t_64_sync+0x198/0x19c [ 190.494499][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1121'. [ 190.494538][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1121'. [ 190.499175][ T9446] gretap0: entered promiscuous mode [ 190.502784][ T9446] gretap0: left promiscuous mode [ 190.782408][ T4725] Bluetooth: hci4: command tx timeout [ 191.470746][ T9457] can: request_module (can-proto-3) failed. [ 191.696599][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1124'. [ 192.602422][ T9475] FAULT_INJECTION: forcing a failure. [ 192.602422][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 192.602457][ T9475] CPU: 1 UID: 0 PID: 9475 Comm: syz.5.1126 Tainted: G L syzkaller #0 PREEMPT [ 192.602472][ T9475] Tainted: [L]=SOFTLOCKUP [ 192.602475][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 192.602480][ T9475] Call trace: [ 192.602483][ T9475] show_stack+0x2c/0x3c (C) [ 192.602500][ T9475] __dump_stack+0x30/0x40 [ 192.602511][ T9475] dump_stack_lvl+0xd8/0x12c [ 192.602520][ T9475] dump_stack+0x1c/0x28 [ 192.602530][ T9475] should_fail_ex+0x41c/0x590 [ 192.602539][ T9475] should_failslab+0xc4/0x120 [ 192.602547][ T9475] __kmalloc_noprof+0x100/0x6f0 [ 192.602556][ T9475] kernfs_fop_write_iter+0x144/0x3b8 [ 192.602565][ T9475] vfs_write+0x51c/0xa0c [ 192.602575][ T9475] ksys_write+0x12c/0x228 [ 192.602585][ T9475] __arm64_sys_write+0x7c/0x90 [ 192.602594][ T9475] invoke_syscall+0x98/0x244 [ 192.602604][ T9475] el0_svc_common+0xec/0x23c [ 192.602614][ T9475] do_el0_svc+0x4c/0x5c [ 192.602623][ T9475] el0_svc+0x64/0x260 [ 192.602631][ T9475] el0t_64_sync_handler+0x48/0x148 [ 192.602638][ T9475] el0t_64_sync+0x198/0x19c [ 192.680815][ T9477] 9pnet_fd: Insufficient options for proto=fd [ 192.710249][ T9488] loop8: detected capacity change from 0 to 512 [ 192.763711][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1129: iget: bad extra_isize 58 (inode size 256) [ 192.763749][ T9488] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.766587][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1129: error while reading EA inode 11 err=-117 [ 192.766620][ T9488] loop8: lost filesystem error report for type 5 error -117 [ 192.770920][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 192.770942][ C1] EXT4-fs (loop8): initial error at time 183: ext4_xattr_inode_iget:441: inode 11 [ 192.770986][ C1] EXT4-fs (loop8): last error at time 183: ext4_xattr_inode_iget:446 [ 192.781775][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1129: iget: bad extra_isize 58 (inode size 256) [ 192.781810][ T9488] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.785187][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1129: error while reading EA inode 11 err=-117 [ 192.785221][ T9488] loop8: lost filesystem error report for type 5 error -117 [ 192.789265][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.1129: iget: bad extra_isize 58 (inode size 256) [ 192.789300][ T9488] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 192.793572][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1129: error while reading EA inode 18 err=-117 [ 192.793605][ T9488] loop8: lost filesystem error report for type 5 error -117 [ 192.797696][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.1129: iget: bad extra_isize 58 (inode size 256) [ 192.797730][ T9488] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 192.815450][ T9488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1129: error while reading EA inode 18 err=-117 [ 192.815497][ T9488] loop8: lost filesystem error report for type 5 error -117 [ 192.815889][ T9488] EXT4-fs (loop8): 1 orphan inode deleted [ 192.816348][ T9488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.837525][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1132'. [ 192.839544][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1132'. [ 192.843118][ T9501] gretap0: entered promiscuous mode [ 192.858555][ T9501] gretap0: left promiscuous mode [ 192.896894][ T8901] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.913979][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1133'. [ 192.958168][ T9514] netlink: 'syz.8.1135': attribute type 10 has an invalid length. [ 192.960988][ T9514] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 193.601343][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 194.094197][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1148'. [ 194.094239][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1148'. [ 194.327031][ T9587] gretap0: entered promiscuous mode [ 194.331709][ T9587] gretap0: left promiscuous mode [ 194.866710][ T9601] can: request_module (can-proto-3) failed. [ 194.895873][ T9607] loop7: detected capacity change from 0 to 512 [ 194.928403][ T4922] kernel write not supported for file /vcs (pid: 4922 comm: kworker/1:6) [ 194.938378][ T9605] netlink: 'syz.6.1153': attribute type 12 has an invalid length. [ 194.944329][ T9607] EXT4-fs (loop7): 1 orphan inode deleted [ 194.945855][ T9607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.981106][ T1251] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 194.981162][ T1251] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 196.691966][ T9621] FAULT_INJECTION: forcing a failure. [ 196.691966][ T9621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.692005][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.8.1156 Tainted: G L syzkaller #0 PREEMPT [ 196.692021][ T9621] Tainted: [L]=SOFTLOCKUP [ 196.692026][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 196.692031][ T9621] Call trace: [ 196.692034][ T9621] show_stack+0x2c/0x3c (C) [ 196.692051][ T9621] __dump_stack+0x30/0x40 [ 196.692065][ T9621] dump_stack_lvl+0xd8/0x12c [ 196.692074][ T9621] dump_stack+0x1c/0x28 [ 196.692084][ T9621] should_fail_ex+0x41c/0x590 [ 196.692095][ T9621] should_fail+0x14/0x24 [ 196.692103][ T9621] should_fail_usercopy+0x20/0x30 [ 196.692112][ T9621] simple_read_from_buffer+0xc4/0x238 [ 196.692122][ T9621] proc_fail_nth_read+0x1a8/0x248 [ 196.692130][ T9621] vfs_read+0x230/0x8c8 [ 196.692140][ T9621] ksys_read+0x12c/0x228 [ 196.692150][ T9621] __arm64_sys_read+0x7c/0x90 [ 196.692159][ T9621] invoke_syscall+0x98/0x244 [ 196.692170][ T9621] el0_svc_common+0xec/0x23c [ 196.692179][ T9621] do_el0_svc+0x4c/0x5c [ 196.692188][ T9621] el0_svc+0x64/0x260 [ 196.692197][ T9621] el0t_64_sync_handler+0x48/0x148 [ 196.692204][ T9621] el0t_64_sync+0x198/0x19c [ 196.713908][ T8598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.717036][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.916510][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1161'. [ 196.916556][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1161'. [ 196.921694][ T9641] gretap0: entered promiscuous mode [ 196.927814][ T9641] gretap0: left promiscuous mode [ 197.090021][ T9652] misc userio: Invalid payload size [ 197.437652][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1167'. [ 197.439457][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1167'. [ 197.441895][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1167'. [ 197.443921][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1167'. [ 197.469640][ T9662] capability: warning: `syz.5.1168' uses 32-bit capabilities (legacy support in use) [ 197.840144][ T9677] 9pnet_fd: Insufficient options for proto=fd [ 197.965968][ T9684] loop8: detected capacity change from 0 to 2048 [ 198.524847][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.527477][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.544321][ T9688] can: request_module (can-proto-3) failed. [ 198.551416][ T9684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.558838][ T9699] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.877162][ T9708] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.933549][ T9708] FAULT_INJECTION: forcing a failure. [ 198.933549][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.933584][ T9708] CPU: 1 UID: 0 PID: 9708 Comm: syz.7.1178 Tainted: G L syzkaller #0 PREEMPT [ 198.933598][ T9708] Tainted: [L]=SOFTLOCKUP [ 198.933603][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 198.933608][ T9708] Call trace: [ 198.933612][ T9708] show_stack+0x2c/0x3c (C) [ 198.933631][ T9708] __dump_stack+0x30/0x40 [ 198.933643][ T9708] dump_stack_lvl+0xd8/0x12c [ 198.933653][ T9708] dump_stack+0x1c/0x28 [ 198.933662][ T9708] should_fail_ex+0x41c/0x590 [ 198.933672][ T9708] should_fail+0x14/0x24 [ 198.933680][ T9708] should_fail_usercopy+0x20/0x30 [ 198.933689][ T9708] simple_read_from_buffer+0xc4/0x238 [ 198.933699][ T9708] proc_fail_nth_read+0x1a8/0x248 [ 198.933706][ T9708] vfs_read+0x230/0x8c8 [ 198.933716][ T9708] ksys_read+0x12c/0x228 [ 198.933725][ T9708] __arm64_sys_read+0x7c/0x90 [ 198.933734][ T9708] invoke_syscall+0x98/0x244 [ 198.933744][ T9708] el0_svc_common+0xec/0x23c [ 198.933754][ T9708] do_el0_svc+0x4c/0x5c [ 198.933763][ T9708] el0_svc+0x64/0x260 [ 198.933771][ T9708] el0t_64_sync_handler+0x48/0x148 [ 198.933778][ T9708] el0t_64_sync+0x198/0x19c [ 199.015831][ T8901] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.074588][ T9723] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1182'. [ 199.074623][ T9723] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1182'. [ 199.456432][ T9740] misc userio: Invalid payload size [ 199.474477][ T9733] tmpfs: Unknown parameter '' [ 199.702314][ T9755] Invalid logical block size (3) [ 201.033484][ T9757] can: request_module (can-proto-3) failed. [ 201.068588][ T9761] loop5: detected capacity change from 0 to 128 [ 201.096262][ T9761] EXT4-fs (loop5): Test dummy encryption mode enabled [ 201.113497][ T9761] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.225437][ T9767] sit1: entered promiscuous mode [ 201.225470][ T9767] sit1: entered allmulticast mode [ 201.329562][ T9776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.640904][ T9782] hub 8-0:1.0: USB hub found [ 201.641581][ T9782] hub 8-0:1.0: 8 ports detected [ 201.659967][ T9782] loop9: detected capacity change from 0 to 512 [ 201.660330][ T9782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.797653][ T9793] loop6: detected capacity change from 0 to 8192 [ 202.387422][ T9793] Dev loop6: unable to read RDB block 8 [ 202.387564][ T9793] loop6: unable to read partition table [ 202.387642][ T9793] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 202.396326][ T7931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.405521][ T9782] EXT4-fs (loop9): Test dummy encryption mode enabled [ 202.449260][ T9782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e018, mo2=0002] [ 202.449329][ T9782] System zones: 1-12 [ 202.450938][ T9782] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 33261: comm syz.9.1195: invalid block [ 202.450973][ T9782] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.451844][ T9782] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1195: invalid indirect mapped block 8 (level 2) [ 202.451880][ T9782] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.453649][ T9782] EXT4-fs (loop9): 1 truncate cleaned up [ 202.454108][ T9782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.699328][ T9107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.748982][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1202'. [ 202.750708][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1202'. [ 202.753818][ T9816] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1200'. [ 202.756985][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1202'. [ 202.758656][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1202'. [ 203.498470][ T9832] can: request_module (can-proto-3) failed. [ 203.703505][ T9858] xt_NFQUEUE: number of total queues is 0 [ 203.816539][ T9863] loop5: detected capacity change from 0 to 512 [ 204.096260][ T9863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.116733][ T9863] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1213: corrupted xattr block 13: invalid checksum [ 204.120523][ T9863] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1213: corrupted xattr block 13: invalid checksum [ 204.121369][ T9863] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1213: corrupted xattr block 13: invalid checksum [ 204.124031][ T9863] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1213: corrupted xattr block 13: invalid checksum [ 204.128793][ T9863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.1213: bg 0: bad block bitmap checksum [ 204.132702][ T9863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 204.218093][ T9872] bridge0: port 3(veth1_to_bridge) entered blocking state [ 204.218497][ T9872] bridge0: port 3(veth1_to_bridge) entered disabled state [ 204.218637][ T9872] veth1_to_bridge: entered allmulticast mode [ 204.236966][ T9872] veth1_to_bridge: entered promiscuous mode [ 204.239119][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1216'. [ 204.240623][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1216'. [ 204.249221][ T9872] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.254530][ T9872] bridge0: port 3(veth1_to_bridge) entered blocking state [ 204.254586][ T9872] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 204.257101][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1216'. [ 204.257141][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1216'. [ 204.276159][ T9870] syzkaller0: entered promiscuous mode [ 204.276192][ T9870] syzkaller0: entered allmulticast mode [ 204.277232][ T9870] FAULT_INJECTION: forcing a failure. [ 204.277232][ T9870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.277249][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.8.1214 Tainted: G L syzkaller #0 PREEMPT [ 204.277259][ T9870] Tainted: [L]=SOFTLOCKUP [ 204.277262][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 204.277267][ T9870] Call trace: [ 204.277270][ T9870] show_stack+0x2c/0x3c (C) [ 204.277288][ T9870] __dump_stack+0x30/0x40 [ 204.277302][ T9870] dump_stack_lvl+0xd8/0x12c [ 204.277311][ T9870] dump_stack+0x1c/0x28 [ 204.277320][ T9870] should_fail_ex+0x41c/0x590 [ 204.277330][ T9870] should_fail+0x14/0x24 [ 204.277338][ T9870] should_fail_usercopy+0x20/0x30 [ 204.277347][ T9870] _copy_from_iter+0x188/0x1064 [ 204.277364][ T9870] copy_page_from_iter+0x220/0x2e8 [ 204.277376][ T9870] skb_copy_datagram_from_iter+0x270/0x5c8 [ 204.277388][ T9870] packet_sendmsg+0x2c04/0x4110 [ 204.277400][ T9870] __sock_sendmsg+0xc8/0x138 [ 204.277410][ T9870] ____sys_sendmsg+0x3d0/0x6c8 [ 204.277417][ T9870] ___sys_sendmsg+0x198/0x224 [ 204.277424][ T9870] __sys_sendmsg+0x160/0x214 [ 204.277431][ T9870] __arm64_sys_sendmsg+0x80/0x94 [ 204.277438][ T9870] invoke_syscall+0x98/0x244 [ 204.277448][ T9870] el0_svc_common+0xec/0x23c [ 204.277457][ T9870] do_el0_svc+0x4c/0x5c [ 204.277467][ T9870] el0_svc+0x64/0x260 [ 204.277475][ T9870] el0t_64_sync_handler+0x48/0x148 [ 204.277482][ T9870] el0t_64_sync+0x198/0x19c [ 204.372186][ T7931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.447308][ T9888] loop6: detected capacity change from 0 to 128 [ 204.448024][ T9888] EXT4-fs (loop6): Test dummy encryption mode enabled [ 204.485741][ T9888] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.897603][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1223'. [ 204.899962][ T9909] gretap0: entered promiscuous mode [ 204.901620][ T9909] gretap0: left promiscuous mode [ 204.970512][ T9917] loop9: detected capacity change from 0 to 8 [ 205.303115][ T9918] loop7: detected capacity change from 0 to 128 [ 205.303580][ T9918] vfat: Unknown parameter 'appraise_type' [ 205.332816][ T8393] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.341892][ T9922] can: request_module (can-proto-3) failed. [ 205.411334][ T9934] misc userio: Invalid payload size [ 205.574590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.574775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 205.574845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.574985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 205.575083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.575121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 205.575214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.575247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 205.575345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.575399][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000088][ C0] net_ratelimit: 102373 callbacks suppressed [ 211.000094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.000215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.000354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.000478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.000599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 211.000631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.353314][ C1] sched: DL replenish lagged too much [ 216.429777][ C1] net_ratelimit: 90842 callbacks suppressed [ 216.429818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.429949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.429963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.430093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.430147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.430302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.430438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.430442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.430556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 216.430581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.859550][ C1] net_ratelimit: 80247 callbacks suppressed [ 221.859591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.859647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.859733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.859783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.859857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.859971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.860084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.860124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.860197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 221.860262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.289263][ C1] net_ratelimit: 82396 callbacks suppressed [ 227.289302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.289614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.289749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 227.289912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.289988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.718961][ C0] net_ratelimit: 83590 callbacks suppressed [ 232.718972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.719090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.719466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 232.719553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.719598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.148679][ C1] net_ratelimit: 84156 callbacks suppressed [ 238.148720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.148856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.148896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.148988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.149027][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.149110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.149223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.149259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.149351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 238.149373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.578436][ C1] net_ratelimit: 85464 callbacks suppressed [ 243.578472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 243.578487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 243.578607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 243.578612][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.578721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.578738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 243.578838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.578858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 243.578968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.578973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008046][ C0] net_ratelimit: 85994 callbacks suppressed [ 249.008090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.008136][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.008390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.008511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 249.008847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.437820][ C1] net_ratelimit: 83741 callbacks suppressed [ 254.437846][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.437860][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.437979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.438004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.438104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.438135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.438225][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.438261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 254.438345][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.438381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.867573][ C1] net_ratelimit: 86106 callbacks suppressed [ 259.867607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.867731][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.867793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.867847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.867920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.867961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.868030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.868077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 259.868145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.868190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 263.652636][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.297202][ C0] net_ratelimit: 86930 callbacks suppressed [ 265.297247][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.297429][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.297563][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.297687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 265.297912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.726954][ C1] net_ratelimit: 86948 callbacks suppressed [ 270.726988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.727013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.727108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.727137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.727232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.727257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.727354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.727471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 270.727509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.727600][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.156695][ C0] net_ratelimit: 86958 callbacks suppressed [ 276.156725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.156734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.156867][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.156868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.156984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.156992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.157103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.157231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 276.157232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.157344][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.586403][ C0] net_ratelimit: 87263 callbacks suppressed [ 281.586421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 281.586442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.586567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.586569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 281.586678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 281.586782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.586808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 281.586904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.586946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 281.587025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.629190][ T4715] Bluetooth: hci1: command 0x0406 tx timeout [ 287.016114][ C0] net_ratelimit: 84802 callbacks suppressed [ 287.016146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.016285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.016407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.016528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 287.016647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.445883][ C1] net_ratelimit: 84846 callbacks suppressed [ 292.445924][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.445937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.446074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.446077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.446187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.446192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.446316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.446440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.446564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 292.446680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 293.620236][ T4719] Bluetooth: hci3: command 0x0406 tx timeout [ 297.875567][ C1] net_ratelimit: 84905 callbacks suppressed [ 297.875605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.875606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.875729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.875739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.875848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.875882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.875960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.876074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.876186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 297.876298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 299.664321][ T4713] Bluetooth: hci0: command 0x0406 tx timeout [ 303.305241][ C1] net_ratelimit: 84835 callbacks suppressed [ 303.305256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.305283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305514][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.305537][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.305656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 303.305972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.734980][ C1] net_ratelimit: 84478 callbacks suppressed [ 308.735018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.735177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.735315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735682][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 308.735716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.080620][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 314.164711][ C0] net_ratelimit: 84577 callbacks suppressed [ 314.164743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.164754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.164894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.165418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 314.165522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.594480][ C1] net_ratelimit: 82297 callbacks suppressed [ 319.594523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.594648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.594734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.594766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.594858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.594904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.594977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.595025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 319.595110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.595141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024124][ C0] net_ratelimit: 82915 callbacks suppressed [ 325.024127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.024249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.024745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 325.024757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.283420][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.453853][ C1] net_ratelimit: 85273 callbacks suppressed [ 330.453879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 330.453896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.454016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 330.454043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.454147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 330.454156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.454260][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 330.454268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.454376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 330.454504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 333.456145][ T4715] Bluetooth: hci4: command 0x0406 tx timeout [ 335.883619][ C1] net_ratelimit: 84913 callbacks suppressed [ 335.883659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.883780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.883889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.883894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.884000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.884021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.884112][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.884222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.884332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 335.884351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 341.313315][ C1] net_ratelimit: 86002 callbacks suppressed [ 341.313334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.313362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 341.313490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.313516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 341.313624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.313636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 341.313747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.313752][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 341.313869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.313877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.742993][ C0] net_ratelimit: 84453 callbacks suppressed [ 346.743029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.743053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.743204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.743341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743486][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743600][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 346.743775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.172685][ C1] net_ratelimit: 84604 callbacks suppressed [ 352.172725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.172734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.172847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.172874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.172984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.173008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.173103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.173216][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.173327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 352.173452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.602487][ C0] net_ratelimit: 85605 callbacks suppressed [ 357.602513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.602529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.602669][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.602670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.602798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.602802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.602913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.603025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.603135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 357.603244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032170][ C1] net_ratelimit: 85423 callbacks suppressed [ 363.032209][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.032469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.032587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.032698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 363.032773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.461844][ C0] net_ratelimit: 85692 callbacks suppressed [ 368.461885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.461889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462036][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.462053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.462186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462436][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 368.462619][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.891590][ C1] net_ratelimit: 85144 callbacks suppressed [ 373.891631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.891758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.891874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.891988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.892058][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.892099][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.892189][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.892236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 373.892301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.892355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 379.321262][ C0] net_ratelimit: 85615 callbacks suppressed [ 379.321300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.321319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 379.321422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.321455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 379.321541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.321582][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 379.321656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.321697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 379.321764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.321809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:38:e5:53:2e:a7, vlan:0) [ 380.308645][ T31] INFO: task syz.6.1227:9929 blocked for more than 143 seconds. [ 380.319197][ T31] Tainted: G L syzkaller #0 [ 380.329356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.342821][ T31] task:syz.6.1227 state:D stack:0 pid:9929 tgid:9929 ppid:8393 task_flags:0x400040 flags:0x00800019 [ 380.363061][ T31] Call trace: [ 380.373240][ T31] __switch_to+0x2b0/0x6e0 (T) [ 380.383386][ T31] __schedule+0x1c04/0x2db8 [ 380.396899][ T31] schedule+0x13c/0x20c [ 380.407058][ T31] __fuse_simple_request+0xac4/0x12f4 [ 380.417221][ T31] fuse_flush+0x400/0x5e8 [ 380.427856][ T31] filp_flush+0xb4/0x184 [ 380.438138][ T31] filp_close+0x28/0x48 [ 380.451692][ T31] __arm64_sys_close_range+0x304/0x800 [ 380.461832][ T31] invoke_syscall+0x98/0x244 [ 380.472048][ T31] el0_svc_common+0xec/0x23c [ 380.482210][ T31] do_el0_svc+0x4c/0x5c [ 380.492370][ T31] el0_svc+0x64/0x260 [ 380.505845][ T31] el0t_64_sync_handler+0x48/0x148 [ 380.516065][ T31] el0t_64_sync+0x198/0x19c [ 380.526224][ T31] [ 380.526224][ T31] Showing all locks held in the system: [ 380.536662][ T31] 1 lock held by kthreadd/2: [ 380.547139][ T31] 3 locks held by kworker/0:0/9: [ 380.557435][ T31] 4 locks held by kworker/u8:0/12: [ 380.567672][ T31] 1 lock held by kworker/R-mm_pe/13: [ 380.581321][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 380.646571][ T31] 3 locks held by kworker/u8:1/15: [ 380.657092][ T31] 1 lock held by kworker/1:0/24: [ 380.667325][ T31] 4 locks held by kworker/1:1/26: [ 380.677535][ T31] 1 lock held by khungtaskd/31: [ 380.687890][ T31] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 380.753149][ T31] 3 locks held by kworker/u8:2/39: [ 380.763877][ T31] 3 locks held by kworker/u8:3/40: [ 380.774097][ T31] 2 locks held by kworker/0:2/866: [ 380.784407][ T31] 4 locks held by kworker/1:2/1039: [ 380.798036][ T31] 4 locks held by kworker/u8:4/1058: [ 380.808345][ T31] 3 locks held by kworker/u8:5/1251: [ 380.818653][ T31] 4 locks held by kworker/R-bat_e/2853: [ 380.828897][ T31] 3 locks held by kworker/u8:6/2926: [ 380.839117][ T31] 3 locks held by kworker/u8:7/3046: [ 380.852764][ T31] 3 locks held by kworker/u8:8/3097: [ 380.863004][ T31] 3 locks held by kworker/u8:9/3196: [ 380.873715][ T31] 3 locks held by kworker/u8:10/3350: [ 380.884049][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 380.949245][ T31] #1: ffff80009b167c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.014752][ T31] #2: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xd0/0x3dc [ 381.080208][ T31] 3 locks held by kworker/u8:11/3513: [ 381.090702][ T31] 3 locks held by kworker/u8:12/3777: [ 381.101218][ T31] 2 locks held by kworker/u8:13/3858: [ 381.111471][ T31] 3 locks held by udevd/4344: [ 381.121701][ T31] 4 locks held by kworker/1:3/4388: [ 381.131957][ T31] 2 locks held by dhcpcd/4400: [ 381.142222][ T31] 1 lock held by dhcpcd/4401: [ 381.155820][ T31] 2 locks held by getty/4493: [ 381.166095][ T31] #0: ffff0000ca8bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 381.741191][ T31] #1: ffff80009238e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 [ 381.741226][ T31] 6 locks held by kworker/u9:4/4719: [ 381.741231][ T31] #0: ffff0000ccbf7140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 381.741255][ T31] #1: ffff800099b67c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.741278][ T31] #2: ffff0000f741cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x178/0x374 [ 381.741303][ T31] #3: ffff0000f741c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938 [ 381.741324][ T31] #4: ffff800089e296c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x13c/0x334 [ 381.741347][ T31] #5: ffff0000c3093af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x450 [ 381.741374][ T31] 4 locks held by kworker/u9:6/4726: [ 381.741379][ T31] #0: ffff0000d4dad940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 381.741403][ T31] #1: ffff800099b27c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.741424][ T31] #2: ffff0000d0dd0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x178/0x374 [ 381.741447][ T31] #3: ffff0000d0dd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1d8/0x938 [ 381.741468][ T31] 1 lock held by kworker/R-wg-cr/4774: [ 381.741473][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.741495][ T31] 1 lock held by kworker/R-wg-cr/4777: [ 381.741500][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.741522][ T31] 1 lock held by kworker/R-wg-cr/4778: [ 381.741526][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.741548][ T31] 2 locks held by kworker/1:4/4794: [ 381.741554][ T31] 1 lock held by kworker/R-wg-cr/4795: [ 381.741558][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.741579][ T31] 1 lock held by kworker/R-wg-cr/4796: [ 381.741584][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.741606][ T31] 1 lock held by kworker/R-wg-cr/4797: [ 381.741611][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.741632][ T31] 2 locks held by kworker/0:3/4798: [ 381.741640][ T31] 2 locks held by kworker/0:4/4805: [ 381.741644][ T31] 2 locks held by kworker/0:5/4806: [ 381.741650][ T31] 2 locks held by kworker/0:6/4813: [ 381.741655][ T31] 4 locks held by kworker/0:7/4826: [ 381.741660][ T31] #0: ffff0000d5b1cd40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 381.741683][ T31] #1: ffff80009bf47c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.741709][ T31] #2: ffff0000d69ad3c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x134/0x53c [ 381.741733][ T31] #3: ffff0000ef2bc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x2a0/0x53c [ 381.741758][ T31] 2 locks held by kworker/1:5/4889: [ 381.741763][ T31] 1 lock held by kworker/R-bond1/4900: [ 381.741768][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.741789][ T31] 2 locks held by kworker/1:6/4922: [ 381.741794][ T31] 2 locks held by kworker/1:7/4923: [ 381.741800][ T31] 4 locks held by kworker/u8:14/7407: [ 381.741805][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 381.741826][ T31] #1: ffff800093557c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.741847][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 381.741869][ T31] #3: ffff0000f1070780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x144/0x10e8 [ 381.741893][ T31] 1 lock held by kworker/R-wg-cr/7949: [ 381.741898][ T31] 1 lock held by kworker/R-wg-cr/7951: [ 381.741903][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.741927][ T31] 3 locks held by kworker/u8:15/8179: [ 381.741932][ T31] 3 locks held by kworker/u8:16/8180: [ 381.741937][ T31] 3 locks held by kworker/u8:17/8181: [ 381.741942][ T31] 3 locks held by kworker/u8:18/8182: [ 381.741947][ T31] 3 locks held by kworker/u8:19/8183: [ 381.741952][ T31] 3 locks held by kworker/u8:20/8184: [ 381.741957][ T31] 3 locks held by kworker/u8:21/8185: [ 381.741963][ T31] 4 locks held by kworker/u8:22/8186: [ 381.741968][ T31] 3 locks held by kworker/u8:23/8187: [ 381.741973][ T31] #0: ffff0000ceadd940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 381.741994][ T31] #1: ffff800093037c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 381.742015][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 381.742036][ T31] 3 locks held by kworker/u8:24/8188: [ 381.742041][ T31] 4 locks held by kworker/u8:25/8191: [ 381.742046][ T31] 3 locks held by kworker/u8:26/8192: [ 381.742051][ T31] 3 locks held by kworker/u8:27/8193: [ 381.742056][ T31] 3 locks held by kworker/u8:28/8194: [ 381.742065][ T31] 1 lock held by kworker/R-wg-cr/8413: [ 381.742069][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742091][ T31] 1 lock held by kworker/R-wg-cr/8414: [ 381.742095][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.742117][ T31] 1 lock held by kworker/R-wg-cr/8415: [ 381.742122][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742145][ T31] 3 locks held by syz-executor/8598: [ 381.742150][ T31] 1 lock held by kworker/R-wg-cr/8662: [ 381.742155][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742176][ T31] 1 lock held by kworker/R-wg-cr/8663: [ 381.742181][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.742203][ T31] 1 lock held by kworker/R-wg-cr/8665: [ 381.742208][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742232][ T31] 3 locks held by syz-executor/8901: [ 381.742237][ T31] 1 lock held by kworker/R-wg-cr/8915: [ 381.742242][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742263][ T31] 1 lock held by kworker/R-wg-cr/8916: [ 381.742268][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa58/0xd90 [ 381.742289][ T31] 1 lock held by kworker/R-wg-cr/8917: [ 381.742293][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742318][ T31] 4 locks held by syz-executor/9107: [ 381.742323][ T31] 1 lock held by kworker/R-wg-cr/9221: [ 381.742328][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742350][ T31] 1 lock held by kworker/R-wg-cr/9225: [ 381.742354][ T31] #0: ffff800088a9df40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x40/0x344 [ 381.742383][ T31] 2 locks held by syz.5.1233/9960: [ 381.742389][ T31] 2 locks held by kworker/1:8/9965: [ 381.742394][ T31] 1 lock held by syz-executor/9967: [ 381.742401][ T31] [ 381.742404][ T31] ============================================= [ 381.742404][ T31] [ 381.742410][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 381.872735][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 381.874290][ T31] Tainted: [L]=SOFTLOCKUP [ 381.874897][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 381.876393][ T31] Call trace: [ 381.876857][ T31] show_stack+0x2c/0x3c (C) [ 381.877526][ T31] __dump_stack+0x30/0x40 [ 381.878159][ T31] dump_stack_lvl+0x30/0x12c [ 381.878848][ T31] dump_stack+0x1c/0x28 [ 381.879493][ T31] vpanic+0x594/0xaf8 [ 381.880079][ T31] vpanic+0x0/0xaf8 [ 381.880632][ T31] hung_task_panic+0x0/0x2c [ 381.881260][ T31] kthread+0x304/0x3d4 [ 381.881882][ T31] ret_from_fork+0x10/0x20 [ 381.882543][ T31] SMP: stopping secondary CPUs [ 381.883245][ T31] Kernel Offset: disabled [ 381.883855][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 381.884848][ T31] Memory Limit: none [ 382.428305][ T31] Rebooting in 86400 seconds..