last executing test programs: 3m53.024043446s ago: executing program 1 (id=307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x9, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c23, @empty}}, 0x2, 0x8}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xabb6, 0x9, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 3m52.851737316s ago: executing program 1 (id=309): rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x1, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x17, 0x8, 0xe45a}}) (async, rerun: 64) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x34001, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000010002"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x118) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newneigh={0x2c, 0x1c, 0x20, 0x70bd29, 0xfff, {0x7, 0x0, 0x0, r1, 0xb667cf78f8834e7d, 0x20}, [@NDA_MASTER={0x8, 0x9, 0xcd}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x12004050}, 0x0) (rerun: 64) 3m52.792013252s ago: executing program 1 (id=310): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m52.49724451s ago: executing program 1 (id=314): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000001c0)={[{@quota}, {@data_err_ignore}, {@resuid}, {@inlinecrypt}, {@discard}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000340)={r0, &(0x7f00000000c0)='@(\x00', 0x33d4c2, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x5]}, {0x0, 0x8, 0x6, 0x8}}, 0x467, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)=0x5}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) quotactl$Q_SETQUOTA(0xffffffff00001001, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f0000001ec0)=[{&(0x7f0000000a80)=""/233, 0xe9}], 0x1, 0x4004f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 3m52.412053863s ago: executing program 1 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5eb, 0x2, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x17) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='mounts\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000740)={{@_ha_fsid={[0x5880, 0x4]}, {0x2, 0x0, 0x5, 0x5}}, {{[0x0, 0x80000001, 0xf3, 0x4]}, 0x0, 0x2, 0x2, 0x0, &(0x7f0000000640)=[{{@align=0x2, {0xa58, 0x40, 0x0, 0x8}}, 0x7f, 0x0, '+*\x00'}, {{@align=0x8, {0x6, 0xd, 0x81, 0x40}}, 0x9, 0x0, 'jqfmt=vfsold'}, {{@_ha_fsid={[0x7ff, 0x4]}, {0x5, 0xd7, 0x9bf, 0x47f}}, 0x8, 0x0, '{+%#-+)],\x00'}, {{@_ha_fsid={[0xa9c7, 0x2e0d]}, {0x8, 0x4, 0x7, 0x3}}, 0x0, 0x0, 'inode_readahead_blks'}, {{@align=0x1, {0x2, 0x8, 0x8, 0x100}}, 0x0, 0x0, '\\{*,+\x00'}, {{@_ha_fsid={[0x80000000, 0x80]}, {0xdb, 0x3, 0x6, 0x7}}, 0x4, 0x0, ',-$-\x00'}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r6}, 0x50) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f0000000280)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000480)={r7, &(0x7f0000000200)='\x00', 0x38000, &(0x7f00000003c0)={@_ha_fsid={[0x27, 0x4]}, {0x5d7a, 0x401}}, 0x5, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xf090}) 3m51.9553666s ago: executing program 1 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x4e24, @empty}, @l2tp={0x2, 0x0, @local, 0x2}, @nl=@unspec, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x9a4, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d742, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 3m51.85914631s ago: executing program 32 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x4e24, @empty}, @l2tp={0x2, 0x0, @local, 0x2}, @nl=@unspec, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x9a4, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d742, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 3m51.566654053s ago: executing program 4 (id=321): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002000000000000008000000000000000000000000000000003bfa57a2ed426977647c3f1f85bdfedcdf98b9c746c0d86cdf1fe363afb439e3e0aacaf9bd4d8adc2ed047713ee0fd627f2e320d47e5085b4d6a6eb3ccc38ec43b473b84c670cb4085d9e01de15ecf634ad844feb21b7aff2ec9ccbc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000000000a09c29cbddb4028d5474248bc681231f00008100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800b9f41b0f8e0000010000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3m50.634216772s ago: executing program 4 (id=328): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001b40)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 3m50.31652362s ago: executing program 4 (id=333): file_getattr(0xffffffffffffffff, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002140), 0x18, 0x1000) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x80047437, 0x10004000000006) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0xc021}) sendmsg$inet(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x3, 0x8001, 0x8, 0x1, 0x22, "64867b7f778c2e9280cf79111a6718f79ebc88", 0x8, 0xc8}) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000100), 0x98) 3m50.083763707s ago: executing program 4 (id=336): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) fcntl$notify(r0, 0x402, 0x3) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x90) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000000c0)={[0xd10]}) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0}) 3m49.636045527s ago: executing program 4 (id=338): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000280)=ANY=[@ANYBLOB="74723da2ebedb5d5500e849620bfb01bb62feb8390073e4bf039553a34aa0d66831b31a8b9ab1d04162b4ce907a7f91cc91a72aa9577ed8d2b4d3afe20a74372ee8238cbc80a7d3095dacdb361153b21c94ced11fbacfcaee569c247d640247d8be6ebaddc2917f37ea9a0c370e40e7d589374b6cdbaecca9ac37ed340d3307b3124f0710c5f1667b2", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r6, 0x3) accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 3m48.86803592s ago: executing program 4 (id=345): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000040000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_skb=0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0xc0, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 3m48.83368562s ago: executing program 33 (id=345): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000040000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_skb=0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0xc0, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 3m45.97574912s ago: executing program 3 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x111}]}]}, 0x24}}, 0x4882) r2 = timerfd_create(0x0, 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x400c891) 3m45.732054719s ago: executing program 3 (id=361): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 3m45.392102873s ago: executing program 3 (id=363): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) r1 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESHEX=r6]) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xfff9, 0x79485b5128a4753c}, {0xd, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0xffff, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r8, 0x3) accept4$bt_l2cap(r8, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close(r0) 3m44.499544105s ago: executing program 3 (id=368): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mount_setattr(r2, &(0x7f0000000140)='./bus/file0\x00', 0x8000, &(0x7f0000000180)={0x80, 0x4, 0xe0000, {r4}}, 0x20) fstat(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) close(r0) 3m44.064067934s ago: executing program 3 (id=372): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x4004743c, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x1, 0x5, 0x8, 0x9}]}) 3m43.555679082s ago: executing program 3 (id=376): r0 = syz_open_dev$video(0x0, 0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB='rodir,nonumtail=0,rodir,rodir,shortname=win95,shortnameepage=862,shortname=winnt,shoruname=lower,shortname=winnt,iocharset=iso8859-9,uni_xlate=1,utf8=0,\x00'/163], 0x81, 0x2d1, &(0x7f0000000880)="$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") sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r8, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000400c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m42.912996752s ago: executing program 34 (id=376): r0 = syz_open_dev$video(0x0, 0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB='rodir,nonumtail=0,rodir,rodir,shortname=win95,shortnameepage=862,shortname=winnt,shoruname=lower,shortname=winnt,iocharset=iso8859-9,uni_xlate=1,utf8=0,\x00'/163], 0x81, 0x2d1, &(0x7f0000000880)="$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") sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r8, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000400c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m6.248868813s ago: executing program 0 (id=921): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04011a0c07a6d57dea66015c0dac60f81ea7a2cb3b282f0add19e6b01f4f9a7214b3c14b95c60451dd75a6a0a828c109a1526ae4d38f4ba7eb16d63259707541bdf4b40e169d91e5aeeb7e45fc6b09d3db933cd74122ae3b1e8937e87a5e7684e55b4b82adcef80f12403a4389c6ddf100a5e6f20da9db5c93a2dc8e44bd5d51faf9fd62c78c8230534153b1e908fe6b61db725dc11a16f5b24ffc5bb0bca496033a9592a0bd2b3295f3b35fcfffe23747b797c50d8ffc42a10c5d"], 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x20, 0x80, 0x4, 0xff, 0x4, 0xc8, 0xb, 0x3500}}, 0x1c}, 0x1, 0x0, 0x0, 0x44810}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000d40)=@in={0x2, 0x4e24, @broadcast}, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000dc0)="0bd8aee19e8590a1e7a76fe41177422bec1a329275ec851214645ec9a867c97a286d6f068d31085f7f389d53e9f30380f796d172ef34817475455d142679005216b982ef20659f6b4433f17d5c2d614fa73d0a210522fcc329520f5f5c5ff454fccfe903580b0693b43e4eb37ecf3bb497fba651c6a1f60702f67770e780f70577b582371a98d3a432f193305bb05ec718bc3c94141e959f69212806b207cb920c4c078c0e1eae7ef3023200e660e7b064a2f1fda56f809652622d5a976d0e40d0308fb0c43960cdf23b5dc3d9f5c9dd47dbc894dc44a41fec75d89b12b630e1f55b7d159248e03a0e6856bbadb50f959873"}, {&(0x7f0000000ec0)="bf3183a2899561865881d3194095bac5ba6b"}], 0x0, &(0x7f0000000f40)=[{0x0, 0x114, 0x0, "2192de7d1015ef81a88544f0ea461437c1e09d280021d2807021ade09a512fa72a538e5a65677271c5df017d02d0de26f444410e95a7bbabfed479928414904e440090f391fe4fdf0524b02edb1d156551fbd78f06a39937dda3fb28e78c5e7d80da701742774dd79c1bc516e3ad7a7c67e143cf9aa576657566389b34a3c11224f4c925ad5b997e7b1cd1cdadce7ad468fefe64fafbe681e2cdb3af206efd8b2a96e1f0e087654060c8af2d5ebbe72c"}, {0x0, 0x10c, 0x2, "a34041cdaaa7824cc1d4504d6566ad40b3388e66d657d4a33500c29f55169d01aec487ab8c7a58136c267bfbd3ffbac49c2ba30febde804d84ac9d15d2f9b06dc9e77581a3c5815230d86c00a4ace0d87ee7adc545e074d209178ec2daf76fc8655f8952aab3e8bef5989fd406e4f67cf99a76d1c9e9b4406c2be7cc2ba88e4b2d6275339f9f3dc6856b32f52ed3d5a2779a01e3615648509c480eaf8b51"}, {0x0, 0x22c, 0x8, "ebaf8939ef4fdfca36caa09cbdacb42069b0e956b814f8ba9cde76b94e54b793e177c3600e599fd8f5acdc6c790bb8ef80f765c127b60a5a43e1d721af7e09725597302a952f2e3ae3109c7d4728050daecee8d068ed9426aaf8f64f3bf776b466dd3e7bd194d372295b0649657d11e46184fc4caad4609419dd2267af82074ead73c41cf5b0f68791ed6109770e1878a14280"}, {0x0, 0x3a, 0x8, "b53b4eda0b5a7e600444395b998f5e990ba000dce851ffc5f3bf49d8fb"}, {0x0, 0x10e, 0x8, "d7ceb645005fc27d5769ff6de6c515791f832fd757226a885aadc1a192e614a649a7e1bab0c49ef1dd9f74e317c1b253b38d89838ce69b383ae35d46706bef000d0dc7e6dd634c87b876c5ffbd3f3de39f56c1519016cc1d9f8d8ada14aef1f8eb60d0a3b87058083d62e405d8e107b6f20ca87ede1a5c0b4896201e417bcef4c8cb504137e6ddff093cdd87f22f07476d0d7c05d7ffd5b260f4a381758f11b76b0d63fa9b11309183df"}, {0x0, 0x104, 0x0, "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"}, {0x0, 0x1c, 0x24, "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"}, {0x0, 0x6, 0x6, "f60b906d56a84af753c7394a5db577ce257fee6dc71260fdbe93bcc657a9da32c1b89fd5ec7a3576e11abab47fa9816ac1c01927"}]}}], 0x40001a2, 0x20004004) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x82}, "01be0ad1a569c26905fcde75792ba655465712f3985d7535b6115843d5e61ed7a2b8658f75d2895dfb0bf00f0ddb2e3078963943ef4bb4891ac29398566d52501944540c24cd0394f5b55016262e880a9ba0a2a4425d0498b7d856756dae976d5c63995922ff6a1b7ea224b6d8163752f5af65ae5ba4a42c4023c521f89ebe44be4c"}, 0x86) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010023bd7000fcdbdf250a000000", @ANYRES32, @ANYBLOB="7ba00000080002000b000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x93) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x6, 0x2, 0x23, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x80, 0x4}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000000680)=""/33, 0x2d, 0x21, 0x0, 0xe3d}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000780)=""/183, 0xb7, 0x0, &(0x7f0000000840)=""/210, 0xd2}}, 0x10) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='_\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000004000000000000000000000000000000000000120af6ca5af5bf095195682486aacb71ce45f2e15417d903eb7d555d8e228bb5db7e54e524325a1290a65eee6ed12598375eb6580f9820234b54b92754b1f988b73aa45eb7015354d268197eb243cd5b3c2db21ebf6809d8559c3a27e5b868070811aba7f26acf0bf37fb40d0bb0a9356a4f05c660399eb7eb8ac17b58d9f14814d876b014a539eac2282863cb56cf7f61720be63d3f0fc34475ea69b09bfb19e0d29812bc9aa2ed09407c27e4c47c630e29db087925522892f2b18678db050400000000000000e98c865992fe64edcd31a18c37b949f9ac492ebb3b907372a0ff84e00e8055c94897d170dc8cde4d5b79fcd46a756cc87052d2"], 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f0000000280)=[{&(0x7f0000000000)="a6", 0x1}], 0x1, 0x5) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000b80)={r2, &(0x7f0000000a80)='\x00', 0x10000, &(0x7f0000000ac0)={@align=0x5, {0x101, 0x3, 0x7fffffff, 0xd}}, 0x400, &(0x7f0000000b00), &(0x7f0000000b40)=0x4}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="800000002c000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0xb, &(0x7f00000004c0)=@raw=[@exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r5, @fallback=0x13, r6, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x3, 0x5}, 0x10, r7, r8, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r11, r12, r13], 0x0, 0x10, 0x3}, 0x94) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=@bridge_newneigh={0x40, 0x1c, 0x20, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r5, 0x0, 0x30, 0x7}, [@NDA_VNI={0x8, 0x7, 0xffffffff}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x9, 0x2, 0xd}}, @NDA_IFINDEX={0x8}]}, 0x40}}, 0x20000000) 2m4.775929219s ago: executing program 0 (id=928): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000086dd6000ed6a00142c00fe8000000000000000000000000000bbff0200000000000000000000000000014e240003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0add28ffcbd204b28848520c4aa52b50b0d73fbe84cc96a8134465dc82f4521177b135f68a4b289765002bb0f871d5eeb0f182164b309977314216afb9a96800961f5123676d39a6553212b91e49593a87dd2a1317834f0c2ace87149e122ead3017b5a101782475ed8af56ffbf45b5d3bff1409c5b6c841f64a797a283017e0a91521eb5a78a588a060d12f06c1e6ebd55af8eb5d"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chdir(0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x20004011) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) setxattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000800)='errors=remount-ro', 0x11, 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x88182, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f0000000840)={0xffffffff, 0x0}) 2m4.606947681s ago: executing program 0 (id=929): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002000000000000008000000000000000000000000000000003bfa57a2ed426977647c3f1f85bdfedcdf98b9c746c0d86cdf1fe363afb439e3e0aacaf9bd4d8adc2ed047713ee0fd627f2e320d47e5085b4d6a6eb3ccc38ec43b473b84c670cb4085d9e01de15ecf634ad844feb21b7aff2ec9ccbc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000000000a09c29cbddb4028d5474248bc681231f00008100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800b9f41b0f8e0000010000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m3.603427203s ago: executing program 0 (id=934): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x6, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x21, 0x803, 0xcbfe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x5, 0x0, 0x66) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000030428bd6400fcdbdf25006fc28cd891bd08a5ddc480d5", @ANYRES32=0x0, @ANYBLOB="46060900000000003c00128009000100766c616e000000002c000280280003800c0001000d000000070000000c00010005000000020000000c000100000800000100000008000d00ae0c00000800040005000000"], 0x6c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20000000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m2.656498225s ago: executing program 0 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x1b, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 2m0.787779291s ago: executing program 0 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900c60000001e0000000a0006000802110000000000040067001c00330008010000ffe28baa7a3c6ea0ffffff8a43848811000001ff"], 0x54}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a32000000000800410072786500140033006272696467655f736c6176655f3000000900020073797a32000000000800410073697700140033006e6574706369300000000000000000000900020073797a310000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410072786500140033007465616d3000001800000000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000710025042dbd70007f00000007000000", @ANYRES32=r8, @ANYBLOB="0ccc3b04587796faf8b6143ad9b96e4d0001800800010063000100f015778a2b7f55ee9297413d02d5d7ddb4295ea460b225c6e919c61e1d20c30532c6fab611e0fb482a1ab79d34ca0b367f82592c5e36576a8bf5902d88a08853215fcc191d2a194ba92ee555eca78508bb3e4eddb9e91b8c1804837eddc892e79eb7f93c9e0eaceace56769c96ca19ee7b8f05d65916b77cb4d83bb26424989d2d2b8c3e"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m0.592469135s ago: executing program 35 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900c60000001e0000000a0006000802110000000000040067001c00330008010000ffe28baa7a3c6ea0ffffff8a43848811000001ff"], 0x54}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a32000000000800410072786500140033006272696467655f736c6176655f3000000900020073797a32000000000800410073697700140033006e6574706369300000000000000000000900020073797a310000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410072786500140033007465616d3000001800000000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000710025042dbd70007f00000007000000", @ANYRES32=r8, @ANYBLOB="0ccc3b04587796faf8b6143ad9b96e4d0001800800010063000100f015778a2b7f55ee9297413d02d5d7ddb4295ea460b225c6e919c61e1d20c30532c6fab611e0fb482a1ab79d34ca0b367f82592c5e36576a8bf5902d88a08853215fcc191d2a194ba92ee555eca78508bb3e4eddb9e91b8c1804837eddc892e79eb7f93c9e0eaceace56769c96ca19ee7b8f05d65916b77cb4d83bb26424989d2d2b8c3e"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.090692533s ago: executing program 2 (id=1691): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.951357714s ago: executing program 2 (id=1693): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r2, 0x1, 0x0, 0x2000}) syz_open_dev$vcsa(&(0x7f0000000100), 0x34f22fc, 0x8000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x64c21000) 4.803284949s ago: executing program 2 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x7f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(r3, 0x0, 0x8000) migrate_pages(0x0, 0x81, 0x0, &(0x7f0000000080)=0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861"], 0x1ec}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.864312781s ago: executing program 2 (id=1703): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002000000000000008000000000000000000000000000000003bfa57a2ed426977647c3f1f85bdfedcdf98b9c746c0d86cdf1fe363afb439e3e0aacaf9bd4d8adc2ed047713ee0fd627f2e320d47e5085b4d6a6eb3ccc38ec43b473b84c670cb4085d9e01de15ecf634ad844feb21b7aff2ec9ccbc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000000000a09c29cbddb4028d5474248bc681231f00008100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800b9f41b0f8e0000010000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.499257325s ago: executing program 8 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}, 0x44}], 0x1, 0x20, 0x0) 3.40809575s ago: executing program 7 (id=1712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = msgget$private(0x0, 0x208) msgsnd(r1, &(0x7f0000002880)={0x1}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000008e61d27d70b7b0885002ccfcc20f14d7ef915cc63b19932fc4f27f2e3fb7e7fd0e9a4b9c19394e6bfec7b74c50a7dea33f7b71cfdf76886085d12535805d126bbe3466606b7bfaa8be2e9299ad271f4619e780edb548473ba649a75cca8abee4538694a8e2459273100e9d2ea1b548ff0510e9ad25d2e7742884f0056e501cc28149ac363d6a9c4b57933e026fcca78bcaea4baee8f7e21a246f60d78e21e046bb9562f9d355bb281b4718"], 0xb5, 0x800) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x4000000, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) 2.945706537s ago: executing program 6 (id=1715): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x42, 0x4, 0xaf8, 0xffffffff, 0x0, 0x990, 0x98, 0xffffffff, 0xffffffff, 0xa60, 0xa60, 0xa60, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x898, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x6}, {0x7, 0x3}, {0x5, 0x1}, {0x1ff}, {0xb6de}, {0x8001, 0x3}, {0x40}, {0xe, 0x2}, {0xfffffffe, 0x3}], [{0xa, 0x4}, {0x8fb, 0x3ae6}, {0x2, 0x3}, {0x8001, 0x10}, {0xfffffff7, 0x1}, {0xfffffffa, 0x39}, {0x3, 0x7}, {0x400, 0x9}, {0x9, 0x3}, {0x5, 0xf}, {0x5, 0xfffff000}], 0x1, 0x4}, {[{0x3, 0x3}, {0x4000000}, {0x4, 0x1}, {0xbab, 0x1}, {0x5}, {0x4d9c, 0x2}, {0x1, 0x3}, {0xe75d, 0x1}, {0x7fffffff, 0x2}, {0x4b8}, {0x7}], [{0x10}, {0x10000, 0x1}, {0x8}, {0x1, 0xffffff00}, {0xe, 0x1}, {0xe00, 0x8}, {0xd, 0x1}, {0xf, 0x5}, {0xee25, 0xc}, {0x4, 0x81cc}, {0x7e, 0x100}], 0x0, 0x3}, {[{0x401}, {0x1f, 0x1}, {0x9, 0x2}, {0xa, 0x3}, {0x2e07}, {0x8}, {0xec21, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x10000}, {0x5, 0x1}], [{0x5, 0x8}, {0xfffffffa, 0x7ff}, {0xfffffffb, 0x3}, {0x1937, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x7}, {0x9, 0x6}, {0x0, 0x91b}, {0x3, 0x6}, {0x8, 0xb2}], 0x5, 0x6}, {[{0x40, 0x1}, {0x400, 0x3}, {0x9e, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0xff}, {0x2, 0x1}, {0x2}, {0x91, 0x1}, {0xeb1}, {0x81, 0x2}], [{0x4, 0x8}, {0x1ff, 0x6}, {0x1, 0x8001}, {0x4}, {0xd, 0xfff}, {0x2, 0x800}, {0x1, 0xe3}, {0x3, 0xb}, {0x18000000, 0x7fffffff}, {0x3}, {0x8, 0x3ff}], 0x8, 0x2}, {[{0xc85b, 0x1}, {0x1ff, 0x1}, {0xfffffff8}, {0x6, 0x6}, {0x3, 0x2}, {0x47e, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x7}, {0x8, 0x2}, {0x8, 0x2}], [{0xc, 0x1}, {0xffff, 0x4}, {0x2, 0xd2}, {0x4, 0x8}, {0xb, 0x80}, {0x2, 0x1}, {0x4d}, {0x3, 0xffffffff}, {0x3, 0x7}, {0x32, 0x7}, {0xd, 0x5}], 0x3, 0x8}, {[{0x7fffffff}, {0x6}, {}, {0xfffeffff}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x1}], [{0x3, 0x6}, {0xe763, 0x9}, {0x3, 0xfffffffd}, {0x9, 0x81}, {0x5, 0x60000000}, {0x80, 0x89f}, {0x8, 0xf}, {0xfffffc00, 0xa0}, {0x5, 0x400000}, {0x78, 0x8}, {0xffffff4c, 0x9}], 0x0, 0xb}, {[{0x7, 0x2}, {0x800, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x99a, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x967, 0x2}, {0x7ff, 0x1}], [{0x1, 0x5}, {0xfffffffe, 0x9}, {0x6, 0xfffffff7}, {0x6, 0xf52c}, {0x0, 0xfffff51e}, {0x2, 0x7ade}, {0xfffffe00, 0x4}, {0x7, 0x9}, {0x8, 0x1000}, {0x100, 0xfffffffa}, {0xe, 0x3e06}], 0x0, 0x5}, {[{0x1, 0x2}, {0x100}, {0xfffffffe}, {0x8}, {0xb74, 0x3}, {0x7fff, 0x1}, {0xcc8}, {0xebb, 0x2}, {0x20e0}, {0x7, 0x1}, {0x6, 0x3}], [{0x1e5f, 0xc08f2407}, {0x502, 0x6}, {0x200, 0x10001}, {0x3, 0x8}, {0x7ff}, {0x7, 0x3}, {0xfffffffc, 0x2}, {0x9, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0xd9}], 0x4, 0x9}, {[{0x0, 0x3}, {0x8ee, 0x3}, {0x2}, {0x3}, {0x9, 0x3}, {0x80}, {0x4, 0x2}, {0xffff92a1, 0x1}, {0xfff}, {0x4, 0x3}, {0x1, 0x3}], [{0x5, 0x80000000}, {0x8, 0x8}, {0x1000, 0xd057}, {0x0, 0xf}, {0x2, 0xd933c84}, {0x2, 0x7}, {0x81}, {0x100, 0x8}, {0x58d, 0x2}, {0x5d5f, 0x2}, {0x7174, 0x1}], 0x0, 0x8}, {[{0x3, 0x2}, {0x1, 0x2}, {0x7ff, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x1da1, 0x2}, {0x0, 0x2}, {0x5b3, 0x3}, {}, {0x1, 0x3}, {0x7fffffff}], [{0x4, 0x88b}, {0x1, 0x5}, {0xc, 0xfffffffe}, {0xe, 0x5}, {0x9, 0x9}, {0x5, 0x5}, {0x8}, {0x3}, {0x4, 0xe8}, {0x1f, 0x1}, {0xfff, 0x8}], 0x3, 0x5}, {[{0x9, 0x2}, {0x7f}, {0x80, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x4f079710, 0x1}, {0x7fffffff, 0x3}, {0xf0b, 0x3}, {0x3}, {0xcd, 0x3}], [{0x2, 0x4}, {0x8, 0xe0}, {0xffffffff, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0xffffffff, 0xb}, {0x40, 0x2}, {0x9, 0x4}, {0x9, 0x9815}, {0x4, 0x2}, {0xe0, 0x1}], 0x6, 0x6}], 0x3}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x22, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x3, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb58) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000000b0102000000000000000000000001060001002d00000008000240000000010800034000000001fa620cc664d9c374b8c4c85fb63c41809cfef4d55e16235bd6dd5df896e6a954fd4257e6a1dc543f5c7c9e143ce267fc1b20b7b74e2f42bde4596a8e71d011e9e6f632c0842eed6821e194b91af5446d9f982771129f5f578096c7be8ba40ff9af7b1f"], 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x8, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x4001af84, &(0x7f00000001c0)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x25e183, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000100)=0x10000) 2.831691269s ago: executing program 6 (id=1716): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x1c}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r7, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, r4, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x2040000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x548403) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80801, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f0000001500)=""/4096, &(0x7f0000002500)=0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0), 0x600000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c77660f7f537c", @ANYRESHEX=r10, @ANYBLOB=',access=', @ANYRESDEC, @ANYBLOB=',\x00']) 2.801119236s ago: executing program 5 (id=1717): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.781197289s ago: executing program 6 (id=1718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x8000000, 0x0, 0x800}, 0x40c0080) 2.68793155s ago: executing program 5 (id=1719): syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r0, r0, 0x0, 0x1000000000007) 2.687007117s ago: executing program 6 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(0x0, 0x40, 0x18, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.596204336s ago: executing program 8 (id=1721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) pread64(r7, &(0x7f0000000000)=""/119, 0x77, 0x67) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000080)=0x0) sendmsg$kcm(r7, &(0x7f0000002600)={&(0x7f0000000280)=@nfc_llcp={0x27, r9, 0x1, 0x4, 0x9, 0x1, "9acb70b6a521e7a487406a1b2c70b3ef012f37d29a05c4ede1aafc8967f9bacae896d3c4b1f6715a44e4349c20a1a5544dbc31fbe448b22bfb1fcf9813210d", 0x15}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000340)="2473a1255851b595cadca0a2c7b6db1b519838520a5a9917ab16ff508dabda08f8f95a8f9d8261e3cff4fc0876ad643c21bc6cec60f39b966ad8118935e5d9ac65809943b3", 0x45}, {&(0x7f00000004c0)="1ada3f762e03e253cea5eb784f8def8c342682d28be91037603adb17cfa67a5438f883606c52d8f2321c3ff297c6e1a1800b7519e286bbac11026d703558f67a03689fa3902b056bd78ced1515fc633e2b03e7f812de353de5726ea3310b47eb6b1bd88c37fe05a32cc9d67292e102385e6f0307bc09b6a79d112ecf341cc32fe81471b204ddf4efc95a287126fe885b9e1aedb28daeee394e10eb228fc3907f07e1bdc7d9ab740c33aad241195a843aa42b15f9", 0xb4}, {&(0x7f0000001300)="2b227469b53e644e81f6e839f0e528681bfb3ad8f6b6a8bfa37e3e0f5fa11b77adde319e0bfe7c1b44abc56fe44be96b2ce8dba7c5c3f7a8b141f09670464a6184dbdb695d80d4bb0556fe981f653760f4d189c196a91c12d2d204986ecf88ffc6ae932c0d00bfa31c2bf80bc0dcdbdcc006ee9a29b0131916679b677daeae3b72ce94411d6b73934356de62655ea64ea8a9b381fc9bda827c6f2fae702715cadaa8c2a36708dd4cdc185cc409e10cf5f35ec048ec4840aa8989675f758e39253fcdb3586be978a7c4635c7754aa4cffa3f2b224b5a1f54dfa1be7a882349469f792975be429bfa2608e1ad0d948323b645315eeb013916ceae50a41f5654b70a5e9874c71a5b66ef6f4f9372b0781c3480c5e9ed87cd930be389c0920956c68d33628ab8be5b8d7f6751843d34d83c67337462b58d5e713ef095dbbe13f8fce9fc8087c4c1911b4daad2638489c4269311deffd773a365482800c8afa8ff47c846873af1ae85fb2ddaf73a75f25aba4515fe6e5376899d64e332a48986cb6e4d4b9617d38ab11f7e80b63a3de2a13ea5d2e3a81a2100709fd1b6867974b3753b32842f7358af08e9d56aea5dc740a68997f933af2f4f76a81039b2f4ff2f144562e39d71792c294e3810dc7cbc7662c585b0da5ef32ca1928d0d9765adb65f911a66023590e98705062bb8b38ad390040837fac71e18dfecd637512e3b87e6f20d7c2b91fbb5a7dd706bd9678f46bee9c6fc0fadf52a8efcd66f801f335bd29615a3a2ed2f4400818d2a94f0efd8a5c322e5f99d28a6e14751163cbd1813bbc15832368ba1c65671ad0c625958cb39c01499a4996a79e4c5805c3201346846d8ba587a53bdb88b74a6bbafd7022f81078bf416965c2a802301bbed3487b9c588382fdf1e4b484dd8214a30f9382d7e3ccb06026413054c339d8a1d3e9288c97c63998980277cc0c60fcb388cdcfab2c243cead9a0519cc261a1ee1d756573d0162caca13bb2971495790e5b0b2bceb14b44c863882aabd9fc7ee98a757902d9faec9c2b1063c60d7007323ed401290ea2c4275cbf349114df7f102cb24d7813a90327e7b54e2e69162a287ff4efae71cde120ae026066e4073f653225b119aabc4fc72be357fa6d522add4dab4035611b137ef0cfc7413a24007b2b83a36681eeca8944c3922ccfa28fe23d1303bca0102a71d37c4b88504c2511bc8ae1fc598589960bef4d169540523cee27950acd7aea435f22140b47f0e774da93dd8bcc46a06bcd4f1d999f78485f9120cb410f8fc9ad56c7cbc773e7e0d0844e225076abd52cad4052e42f715f11ea702c92bdb5b6360fd238cb4f8d6d86ad17c14c2f9497eb04c1ff037a71d4494e422009c52ffd12e309d489e648c0c1a7c8c20fa36aacc2010f9a2293e45f22c7b588645f08356e3f3c186dc329d96fca8a0b54dc37e5bb5ce7afc32e6a8e25eda0bcb611933d3e1adcadb8af6cb2597871e534049f07b83741c5f54a66140630f98bde7105c9f5b75eae71233d2ba03728113a46077c37d7fe6738929de08bb3d9bda3a7046e76fb255090fa3318a2c5f59172dd78d2e4918ed7c960560abc89b0f6cf99c84583755e973ce3fb39533023e4be6b27b4191653621d2419993683d71d39bdfaa6393d58be310eb0db1330135b885793b23167722d33e243ad05661002bf52bf461fc355de9e3c3434802430f59a1e633c5b72eb5bf016ba476bf6d010d1c4eed50151c6690233952fa791cadf788c472deff6978db20cfaebd054299fa5db54cbd30331635e5b6c86330cf041202a98a0cd70b60824cdc0dc613c993537791921be5cae837224d059ab9a52148dcd3e3fdf79cc74c14e287b0e64a340977f49686a4162ec9ef1c84f9e7caafc65d85ea2f4061a24bce22a6f6a7539521fdd0a2ed8f60c8f7c1812ae0c3e0052d14dab2c552c4954baa7245b9796b5a30340be9881e6f2f5bbd09fbb3ce13bcaa08be8907167cc59058f0ed886ff715845da7fa5a4e9dd959d422494c5ba263e9e278784eafcd0848ed49e92182734d0fc99820585aeb3fa7d7f0755698f470d5b44db55520e106b73df8f7122a7ba3bc21408a79c7d86f6a2e0fd2f21ffd35bdc18655aa2516e60087b7cf5c1c75d0cee0855f483b6c25f0199eccb6f1f777a1551b0807813551692cfbb7e70a33882ffd6e0cfb0a0a88158b13b468a79fde664cc100526805cb1fde3f819a8eebb5bd9bdca5022e84d565a090fe922d627b2e4022b0b6979db84808350eb1754050e5c6d0dcce2301e87e8e5bb9939f4808d2f56c2c68bbfa5cfbde6a6389bacfab764648ae94631d9010327597dd4097ce9a7a24777d0c2abe73f21e4a5ec366d193ca655dd48cf153e7d42bbaf10ae10ab9e4d56b67da35116283b22b0489f77cae6a395fe7f104d617fc1ed40580db8a7ad756c669614857c5bd489c3de1a8616a7248a5fcab1a64d4f6e18e3a1468b79a7eac821bdf0e0a41abc7a34b2f91c0d19d7be9f97fa0fa06eb9569026d423e66382ba875cf5e3f5414446f231802136ccd497d044cdf1f453c7043ba2a198d2a063133c419bfb989713f8a63d5a89cfab53a21256ede95fe59313a0aa72cd33e720ebb946ba76ff6255f4df3e4c75cc8e38cdff0f9bdd39dfed0a83f707952539f50edb3c98394255a8c11cd6d32ab80648788123394317f38d4052d3edc08884a2a36a6213a69a502ba268e2774a1368f00ab2b932af4ad9087183229632d2f19a4949e362f4d120a8b2252449013088a97c2fad8932cd2e3be92eee49f1481791cfeb2ac8650809a31d84d70db1bce76c0dee4c8909414cfa8fc6a519e426a28fb5fcc6970aabdc5e479ee2139ed15427906d0a9b857ee63f513feed838bb34a05ba99b687f9d750d4b6fb75aa5207fe5873f350ff061754899b081788e7d7ba82aeade543964d4e23827e25ddd5be6a90aafbac8929e7895421aa511b665e711ad4563c54df2da6289d467087fbb3b3d156e70091978984f2064feb5c68a1e3eb9461265b170099a6b7b272f8a95fb1ac4be7be51a92f490ef4c95d3ba8f85174d9f0180eb41fbeca6e8408e4999464ef2c652b06900a45f15c43e092a2e1594fc742b94b72fcd2af388d727a58f40ff662b7a02eadcb7dc42ec1aa5d730864b7007ef5359f0b4d47384dbe90055aca27a161d03ca682f6321f18e54f6585e2ee4ddb0f870496331a07bfc133320cdf76dfdccdcd688ee980d574df3be3d1fabdd0d105cb1aeba09ef99df66a21e5fca9fdbbae9caff5f624da47d70015395eb4b1d54bb8c4b35fe0c78ca088e35a20607f49b85a189d3ecc5da6d6ed78445afcbc89f9b6cac5af2caf413c21ecf3da5b045407365bcab31f3afa98beee23df6c4716453fe5bbcdf4151e420ec925fb60ffd14045904370dd50e1dbf012bf80e560559777db1a5ec372ca71fa266e22729a48cebdfd1d50e8d515b0dc230ba31083880c9afcc56983e5310b3d6b867e3940c1009ce971dd7aeea906d4cde844edaa3c4b3443f8479f918c0445edd79ffcd9341326a4d7ef42747729b7185f7500cdd29c39e1a94d1cb0369d8675f4969e19d105f424a51d5b4c2122fe524bb17405160c0adf630a0be31a14e2347e69bda8b974329dfe9a337dde3d0afb9b02fb6c9a41ff1d3a27ce725b12e2ce9bfa2d998a65efdd946c5c5b192af2f31c55702cd8ca6317ee71a8ba8ed0c3f2babd61cd663241a52ecac32b9cd4c7e5370984f4baebf11dac9f6a0aa0a4eab6dc7c436fa8155b574a35690c3ca739d683a8aa0ee524d692ee67035b86bfa1be8d503be11cdeb15f647e707dd3e5d858977906c8d69daddb9345ee3f45adac9fd6dcfa078429a41481b77fd3d09d73ef4f72029a671c17ad7328853d51a1b0248f9480c5688de4538d073c58feb7ad3e3f5c79ecf132c74663a25dd67d5bb35b8d3e9165f8d92c4427aa996090c93077df446de0d31c88f1074455d8be9b7be25242243bb534a9d65d3728cd8d7787eaa9256a3cadef133ddb45c2713c6e4265c5c2a45d3cc6e872036c36e757aa8878b17a4808a9017a7610ae641c1c4c5d0fc283354cfaa622e1f16f471d89bac495fd689e42c3215d3d45bdb46111f6f6ade1e0f730a3578bf703d179a1e1b0ca1405913e28ab60ea1ea72b0cf5bcb59a8406e427f3b73f4d73c1bac4ba326427f6097a0cc5dac3a9870e911dc1ba05c2dc22f27d6ac00ce9688ea270e8c8048bc06f3324105cc41f5fe285dc9e25ef6699eaa061e3daacbc6b1e5089670951c47fb574f4e66cd0690eb2507a06cae8ee0b60b1e6b2bbaf3fe4974c777387497ecefe9db2297293d5e1bdbb9fda7bde24c6e608852ee16005face82230eef936964274ffc6076e988a21decc8b4d1d3556f8a960eae4fc493eb1d2dba39aaf38691dac68086e976a891cf202c7d84ee108d0f5f84191ead361f936bfa853f1aaea8c146984b58f57595ebfd5261327bef32ffab1147b6f5bf5bc7793b929e2cf291a0dd4d91729264b61ed243d4c4c48f561e333ac89e8b3e7e7b03861610afa8a6d9771100be1a472be56a65439af666e2b36b3772f82c68c851c1ccaa9671eaf9e5a7f73846c11a9607f8bd119db2bb684cb292cc35a81b59955b8209355fb5ea4284af4708b13f9ac221ac0026ab0041cff15611c52e3fcd7d22de4deca3318574777acd40598ad32a858bcd1133d955abf8a5365316a857a92d8f6067efcd7448f892fc4b090d791353bf74a0afb7e8f8b81554ee6b4d15a95a45b77c7f1194bbf472ffe1170af78d7af437955e4f03c07c2c795015bad03c5890bd36c555ffc16d30573597ae4d63e944b920bb0d00eae5724d8ff2cbd2cd14cadfd8ba66986869d7bf36da239aa199fa67f0d082b854552a8a686b14682255b9ab7f4d3d30d0563be3da19014f2cef1fa2627dbf7b2a0ec40ba6e10c489b2c87fefe5f8c544b51be0a945559be860622eea18d2fcceaece89a8fd2b82e7771aa9ed257d6b1097aeb4e2d1fc6c28492513ececfd3ccce6a7866864625014596dbde645ea119bbdcb720d56eb53e5e8ae48853bf8f5487f1d24aca39c219859b6e53c19d044888c018f20a62769aed75bba54fde89a814aaec7da8f7642bd99cbab8c6651f7d6dfdae72355769ff66236100905a8a7246a2a72eaf10fba233f4ee8b71041d4da182a59f0d25f7688bdc231c9b6b8c4bf8569c11c73b827ccf86f8244c8a2f3440d745f9371894e9bf95d99cb32e19e12e67082783cab540b86bd3956b87626d7ee4dc13f1110cd3984ec34e898fca4c90647f5a91003894ab27645ebd111670c1c25a1d012c86e835ed9dba7aed828bff5ca964f053a11127c198c10b942ec0aa287e6b3ce498d6f0cb466f6361adf4f4444389c96b9e41c60ab871ee7766bd33ef6b3680cd720a6bbada66d4cb315474f35fbf5d4e3707001b257b0a3eb9750c8f2a290be4dfca0232bcfc067d05410b2b9c4eaa15bc0bf67f8ef0f505b8dc3cc3f1e53ee892364d759ce163d6b6ef6eb40f63a06514d72234714db3d1e00ef9c16ff78829e42627bfb1ffcf5a69b94656c8f8b5b58d90960b3c9b0c58dfc5449b52d72ad4b4a5c08f0b98c4047317fc663c3464742e4e43f54d461bc4c2c5d5a166e93e9eb232bbbc9368f3aa9b32d9ab5e3c29bbe1493c290c0a03ef8f9bb9c0bbb4e23f4d9c8defd08509ca120166440fea1fccff440d00cd6664d175faf5d71bd03f23fe52ab223999a19e4c8325d4a2d6d6515ccb3cba66b5bca0a27e5b302", 0x1000}, {&(0x7f0000002300)="abacb20e5ad1aefadf290bbf7eb02178d061d36e3b9d8c6511f8ca622fde404a70cbd0d3309d7082a0b9451f51", 0x2d}, {&(0x7f0000002340)="403474bbcd19f53ed3e1ecbf669c96e60d830ae47be5db0d8c28736b53a783b53e9e7cd2954013004e062bc15e4e4d255a3736206ccc50d433677f0dc0c2a214a3369b19603739cc392f2895f48c35b2c506b1651a08c699600f4702118fbde8ef08e328b37d20de371d1059ae8618bce739461a505eda0a64709688cd005fa3a30f637aa48147d10f84cc57f3", 0x8d}], 0x5, 0x0, 0x158}, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) remap_file_pages(&(0x7f0000065000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.595710904s ago: executing program 5 (id=1722): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.354758693s ago: executing program 7 (id=1723): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.286472939s ago: executing program 8 (id=1724): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) recvmsg(r5, &(0x7f0000002500)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x40000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2.285457531s ago: executing program 7 (id=1725): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) 2.147790776s ago: executing program 7 (id=1726): r0 = syz_open_dev$video(0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB='rodir,nonumtail=0,rodir,rodir,shortname=win95,shortnameepage=862,shortname=winnt,shoruname=lower,shortname=winnt,iocharset=iso8859-9,uni_xlate=1,utf8=0,\x00'/163], 0x81, 0x2d1, &(0x7f0000000880)="$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") sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000400c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 2.049861783s ago: executing program 7 (id=1727): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27", 0x16) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) read(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa10c7b, &(0x7f0000000280)=ANY=[], 0x7f, 0x2d6, &(0x7f0000000880)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x803, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r6, &(0x7f00000000c0)}, 0x20) socket$netlink(0x10, 0x3, 0x0) 1.812413651s ago: executing program 6 (id=1728): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000340)={0x0, 0x1, 0x8, 0x11, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) uname(&(0x7f0000000080)=""/209) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.745883894s ago: executing program 5 (id=1729): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.73982885s ago: executing program 2 (id=1730): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x1c}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r7, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, r4, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x2040000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x548403) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80801, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f0000001500)=""/4096, &(0x7f0000002500)=0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0), 0x600000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB="2c77660f7f537c", @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC, @ANYBLOB=',\x00']) 1.584015624s ago: executing program 5 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}, 0x44}], 0x1, 0x20, 0x0) 1.427763094s ago: executing program 2 (id=1732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401000000000000000000090000000000080041007369770014003300776c616e3000"/50], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000001000200"], 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 1.398371955s ago: executing program 8 (id=1733): set_mempolicy(0x8006, 0x0, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001042abd70000000000000080000", @ANYRES32=0x0, @ANYBLOB="99800300000000002c0012800b000100697036746e6c00001c00028006000f00020000000400130004001300060011004e210000140003006e6963766630"], 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r6, 0x0, 0x2241c2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r3, 0x1, 0x0, 0x25dfdbfb, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x384, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ce1554d, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2c, 0x3, 0x7f, 0x88c, 0x1bbe, 0x6]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x5}, {0x7, 0x7}, {0x2, 0xa}, {0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {}, {0x2, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x3}, {0x4, 0x9}, {0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x3}, {}, {0x4, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x3}, {0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {}, {0x1, 0x9}, {0x4, 0x1a}, {0x3}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x1}, {0x3, 0x9}, {0x1}, {0x3, 0x8}, {0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x2, 0xf00, 0xff, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x0, 0xa0e, 0xa2f, 0x3, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x1, 0x4, 0x5, 0xcd, 0x6, 0x2d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x705, 0x4, 0xa7, 0xf17, 0x1600, 0x7f, 0xc0, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x6c, 0x3, 0x1b, 0x36, 0x2, 0xb, 0x0, 0x0, 0x6, 0x60, 0x48, 0x6c, 0x60, 0x33, 0x24, 0x16, 0x2, 0x67, 0x16, 0x6c, 0x79, 0x24, 0x1, 0x3, 0x1, 0x12, 0x1]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0xc]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x3}, {0x4, 0x6}, {0x1, 0x8}, {}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0x1}, {0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0xa}, {0x4, 0xa}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3}, {0x6}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x4, 0x36, 0x48, 0xc, 0x16, 0x1, 0x24, 0x7c, 0xb, 0x6c, 0x0, 0x18, 0x6c, 0x16, 0x3a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x760c, 0x3, 0xc1, 0x0, 0xfffc, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x5, 0x2, 0x6, 0xb4d65044cc766298, 0x1, 0x2, 0x60, 0x2, 0x18, 0x6, 0x2, 0x16, 0x2, 0x1b, 0x48, 0x12, 0x2, 0x4, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xd, 0x0, 0xa7, 0x1ff, 0xd, 0xfffb, 0x7f4b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0xf8, 0x10, 0xd, 0x3, 0x100, 0x800]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x7}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x5}, {0x3, 0xa}, {0x6}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x19}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x36, 0x6, 0x16, 0x24, 0x1, 0x63, 0x12, 0x1, 0xb, 0x24, 0x18, 0x9, 0x16, 0x1]}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x352, 0x7, 0xe, 0x9fac, 0x4, 0x4, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x30, 0x12, 0xb, 0x4, 0x1b, 0x5, 0x36, 0x36, 0x1b, 0x16, 0x12, 0x24, 0x1b, 0x1b, 0xc, 0x2, 0x9, 0x3, 0x36, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x6c, 0x4, 0x4, 0x3, 0x48, 0x1, 0xc, 0x69, 0xc, 0x48, 0x1b, 0x6, 0x15, 0x1b, 0x9, 0x4, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe97b, 0x7, 0x5, 0x6000, 0x9, 0x3, 0x2, 0x8]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf538, 0xd, 0xffff, 0xd, 0xfff, 0x2, 0xd6a2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x9, 0x1b, 0x2, 0x6c, 0x12, 0x24, 0x30, 0x1b, 0x16, 0x5, 0x4, 0xb, 0x14, 0x30, 0xc, 0x60, 0x6c, 0x36, 0x16]}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x51}, 0x20000005) 1.295746782s ago: executing program 8 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = msgget$private(0x0, 0x208) msgsnd(r1, &(0x7f0000002880)={0x1}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000008e61d27d70b7b0885002ccfcc20f14d7ef915cc63b19932fc4f27f2e3fb7e7fd0e9a4b9c19394e6bfec7b74c50a7dea33f7b71cfdf76886085d12535805d126bbe3466606b7bfaa8be2e9299ad271f4619e780edb548473ba649a75cca8abee4538694a8e2459273100e9d2ea1b548ff0510e9ad25d2e7742884f0056e501cc28149ac363d6a9c4b57933e026fcca78bcaea4baee8f7e21a246f60d78e21e046bb9562f9d355bb281b4718"], 0xb5, 0x800) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x4000000, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) 362.108082ms ago: executing program 8 (id=1735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) pread64(r7, &(0x7f0000000000)=""/119, 0x77, 0x67) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000080)=0x0) sendmsg$kcm(r7, &(0x7f0000002600)={&(0x7f0000000280)=@nfc_llcp={0x27, r9, 0x1, 0x4, 0x9, 0x1, "9acb70b6a521e7a487406a1b2c70b3ef012f37d29a05c4ede1aafc8967f9bacae896d3c4b1f6715a44e4349c20a1a5544dbc31fbe448b22bfb1fcf9813210d", 0x15}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000340)="2473a1255851b595cadca0a2c7b6db1b519838520a5a9917ab16ff508dabda08f8f95a8f9d8261e3cff4fc0876ad643c21bc6cec60f39b966ad8118935e5d9ac65809943b3", 0x45}, {&(0x7f00000004c0)="1ada3f762e03e253cea5eb784f8def8c342682d28be91037603adb17cfa67a5438f883606c52d8f2321c3ff297c6e1a1800b7519e286bbac11026d703558f67a03689fa3902b056bd78ced1515fc633e2b03e7f812de353de5726ea3310b47eb6b1bd88c37fe05a32cc9d67292e102385e6f0307bc09b6a79d112ecf341cc32fe81471b204ddf4efc95a287126fe885b9e1aedb28daeee394e10eb228fc3907f07e1bdc7d9ab740c33aad241195a843aa42b15f9", 0xb4}, {&(0x7f0000001300)="2b227469b53e644e81f6e839f0e528681bfb3ad8f6b6a8bfa37e3e0f5fa11b77adde319e0bfe7c1b44abc56fe44be96b2ce8dba7c5c3f7a8b141f09670464a6184dbdb695d80d4bb0556fe981f653760f4d189c196a91c12d2d204986ecf88ffc6ae932c0d00bfa31c2bf80bc0dcdbdcc006ee9a29b0131916679b677daeae3b72ce94411d6b73934356de62655ea64ea8a9b381fc9bda827c6f2fae702715cadaa8c2a36708dd4cdc185cc409e10cf5f35ec048ec4840aa8989675f758e39253fcdb3586be978a7c4635c7754aa4cffa3f2b224b5a1f54dfa1be7a882349469f792975be429bfa2608e1ad0d948323b645315eeb013916ceae50a41f5654b70a5e9874c71a5b66ef6f4f9372b0781c3480c5e9ed87cd930be389c0920956c68d33628ab8be5b8d7f6751843d34d83c67337462b58d5e713ef095dbbe13f8fce9fc8087c4c1911b4daad2638489c4269311deffd773a365482800c8afa8ff47c846873af1ae85fb2ddaf73a75f25aba4515fe6e5376899d64e332a48986cb6e4d4b9617d38ab11f7e80b63a3de2a13ea5d2e3a81a2100709fd1b6867974b3753b32842f7358af08e9d56aea5dc740a68997f933af2f4f76a81039b2f4ff2f144562e39d71792c294e3810dc7cbc7662c585b0da5ef32ca1928d0d9765adb65f911a66023590e98705062bb8b38ad390040837fac71e18dfecd637512e3b87e6f20d7c2b91fbb5a7dd706bd9678f46bee9c6fc0fadf52a8efcd66f801f335bd29615a3a2ed2f4400818d2a94f0efd8a5c322e5f99d28a6e14751163cbd1813bbc15832368ba1c65671ad0c625958cb39c01499a4996a79e4c5805c3201346846d8ba587a53bdb88b74a6bbafd7022f81078bf416965c2a802301bbed3487b9c588382fdf1e4b484dd8214a30f9382d7e3ccb06026413054c339d8a1d3e9288c97c63998980277cc0c60fcb388cdcfab2c243cead9a0519cc261a1ee1d756573d0162caca13bb2971495790e5b0b2bceb14b44c863882aabd9fc7ee98a757902d9faec9c2b1063c60d7007323ed401290ea2c4275cbf349114df7f102cb24d7813a90327e7b54e2e69162a287ff4efae71cde120ae026066e4073f653225b119aabc4fc72be357fa6d522add4dab4035611b137ef0cfc7413a24007b2b83a36681eeca8944c3922ccfa28fe23d1303bca0102a71d37c4b88504c2511bc8ae1fc598589960bef4d169540523cee27950acd7aea435f22140b47f0e774da93dd8bcc46a06bcd4f1d999f78485f9120cb410f8fc9ad56c7cbc773e7e0d0844e225076abd52cad4052e42f715f11ea702c92bdb5b6360fd238cb4f8d6d86ad17c14c2f9497eb04c1ff037a71d4494e422009c52ffd12e309d489e648c0c1a7c8c20fa36aacc2010f9a2293e45f22c7b588645f08356e3f3c186dc329d96fca8a0b54dc37e5bb5ce7afc32e6a8e25eda0bcb611933d3e1adcadb8af6cb2597871e534049f07b83741c5f54a66140630f98bde7105c9f5b75eae71233d2ba03728113a46077c37d7fe6738929de08bb3d9bda3a7046e76fb255090fa3318a2c5f59172dd78d2e4918ed7c960560abc89b0f6cf99c84583755e973ce3fb39533023e4be6b27b4191653621d2419993683d71d39bdfaa6393d58be310eb0db1330135b885793b23167722d33e243ad05661002bf52bf461fc355de9e3c3434802430f59a1e633c5b72eb5bf016ba476bf6d010d1c4eed50151c6690233952fa791cadf788c472deff6978db20cfaebd054299fa5db54cbd30331635e5b6c86330cf041202a98a0cd70b60824cdc0dc613c993537791921be5cae837224d059ab9a52148dcd3e3fdf79cc74c14e287b0e64a340977f49686a4162ec9ef1c84f9e7caafc65d85ea2f4061a24bce22a6f6a7539521fdd0a2ed8f60c8f7c1812ae0c3e0052d14dab2c552c4954baa7245b9796b5a30340be9881e6f2f5bbd09fbb3ce13bcaa08be8907167cc59058f0ed886ff715845da7fa5a4e9dd959d422494c5ba263e9e278784eafcd0848ed49e92182734d0fc99820585aeb3fa7d7f0755698f470d5b44db55520e106b73df8f7122a7ba3bc21408a79c7d86f6a2e0fd2f21ffd35bdc18655aa2516e60087b7cf5c1c75d0cee0855f483b6c25f0199eccb6f1f777a1551b0807813551692cfbb7e70a33882ffd6e0cfb0a0a88158b13b468a79fde664cc100526805cb1fde3f819a8eebb5bd9bdca5022e84d565a090fe922d627b2e4022b0b6979db84808350eb1754050e5c6d0dcce2301e87e8e5bb9939f4808d2f56c2c68bbfa5cfbde6a6389bacfab764648ae94631d9010327597dd4097ce9a7a24777d0c2abe73f21e4a5ec366d193ca655dd48cf153e7d42bbaf10ae10ab9e4d56b67da35116283b22b0489f77cae6a395fe7f104d617fc1ed40580db8a7ad756c669614857c5bd489c3de1a8616a7248a5fcab1a64d4f6e18e3a1468b79a7eac821bdf0e0a41abc7a34b2f91c0d19d7be9f97fa0fa06eb9569026d423e66382ba875cf5e3f5414446f231802136ccd497d044cdf1f453c7043ba2a198d2a063133c419bfb989713f8a63d5a89cfab53a21256ede95fe59313a0aa72cd33e720ebb946ba76ff6255f4df3e4c75cc8e38cdff0f9bdd39dfed0a83f707952539f50edb3c98394255a8c11cd6d32ab80648788123394317f38d4052d3edc08884a2a36a6213a69a502ba268e2774a1368f00ab2b932af4ad9087183229632d2f19a4949e362f4d120a8b2252449013088a97c2fad8932cd2e3be92eee49f1481791cfeb2ac8650809a31d84d70db1bce76c0dee4c8909414cfa8fc6a519e426a28fb5fcc6970aabdc5e479ee2139ed15427906d0a9b857ee63f513feed838bb34a05ba99b687f9d750d4b6fb75aa5207fe5873f350ff061754899b081788e7d7ba82aeade543964d4e23827e25ddd5be6a90aafbac8929e7895421aa511b665e711ad4563c54df2da6289d467087fbb3b3d156e70091978984f2064feb5c68a1e3eb9461265b170099a6b7b272f8a95fb1ac4be7be51a92f490ef4c95d3ba8f85174d9f0180eb41fbeca6e8408e4999464ef2c652b06900a45f15c43e092a2e1594fc742b94b72fcd2af388d727a58f40ff662b7a02eadcb7dc42ec1aa5d730864b7007ef5359f0b4d47384dbe90055aca27a161d03ca682f6321f18e54f6585e2ee4ddb0f870496331a07bfc133320cdf76dfdccdcd688ee980d574df3be3d1fabdd0d105cb1aeba09ef99df66a21e5fca9fdbbae9caff5f624da47d70015395eb4b1d54bb8c4b35fe0c78ca088e35a20607f49b85a189d3ecc5da6d6ed78445afcbc89f9b6cac5af2caf413c21ecf3da5b045407365bcab31f3afa98beee23df6c4716453fe5bbcdf4151e420ec925fb60ffd14045904370dd50e1dbf012bf80e560559777db1a5ec372ca71fa266e22729a48cebdfd1d50e8d515b0dc230ba31083880c9afcc56983e5310b3d6b867e3940c1009ce971dd7aeea906d4cde844edaa3c4b3443f8479f918c0445edd79ffcd9341326a4d7ef42747729b7185f7500cdd29c39e1a94d1cb0369d8675f4969e19d105f424a51d5b4c2122fe524bb17405160c0adf630a0be31a14e2347e69bda8b974329dfe9a337dde3d0afb9b02fb6c9a41ff1d3a27ce725b12e2ce9bfa2d998a65efdd946c5c5b192af2f31c55702cd8ca6317ee71a8ba8ed0c3f2babd61cd663241a52ecac32b9cd4c7e5370984f4baebf11dac9f6a0aa0a4eab6dc7c436fa8155b574a35690c3ca739d683a8aa0ee524d692ee67035b86bfa1be8d503be11cdeb15f647e707dd3e5d858977906c8d69daddb9345ee3f45adac9fd6dcfa078429a41481b77fd3d09d73ef4f72029a671c17ad7328853d51a1b0248f9480c5688de4538d073c58feb7ad3e3f5c79ecf132c74663a25dd67d5bb35b8d3e9165f8d92c4427aa996090c93077df446de0d31c88f1074455d8be9b7be25242243bb534a9d65d3728cd8d7787eaa9256a3cadef133ddb45c2713c6e4265c5c2a45d3cc6e872036c36e757aa8878b17a4808a9017a7610ae641c1c4c5d0fc283354cfaa622e1f16f471d89bac495fd689e42c3215d3d45bdb46111f6f6ade1e0f730a3578bf703d179a1e1b0ca1405913e28ab60ea1ea72b0cf5bcb59a8406e427f3b73f4d73c1bac4ba326427f6097a0cc5dac3a9870e911dc1ba05c2dc22f27d6ac00ce9688ea270e8c8048bc06f3324105cc41f5fe285dc9e25ef6699eaa061e3daacbc6b1e5089670951c47fb574f4e66cd0690eb2507a06cae8ee0b60b1e6b2bbaf3fe4974c777387497ecefe9db2297293d5e1bdbb9fda7bde24c6e608852ee16005face82230eef936964274ffc6076e988a21decc8b4d1d3556f8a960eae4fc493eb1d2dba39aaf38691dac68086e976a891cf202c7d84ee108d0f5f84191ead361f936bfa853f1aaea8c146984b58f57595ebfd5261327bef32ffab1147b6f5bf5bc7793b929e2cf291a0dd4d91729264b61ed243d4c4c48f561e333ac89e8b3e7e7b03861610afa8a6d9771100be1a472be56a65439af666e2b36b3772f82c68c851c1ccaa9671eaf9e5a7f73846c11a9607f8bd119db2bb684cb292cc35a81b59955b8209355fb5ea4284af4708b13f9ac221ac0026ab0041cff15611c52e3fcd7d22de4deca3318574777acd40598ad32a858bcd1133d955abf8a5365316a857a92d8f6067efcd7448f892fc4b090d791353bf74a0afb7e8f8b81554ee6b4d15a95a45b77c7f1194bbf472ffe1170af78d7af437955e4f03c07c2c795015bad03c5890bd36c555ffc16d30573597ae4d63e944b920bb0d00eae5724d8ff2cbd2cd14cadfd8ba66986869d7bf36da239aa199fa67f0d082b854552a8a686b14682255b9ab7f4d3d30d0563be3da19014f2cef1fa2627dbf7b2a0ec40ba6e10c489b2c87fefe5f8c544b51be0a945559be860622eea18d2fcceaece89a8fd2b82e7771aa9ed257d6b1097aeb4e2d1fc6c28492513ececfd3ccce6a7866864625014596dbde645ea119bbdcb720d56eb53e5e8ae48853bf8f5487f1d24aca39c219859b6e53c19d044888c018f20a62769aed75bba54fde89a814aaec7da8f7642bd99cbab8c6651f7d6dfdae72355769ff66236100905a8a7246a2a72eaf10fba233f4ee8b71041d4da182a59f0d25f7688bdc231c9b6b8c4bf8569c11c73b827ccf86f8244c8a2f3440d745f9371894e9bf95d99cb32e19e12e67082783cab540b86bd3956b87626d7ee4dc13f1110cd3984ec34e898fca4c90647f5a91003894ab27645ebd111670c1c25a1d012c86e835ed9dba7aed828bff5ca964f053a11127c198c10b942ec0aa287e6b3ce498d6f0cb466f6361adf4f4444389c96b9e41c60ab871ee7766bd33ef6b3680cd720a6bbada66d4cb315474f35fbf5d4e3707001b257b0a3eb9750c8f2a290be4dfca0232bcfc067d05410b2b9c4eaa15bc0bf67f8ef0f505b8dc3cc3f1e53ee892364d759ce163d6b6ef6eb40f63a06514d72234714db3d1e00ef9c16ff78829e42627bfb1ffcf5a69b94656c8f8b5b58d90960b3c9b0c58dfc5449b52d72ad4b4a5c08f0b98c4047317fc663c3464742e4e43f54d461bc4c2c5d5a166e93e9eb232bbbc9368f3aa9b32d9ab5e3c29bbe1493c290c0a03ef8f9bb9c0bbb4e23f4d9c8defd08509ca120166440fea1fccff440d00cd6664d175faf5d71bd03f23fe52ab223999a19e4c8325d4a2d6d6515ccb3cba66b5bca0a27e5b302", 0x1000}, {&(0x7f0000002300)="abacb20e5ad1aefadf290bbf7eb02178d061d36e3b9d8c6511f8ca622fde404a70cbd0d3309d7082a0b9451f51", 0x2d}, {&(0x7f0000002340)="403474bbcd19f53ed3e1ecbf669c96e60d830ae47be5db0d8c28736b53a783b53e9e7cd2954013004e062bc15e4e4d255a3736206ccc50d433677f0dc0c2a214a3369b19603739cc392f2895f48c35b2c506b1651a08c699600f4702118fbde8ef08e328b37d20de371d1059ae8618bce739461a505eda0a64709688cd005fa3a30f637aa48147d10f84cc57f3", 0x8d}], 0x5, 0x0, 0x158}, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) remap_file_pages(&(0x7f0000065000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 360.944781ms ago: executing program 6 (id=1736): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1010018, &(0x7f0000000b80)={[], [{@subj_type={'subj_type', 0x3d, ':*^\x03'}}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_gt}]}, 0xff, 0x4b8, &(0x7f0000008e00)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) r5 = getuid() r6 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setreuid(r4, r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) fcntl$getownex(r1, 0x10, &(0x7f0000003a40)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000003a80)={{0x1, 0x1, 0x18, r2, {r5, 0x0}}, './file1\x00'}) r13 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003ac0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000003b00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000003b40)={{0x1, 0x1, 0x18, r9, {0xee01, 0xee00}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) syz_clone3(&(0x7f0000003d40)={0x100, &(0x7f0000003bc0), &(0x7f0000003c00)=0x0, &(0x7f0000003c40), {0x7}, &(0x7f0000003c80)=""/12, 0xc, &(0x7f0000003cc0)=""/59, &(0x7f0000003d00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r7}}, 0x58) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003dc0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(r7, 0xc0207506, &(0x7f0000003e00)={0x0, 0xffff, 0x0, 0x0, 0x0}) r19 = getgid() sendmmsg$unix(r7, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)}, {&(0x7f00000008c0)="9680d9d05a4e04146daa37f7844aeafa797e0a12ae0fe4dd84bf3e503674159fb96a2c81d341ad9fdf88346d0dbcd9e84ce58598ec86cd0ae7283d71d2bcb220920b74", 0x43}, {&(0x7f0000000940)="0cebcfda21141ea1108b7f45eac2c421d43f25a1dd2a5ce0781ccd455df258e3eb366206620cd4cc776a822ddff133669efb8a626c75aa4e72a900e6bebd13621667166ea80d7729b81456a949a13028b5", 0x51}], 0x3, &(0x7f0000003000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r9, r2, r9, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}], 0xb0, 0x2c6f5ee2eac01201}}, {{&(0x7f00000030c0)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003140)="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", 0xfa}, {&(0x7f0000003240)="6002e06de50f1feddad5ec937aa35ea5ddd05651cd315b8808abd1237e0bd1236a1570968f31e58014b214daa358b951f1a423f40f4ad9d9ec5622e145b004fe7abaed7ff74db0bf8b2fcdc2ba674270342252e2f1228c899478fcfb552546d0935f0dfe52653a22d9eeff6675ce2cffb03ce404", 0x74}, {&(0x7f00000032c0)="03dcd626c89c1c65d38971ab6ea85d7c16080ec711736f38888fe727fc6115d3c06238be77db78543021ff3af43145253d5b68e61345994fb2f146f6f1825b6236b33986224cee1cbc31fbf63495a03c01127f584b5523987b7c8949f2975b30900f75d62c6aa602d5387ac544510b732cc31cad802e62c2509480c02ab6d62e1c83010ebd3646c04f95bd54348ccebdb9f87408ca9b953ff7694e76acd19930dee5240f082ed098559a06697c95e6b9fd7d490f", 0xb4}, {&(0x7f0000003380)="b4d77bb3524880120dfcadebdbff6ea7d9fc58edd0275acee55c9148f60f5c96e5dac75d8ab4e472e531aaed62e427203eb9532e3ebdd594d93c206d4089dddfe349bc3efa39b10f29f216640a36d9e57d7766c89a515c63aab705be46c4b10a2d51ff9ef97fde30cc2a3e581abc0c55ed4238e36e772173", 0x78}, {&(0x7f0000003400)="b81bb515113644a2f7a42d1faed89112", 0x10}, {&(0x7f0000003440)="1bf809e1975445b499c299ce75844d134e838cc1091c487c1841f83001d27ae45a3319b60c7e6f49b7b0c9749e5ec39bade4d9ccc5fef54793b3789bec0f0238e5bfa5ec8edc213e04fb3240df0f1898bdf75f43a918b02b1e5148c05c79b1c016f5329653", 0x65}], 0x6, &(0x7f0000003680)=ANY=[@ANYBLOB="34000000000000000101000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1], 0x78, 0xc010}}, {{&(0x7f0000003700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003780)="3b576ac0665b8e23a8151d6c6e5e0f3a23f10fd4b9622db545e9d0b74451c95980f6d7ba4f08dbb4cb29fb576840f01679db5e5ec56c7e16cd6af4f32a0048477eed9576dd0d4bec55ffbccf9e07df37d9e072f352e790edee637ab99cfa76c50e1f1520cbc996f003b3621e396b6e469a95cafdba88eef73f58309344f0f5baa9730c0b5d4a7a1838776d74a4cf85075c91b9bfaa9bb86b47d34f93a9025176a7004401e40d19856946c2aa7624091ed6cd50282f125c1cfe0422b29da00b46d23841a45f3f07cb2e3ce324cb9f1c918000bf39a6f331aebebdd9e47785c99bd3b556b4c83ee5a0228244b66e", 0xed}, {&(0x7f0000003880)="d8eab702", 0x4}, {&(0x7f00000038c0)="9db20ae944a5aed9b2cea781673f1202f3fa99c0dd93d8e0a97669d7f94c3645fe7737bfa9383bceae1c5d0f71dfeeb43f2ff1523e659235145422144b44dec43337280160bf70eb3de2ed5a085797d8acc1b5b3d5243a8571c1899b5921a4074da5fbdb92af7a835c83d9e22eaf9dd0f5b1cba0e6b45b44dc8a74566fed896da99d839c9d1e594aa26948f2a56550d7d31308f840f5b701f5f1e782fb9209623cefba7385efe2d42b6a0725e7a283a14aeac5b77b259e23", 0xb8}, {&(0x7f0000003980)="81a96b092ad5e3efa5cca9232d8c8cea4633ae595547152a3a8d4b41542c11ccaded08af93dde4dc005d1fb6646c59d13b242bd8a8ecd7366f7778956d3b88b1c66ba9d75f83e4", 0x47}], 0x4, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {r11, r4, r12}}}, @rights={{0x1c, 0x1, 0x1, [r7, r9, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r5, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r5, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r17, r7, r9, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r18, r4, r19}}}], 0xd0, 0x4000}}], 0x3, 0x400c854) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r20, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48041}, 0x4000) 332.7846ms ago: executing program 5 (id=1737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = msgget$private(0x0, 0x208) msgsnd(r1, &(0x7f0000002880)={0x1}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/18}, 0x1a, 0x1, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000008e61d27d70b7b0885002ccfcc20f14d7ef915cc63b19932fc4f27f2e3fb7e7fd0e9a4b9c19394e6bfec7b74c50a7dea33f7b71cfdf76886085d12535805d126bbe3466606b7bfaa8be2e9299ad271f4619e780edb548473ba649a75cca8abee4538694a8e2459273100e9d2ea1b548ff0510e9ad25d2e7742884f0056e501cc28149ac363d6a9c4b57933e026fcca78bcaea4baee8f7e21a246f60d78e21e046bb9562f9d355bb281b47189439"], 0xb5, 0x800) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) 0s ago: executing program 7 (id=1738): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.714997][ T8717] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 182.758035][ T8719] tipc: Started in network mode [ 182.759083][ T8719] tipc: Node identity ac14143b, cluster identity 4711 [ 182.766215][ T8719] tipc: Enabled bearer , priority 10 [ 182.887262][ T8726] siw: device registration error -23 [ 182.894050][ T8725] loop5: detected capacity change from 0 to 256 [ 183.107469][ T8731] FAULT_INJECTION: forcing a failure. [ 183.107469][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 183.110945][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.8.998 Tainted: G L syzkaller #0 PREEMPT [ 183.110972][ T8731] Tainted: [L]=SOFTLOCKUP [ 183.110976][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.110982][ T8731] Call trace: [ 183.110985][ T8731] show_stack+0x2c/0x3c (C) [ 183.111010][ T8731] __dump_stack+0x30/0x40 [ 183.111021][ T8731] dump_stack_lvl+0xd8/0x12c [ 183.111032][ T8731] dump_stack+0x1c/0x28 [ 183.111041][ T8731] should_fail_ex+0x41c/0x590 [ 183.111052][ T8731] should_failslab+0xc4/0x120 [ 183.111060][ T8731] __kvmalloc_node_noprof+0x160/0x7d8 [ 183.111070][ T8731] alloc_fdtable+0xfc/0x290 [ 183.111077][ T8731] dup_fd+0x614/0x848 [ 183.111084][ T8731] unshare_fd+0x98/0x110 [ 183.111093][ T8731] ksys_unshare+0x370/0x6d8 [ 183.111101][ T8731] __arm64_sys_unshare+0x3c/0x50 [ 183.111109][ T8731] invoke_syscall+0x98/0x244 [ 183.111119][ T8731] el0_svc_common+0xec/0x23c [ 183.111129][ T8731] do_el0_svc+0x4c/0x5c [ 183.111138][ T8731] el0_svc+0x64/0x260 [ 183.111149][ T8731] el0t_64_sync_handler+0x48/0x148 [ 183.111159][ T8731] el0t_64_sync+0x198/0x19c [ 183.233256][ T8733] FAULT_INJECTION: forcing a failure. [ 183.233256][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 183.241349][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.7.999 Tainted: G L syzkaller #0 PREEMPT [ 183.241383][ T8733] Tainted: [L]=SOFTLOCKUP [ 183.241389][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.241397][ T8733] Call trace: [ 183.241401][ T8733] show_stack+0x2c/0x3c (C) [ 183.241427][ T8733] __dump_stack+0x30/0x40 [ 183.241444][ T8733] dump_stack_lvl+0xd8/0x12c [ 183.241455][ T8733] dump_stack+0x1c/0x28 [ 183.241466][ T8733] should_fail_ex+0x41c/0x590 [ 183.241478][ T8733] should_failslab+0xc4/0x120 [ 183.241486][ T8733] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 183.241496][ T8733] __alloc_skb+0x1f0/0x610 [ 183.241506][ T8733] netlink_alloc_large_skb+0xd4/0x114 [ 183.241515][ T8733] netlink_sendmsg+0x4c4/0x948 [ 183.241524][ T8733] __sock_sendmsg+0xc8/0x17c [ 183.241532][ T8733] ____sys_sendmsg+0x3d0/0x6c8 [ 183.241540][ T8733] ___sys_sendmsg+0x198/0x224 [ 183.241549][ T8733] __sys_sendmsg+0x158/0x204 [ 183.241558][ T8733] __arm64_sys_sendmsg+0x80/0x94 [ 183.241567][ T8733] invoke_syscall+0x98/0x244 [ 183.241577][ T8733] el0_svc_common+0xec/0x23c [ 183.241586][ T8733] do_el0_svc+0x4c/0x5c [ 183.241595][ T8733] el0_svc+0x64/0x260 [ 183.241606][ T8733] el0t_64_sync_handler+0x48/0x148 [ 183.241616][ T8733] el0t_64_sync+0x198/0x19c [ 183.370493][ T8737] loop7: detected capacity change from 0 to 1024 [ 183.371402][ T4724] Bluetooth: hci4: command tx timeout [ 183.416098][ T8737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.585090][ T8737] evm: overlay not supported [ 183.756772][ T6363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.889802][ T4846] tipc: Node number set to 2886997051 [ 184.131752][ T8759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 184.183445][ T8760] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1009'. [ 184.208258][ T8764] FAULT_INJECTION: forcing a failure. [ 184.208258][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 184.214362][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.6.1010 Tainted: G L syzkaller #0 PREEMPT [ 184.214386][ T8764] Tainted: [L]=SOFTLOCKUP [ 184.214390][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 184.214397][ T8764] Call trace: [ 184.214401][ T8764] show_stack+0x2c/0x3c (C) [ 184.214427][ T8764] __dump_stack+0x30/0x40 [ 184.214439][ T8764] dump_stack_lvl+0xd8/0x12c [ 184.214450][ T8764] dump_stack+0x1c/0x28 [ 184.214460][ T8764] should_fail_ex+0x41c/0x590 [ 184.214471][ T8764] should_failslab+0xc4/0x120 [ 184.214479][ T8764] __kmalloc_cache_noprof+0x94/0x5ec [ 184.214488][ T8764] v9fs_init_fs_context+0x5c/0x4d4 [ 184.214497][ T8764] alloc_fs_context+0x7d8/0xba4 [ 184.214506][ T8764] fs_context_for_mount+0x34/0x44 [ 184.214513][ T8764] do_new_mount+0x158/0x538 [ 184.214523][ T8764] path_mount+0x5f0/0xa88 [ 184.214531][ T8764] do_mount+0xe8/0x148 [ 184.214540][ T8764] __arm64_sys_mount+0x334/0x380 [ 184.214549][ T8764] invoke_syscall+0x98/0x244 [ 184.214559][ T8764] el0_svc_common+0xec/0x23c [ 184.214569][ T8764] do_el0_svc+0x4c/0x5c [ 184.214578][ T8764] el0_svc+0x64/0x260 [ 184.214589][ T8764] el0t_64_sync_handler+0x48/0x148 [ 184.214599][ T8764] el0t_64_sync+0x198/0x19c [ 184.596180][ T8778] syzkaller0: entered promiscuous mode [ 184.597584][ T8778] syzkaller0: entered allmulticast mode [ 184.602447][ T8778] tipc: Enabling of bearer rejected, failed to enable media [ 185.840727][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 185.840768][ T30] audit: type=1800 audit(185.820:1161): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 185.931453][ T30] audit: type=1800 audit(185.920:1162): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 185.958555][ T8797] loop8: detected capacity change from 0 to 256 [ 185.985788][ T30] audit: type=1800 audit(185.970:1163): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 186.074532][ T8797] xt_cgroup: xt_cgroup: no path or classid specified [ 186.082564][ T30] audit: type=1800 audit(186.060:1164): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 186.240022][ T8806] input: syz1 as /devices/virtual/input/input5 [ 186.252006][ T30] audit: type=1800 audit(186.240:1165): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164421 res=0 errno=0 [ 186.256444][ T30] audit: type=1800 audit(186.240:1166): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=164436 res=0 errno=0 [ 186.436808][ T8810] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 186.452950][ T30] audit: type=1800 audit(186.430:1167): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=164439 res=0 errno=0 [ 186.463074][ T30] audit: type=1800 audit(186.440:1168): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=164438 res=0 errno=0 [ 186.463141][ T30] audit: type=1800 audit(186.440:1169): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=164437 res=0 errno=0 [ 186.463181][ T30] audit: type=1800 audit(186.440:1170): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=164428 res=0 errno=0 [ 188.044428][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.782465][ T8839] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 189.414312][ T8852] FAULT_INJECTION: forcing a failure. [ 189.414312][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 189.414351][ T8852] CPU: 0 UID: 0 PID: 8852 Comm: syz.6.1035 Tainted: G L syzkaller #0 PREEMPT [ 189.414366][ T8852] Tainted: [L]=SOFTLOCKUP [ 189.414369][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 189.414375][ T8852] Call trace: [ 189.414378][ T8852] show_stack+0x2c/0x3c (C) [ 189.414396][ T8852] __dump_stack+0x30/0x40 [ 189.414407][ T8852] dump_stack_lvl+0xd8/0x12c [ 189.414416][ T8852] dump_stack+0x1c/0x28 [ 189.414426][ T8852] should_fail_ex+0x41c/0x590 [ 189.414437][ T8852] should_failslab+0xc4/0x120 [ 189.414445][ T8852] __kmalloc_noprof+0x108/0x6b8 [ 189.414453][ T8852] tomoyo_encode2+0x10c/0x330 [ 189.414462][ T8852] tomoyo_encode+0x34/0x50 [ 189.414470][ T8852] tomoyo_realpath_from_path+0x488/0x4dc [ 189.414478][ T8852] tomoyo_path_number_perm+0x1f0/0x500 [ 189.414486][ T8852] tomoyo_path_mknod+0x13c/0x18c [ 189.414494][ T8852] security_path_mknod+0x16c/0x340 [ 189.414505][ T8852] may_o_create+0x48/0x2d0 [ 189.414514][ T8852] path_openat+0xc9c/0x2a60 [ 189.414522][ T8852] do_file_open+0x1c8/0x2e8 [ 189.414530][ T8852] do_sys_openat2+0x114/0x1e8 [ 189.414541][ T8852] do_sys_open+0xb0/0xe0 [ 189.414550][ T8852] __arm64_sys_openat+0xa0/0xbc [ 189.414559][ T8852] invoke_syscall+0x98/0x244 [ 189.414570][ T8852] el0_svc_common+0xec/0x23c [ 189.414580][ T8852] do_el0_svc+0x4c/0x5c [ 189.414589][ T8852] el0_svc+0x64/0x260 [ 189.414600][ T8852] el0t_64_sync_handler+0x48/0x148 [ 189.414610][ T8852] el0t_64_sync+0x198/0x19c [ 189.414634][ T8852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.870894][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 190.870937][ T30] audit: type=1800 audit(190.850:1189): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 190.915465][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1042'. [ 190.944431][ T30] audit: type=1800 audit(190.930:1190): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 191.032351][ T30] audit: type=1800 audit(191.020:1191): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 191.070623][ T30] audit: type=1800 audit(191.050:1192): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 191.272363][ T30] audit: type=1800 audit(191.260:1193): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 191.292723][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1048'. [ 191.537517][ T30] audit: type=1800 audit(191.520:1194): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 191.556617][ T30] audit: type=1800 audit(191.540:1195): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1050" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 191.590244][ T8896] overlayfs: missing 'lowerdir' [ 191.598454][ T8896] syzkaller1: entered promiscuous mode [ 191.599614][ T8896] syzkaller1: entered allmulticast mode [ 191.729168][ T30] audit: type=1800 audit(191.710:1196): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 192.080410][ T30] audit: type=1800 audit(192.060:1197): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 192.123798][ T8906] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 192.178105][ T30] audit: type=1800 audit(192.160:1198): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 192.229976][ T8909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.277191][ T8911] loop5: detected capacity change from 0 to 256 [ 192.281826][ T8911] vfat: Bad value for 'uid' [ 192.283824][ T8911] vfat: Bad value for 'uid' [ 192.563179][ T8916] netlink: 'syz.5.1056': attribute type 58 has an invalid length. [ 192.563219][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1056'. [ 192.814607][ T8923] loop8: detected capacity change from 0 to 256 [ 192.816400][ T8923] vfat: Bad value for 'uid' [ 192.818381][ T8923] vfat: Bad value for 'uid' [ 193.128220][ T8927] netlink: 'syz.8.1059': attribute type 58 has an invalid length. [ 193.128257][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1059'. [ 195.091038][ T8936] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 195.091079][ T8936] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 195.662433][ T8938] loop8: detected capacity change from 0 to 512 [ 196.678051][ T8938] EXT4-fs (loop8): Test dummy encryption mode enabled [ 197.500974][ T8938] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1063: inode has both inline data and extents flags [ 197.501009][ T8938] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.503844][ T8938] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1063: couldn't read orphan inode 15 (err -117) [ 197.503881][ T8938] loop8: lost filesystem error report for type 5 error -117 [ 197.510658][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 197.510691][ C0] EXT4-fs (loop8): initial error at time 197: ext4_orphan_get:1399: inode 15 [ 197.510729][ C0] EXT4-fs (loop8): last error at time 197: ext4_orphan_get:1404 [ 197.517857][ T8938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.747330][ T8947] Invalid ELF header magic: != ELF [ 197.747671][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 197.747696][ T30] audit: type=1804 audit(197.730:1206): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1065" name="/newroot/166/file1" dev="tmpfs" ino=915 res=1 errno=0 [ 197.880062][ T8560] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.896418][ T30] audit: type=1800 audit(197.880:1207): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 197.974183][ T30] audit: type=1800 audit(197.960:1208): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 198.024626][ T8951] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.1066' resets device [ 198.056616][ T8956] loop5: detected capacity change from 0 to 512 [ 198.059382][ T30] audit: type=1800 audit(198.040:1209): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 198.098538][ T30] audit: type=1800 audit(198.070:1210): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 198.125280][ T30] audit: type=1800 audit(198.110:1211): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 198.470328][ T8962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 198.548976][ T8963] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1071'. [ 198.668116][ T30] audit: type=1800 audit(198.540:1212): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 198.668162][ T30] audit: type=1800 audit(198.540:1213): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165252 res=0 errno=0 [ 198.676518][ T30] audit: type=1800 audit(198.540:1214): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=165268 res=0 errno=0 [ 198.676562][ T30] audit: type=1800 audit(198.540:1215): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=165271 res=0 errno=0 [ 198.757542][ T8973] syzkaller0: entered promiscuous mode [ 198.759910][ T8973] syzkaller0: entered allmulticast mode [ 198.774988][ T8973] tipc: Started in network mode [ 198.781165][ T8973] tipc: Node identity 0ad6dd457edc, cluster identity 4711 [ 198.783030][ T8973] FAULT_INJECTION: forcing a failure. [ 198.783030][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 198.785781][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.8.1075 Tainted: G L syzkaller #0 PREEMPT [ 198.785803][ T8973] Tainted: [L]=SOFTLOCKUP [ 198.785809][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 198.785818][ T8973] Call trace: [ 198.785823][ T8973] show_stack+0x2c/0x3c (C) [ 198.785847][ T8973] __dump_stack+0x30/0x40 [ 198.785860][ T8973] dump_stack_lvl+0xd8/0x12c [ 198.785871][ T8973] dump_stack+0x1c/0x28 [ 198.785881][ T8973] should_fail_ex+0x41c/0x590 [ 198.785893][ T8973] should_failslab+0xc4/0x120 [ 198.785901][ T8973] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 198.785910][ T8973] __alloc_skb+0x1f0/0x610 [ 198.785920][ T8973] tipc_buf_acquire+0x34/0xe8 [ 198.785934][ T8973] tipc_disc_create+0x94/0x430 [ 198.785942][ T8973] __tipc_nl_bearer_enable+0xac0/0xfb0 [ 198.785950][ T8973] tipc_nl_compat_doit+0x34c/0x50c [ 198.785960][ T8973] tipc_nl_compat_recv+0x650/0x92c [ 198.785970][ T8973] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 198.785981][ T8973] genl_rcv_msg+0x43c/0x620 [ 198.785991][ T8973] netlink_rcv_skb+0x238/0x414 [ 198.785999][ T8973] genl_rcv+0x38/0x50 [ 198.786007][ T8973] netlink_unicast+0x600/0x7f8 [ 198.786015][ T8973] netlink_sendmsg+0x648/0x948 [ 198.786023][ T8973] __sock_sendmsg+0xc8/0x17c [ 198.786032][ T8973] ____sys_sendmsg+0x3d0/0x6c8 [ 198.786040][ T8973] ___sys_sendmsg+0x198/0x224 [ 198.786049][ T8973] __sys_sendmsg+0x158/0x204 [ 198.786058][ T8973] __arm64_sys_sendmsg+0x80/0x94 [ 198.786067][ T8973] invoke_syscall+0x98/0x244 [ 198.786077][ T8973] el0_svc_common+0xec/0x23c [ 198.786087][ T8973] do_el0_svc+0x4c/0x5c [ 198.786096][ T8973] el0_svc+0x64/0x260 [ 198.786107][ T8973] el0t_64_sync_handler+0x48/0x148 [ 198.786116][ T8973] el0t_64_sync+0x198/0x19c [ 198.822007][ T8973] tipc: Disabling bearer [ 198.833211][ T8973] tipc: Enabling of bearer rejected, failed to create discoverer [ 198.976174][ T8978] loop7: detected capacity change from 0 to 256 [ 199.015772][ T8978] vfat: Unknown parameter 'shortnameepage' [ 200.216639][ T8986] process 'syz.8.1080' launched '/dev/fd/5' with NULL argv: empty string added [ 200.233448][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 200.276334][ T8999] loop2: detected capacity change from 0 to 512 [ 200.321066][ T9000] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1084' resets device [ 200.504162][ T9015] loop5: detected capacity change from 0 to 256 [ 200.505947][ T9015] vfat: Unknown parameter 'obj_user' [ 200.540091][ T9015] loop5: detected capacity change from 0 to 512 [ 200.705627][ T9022] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1089'. [ 200.752044][ T9025] file system registered [ 200.753781][ T9025] overlayfs: failed to resolve './config/usb_gadget/g1/file0': -2 [ 200.820104][ T9015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.896394][ T5982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.975479][ T9035] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 200.979557][ T9035] bond1 (unregistering): Released all slaves [ 201.005379][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1095'. [ 201.088891][ T9037] syzkaller0: entered promiscuous mode [ 201.090425][ T9037] syzkaller0: entered allmulticast mode [ 201.197185][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 201.435603][ T4724] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 201.565337][ T9052] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1100' resets device [ 201.670146][ T9056] FAULT_INJECTION: forcing a failure. [ 201.670146][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.673684][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.8.1102 Tainted: G L syzkaller #0 PREEMPT [ 201.673710][ T9056] Tainted: [L]=SOFTLOCKUP [ 201.673715][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 201.673722][ T9056] Call trace: [ 201.673727][ T9056] show_stack+0x2c/0x3c (C) [ 201.673751][ T9056] __dump_stack+0x30/0x40 [ 201.673764][ T9056] dump_stack_lvl+0xd8/0x12c [ 201.673777][ T9056] dump_stack+0x1c/0x28 [ 201.673789][ T9056] should_fail_ex+0x41c/0x590 [ 201.673801][ T9056] should_fail+0x14/0x24 [ 201.673811][ T9056] should_fail_usercopy+0x20/0x30 [ 201.673822][ T9056] _copy_from_iter+0x188/0x1064 [ 201.673830][ T9056] netlink_sendmsg+0x570/0x948 [ 201.673840][ T9056] __sock_sendmsg+0xc8/0x17c [ 201.673849][ T9056] ____sys_sendmsg+0x3d0/0x6c8 [ 201.673858][ T9056] ___sys_sendmsg+0x198/0x224 [ 201.673867][ T9056] __sys_sendmsg+0x158/0x204 [ 201.673876][ T9056] __arm64_sys_sendmsg+0x80/0x94 [ 201.673885][ T9056] invoke_syscall+0x98/0x244 [ 201.673895][ T9056] el0_svc_common+0xec/0x23c [ 201.673905][ T9056] do_el0_svc+0x4c/0x5c [ 201.673914][ T9056] el0_svc+0x64/0x260 [ 201.673925][ T9056] el0t_64_sync_handler+0x48/0x148 [ 201.673940][ T9056] el0t_64_sync+0x198/0x19c [ 201.858285][ T9062] syzkaller0: entered promiscuous mode [ 201.858322][ T9062] syzkaller0: entered allmulticast mode [ 201.878387][ T9062] tipc: Enabled bearer , priority 0 [ 201.883127][ T9061] tipc: Resetting bearer [ 201.922874][ T9061] tipc: Disabling bearer [ 202.119495][ T9069] loop7: detected capacity change from 0 to 256 [ 202.119910][ T9069] vfat: Bad value for 'uid' [ 202.119940][ T9069] vfat: Bad value for 'uid' [ 202.126609][ T9075] FAULT_INJECTION: forcing a failure. [ 202.126609][ T9075] name failslab, interval 1, probability 0, space 0, times 0 [ 202.126642][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.2.1110 Tainted: G L syzkaller #0 PREEMPT [ 202.126659][ T9075] Tainted: [L]=SOFTLOCKUP [ 202.126663][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 202.126668][ T9075] Call trace: [ 202.126671][ T9075] show_stack+0x2c/0x3c (C) [ 202.126689][ T9075] __dump_stack+0x30/0x40 [ 202.126699][ T9075] dump_stack_lvl+0xd8/0x12c [ 202.126709][ T9075] dump_stack+0x1c/0x28 [ 202.126718][ T9075] should_fail_ex+0x41c/0x590 [ 202.126729][ T9075] should_failslab+0xc4/0x120 [ 202.126738][ T9075] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 202.126747][ T9075] __alloc_skb+0x1f0/0x610 [ 202.126756][ T9075] netlink_alloc_large_skb+0xd4/0x114 [ 202.126766][ T9075] netlink_sendmsg+0x4c4/0x948 [ 202.126774][ T9075] __sock_sendmsg+0xc8/0x17c [ 202.126783][ T9075] ____sys_sendmsg+0x3d0/0x6c8 [ 202.126791][ T9075] ___sys_sendmsg+0x198/0x224 [ 202.126800][ T9075] __sys_sendmsg+0x158/0x204 [ 202.126809][ T9075] __arm64_sys_sendmsg+0x80/0x94 [ 202.126818][ T9075] invoke_syscall+0x98/0x244 [ 202.126828][ T9075] el0_svc_common+0xec/0x23c [ 202.126838][ T9075] do_el0_svc+0x4c/0x5c [ 202.126847][ T9075] el0_svc+0x64/0x260 [ 202.126858][ T9075] el0t_64_sync_handler+0x48/0x148 [ 202.126867][ T9075] el0t_64_sync+0x198/0x19c [ 202.319547][ T9076] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1109'. [ 202.613796][ T9078] netlink: 'syz.7.1108': attribute type 58 has an invalid length. [ 202.613840][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1108'. [ 202.772172][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 202.772216][ T30] audit: type=1800 audit(202.760:1269): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1112" name="quirks" dev="sysfs" ino=45831 res=0 errno=0 [ 202.778014][ T30] audit: type=1800 audit(202.760:1270): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 202.802907][ T30] audit: type=1800 audit(202.790:1271): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 203.729430][ T30] audit: type=1800 audit(203.710:1272): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 204.283752][ T30] audit: type=1800 audit(204.270:1273): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 204.336956][ T30] audit: type=1800 audit(204.320:1274): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 204.380182][ T30] audit: type=1800 audit(204.360:1275): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 204.415987][ T30] audit: type=1800 audit(204.400:1276): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 204.420096][ T9101] FAULT_INJECTION: forcing a failure. [ 204.420096][ T9101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.420133][ T9101] CPU: 0 UID: 0 PID: 9101 Comm: syz.8.1120 Tainted: G L syzkaller #0 PREEMPT [ 204.420149][ T9101] Tainted: [L]=SOFTLOCKUP [ 204.420153][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 204.420160][ T9101] Call trace: [ 204.420163][ T9101] show_stack+0x2c/0x3c (C) [ 204.420183][ T9101] __dump_stack+0x30/0x40 [ 204.420194][ T9101] dump_stack_lvl+0xd8/0x12c [ 204.420204][ T9101] dump_stack+0x1c/0x28 [ 204.420213][ T9101] should_fail_ex+0x41c/0x590 [ 204.420225][ T9101] should_fail+0x14/0x24 [ 204.420234][ T9101] should_fail_usercopy+0x20/0x30 [ 204.420245][ T9101] simple_read_from_buffer+0xc4/0x238 [ 204.420255][ T9101] proc_fail_nth_read+0x1a8/0x248 [ 204.420264][ T9101] vfs_read+0x230/0x8c8 [ 204.420274][ T9101] ksys_read+0x12c/0x228 [ 204.420281][ T9101] __arm64_sys_read+0x7c/0x90 [ 204.420288][ T9101] invoke_syscall+0x98/0x244 [ 204.420298][ T9101] el0_svc_common+0xec/0x23c [ 204.420308][ T9101] do_el0_svc+0x4c/0x5c [ 204.420317][ T9101] el0_svc+0x64/0x260 [ 204.420328][ T9101] el0t_64_sync_handler+0x48/0x148 [ 204.420338][ T9101] el0t_64_sync+0x198/0x19c [ 204.453660][ T30] audit: type=1800 audit(204.440:1277): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 204.470488][ T9106] loop5: detected capacity change from 0 to 8 [ 204.538405][ T30] audit: type=1800 audit(204.510:1278): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 204.552850][ T9111] SQUASHFS error: Unable to read inode 0x87 [ 204.571522][ T9113] FAULT_INJECTION: forcing a failure. [ 204.571522][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 204.571553][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.2.1124 Tainted: G L syzkaller #0 PREEMPT [ 204.571569][ T9113] Tainted: [L]=SOFTLOCKUP [ 204.571573][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 204.571579][ T9113] Call trace: [ 204.571583][ T9113] show_stack+0x2c/0x3c (C) [ 204.571604][ T9113] __dump_stack+0x30/0x40 [ 204.571615][ T9113] dump_stack_lvl+0xd8/0x12c [ 204.571625][ T9113] dump_stack+0x1c/0x28 [ 204.571634][ T9113] should_fail_ex+0x41c/0x590 [ 204.571646][ T9113] should_failslab+0xc4/0x120 [ 204.571654][ T9113] __kmalloc_cache_noprof+0x94/0x5ec [ 204.571663][ T9113] audit_log_d_path+0xc4/0x19c [ 204.571672][ T9113] audit_log_d_path_exe+0x48/0x80 [ 204.571681][ T9113] audit_log_task+0x250/0x368 [ 204.571690][ T9113] audit_seccomp+0x74/0x14c [ 204.571700][ T9113] __seccomp_filter+0xc88/0x1a90 [ 204.571708][ T9113] __secure_computing+0xd8/0x278 [ 204.571716][ T9113] syscall_trace_enter+0x2d4/0x794 [ 204.571725][ T9113] el0_svc_common+0x170/0x23c [ 204.571735][ T9113] do_el0_svc+0x4c/0x5c [ 204.571744][ T9113] el0_svc+0x64/0x260 [ 204.571755][ T9113] el0t_64_sync_handler+0x48/0x148 [ 204.571764][ T9113] el0t_64_sync+0x198/0x19c [ 204.903119][ T9118] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1126'. [ 204.926217][ T9124] binder: 9123:9124 tried to acquire reference to desc 0, got 1 instead [ 204.936130][ T9124] binder: 9123:9124 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 204.938842][ T9124] binder: 9124 RLIMIT_NICE not set [ 204.940009][ T9124] binder: 9124 RLIMIT_NICE not set [ 205.100436][ T5005] binder: release 9123:9124 transaction 73 out, still active [ 205.100483][ T5005] binder: undelivered TRANSACTION_COMPLETE [ 205.104506][ T5005] binder: release 9123:9124 transaction 73 in, still active [ 205.104534][ T5005] binder: send failed reply for transaction 73, target dead [ 206.636155][ T9185] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1144'. [ 206.805365][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1148'. [ 207.366838][ T9203] 9p: Bad value for 'port' [ 207.759431][ T9213] loop7: detected capacity change from 0 to 256 [ 207.772804][ T9213] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 207.801730][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 207.801761][ T30] audit: type=1800 audit(207.790:1309): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 207.837187][ T30] audit: type=1800 audit(207.820:1310): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 207.879463][ T9215] netlink: 'syz.5.1155': attribute type 4 has an invalid length. [ 207.899520][ T9215] loop5: detected capacity change from 0 to 128 [ 207.911232][ T9215] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.943065][ T30] audit: type=1800 audit(207.930:1311): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 208.008749][ T30] audit: type=1800 audit(207.990:1312): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 209.001851][ T860] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 209.994261][ T30] audit: type=1800 audit(209.980:1313): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 210.018113][ T30] audit: type=1800 audit(210.000:1314): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 210.080904][ T9230] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 212.000846][ T30] audit: type=1800 audit(211.980:1315): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 212.024985][ T4724] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 212.265391][ T30] audit: type=1800 audit(212.250:1316): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 212.459674][ T9242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 212.472362][ T30] audit: type=1800 audit(212.450:1317): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166346 res=0 errno=0 [ 212.478623][ T9242] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1161'. [ 212.558491][ T30] audit: type=1800 audit(212.540:1318): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1160" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 212.805713][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1162'. [ 212.829031][ T30] audit: type=1800 audit(212.810:1319): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=166362 res=0 errno=0 [ 212.829084][ T30] audit: type=1800 audit(212.810:1320): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=166365 res=0 errno=0 [ 212.829121][ T30] audit: type=1800 audit(212.810:1321): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=166364 res=0 errno=0 [ 212.844115][ T30] audit: type=1800 audit(212.830:1322): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=166363 res=0 errno=0 [ 212.844158][ T30] audit: type=1800 audit(212.830:1323): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=166354 res=0 errno=0 [ 213.054240][ T4724] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.098913][ T30] audit: type=1800 audit(213.080:1324): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 213.111206][ T30] audit: type=1800 audit(213.100:1325): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166378 res=0 errno=0 [ 213.115176][ T30] audit: type=1800 audit(213.100:1326): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166392 res=0 errno=0 [ 213.122461][ T30] audit: type=1800 audit(213.110:1327): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166406 res=0 errno=0 [ 213.172729][ T30] audit: type=1800 audit(213.150:1328): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166420 res=0 errno=0 [ 213.545509][ T9270] xt_hashlimit: size too large, truncated to 1048576 [ 213.591910][ T9275] netlink: 'syz.7.1172': attribute type 1 has an invalid length. [ 213.628581][ T9275] bond2: entered promiscuous mode [ 213.631445][ T9275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.666613][ T9275] bridge2: entered promiscuous mode [ 213.666971][ T9275] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 213.858463][ T9284] loop7: detected capacity change from 0 to 8 [ 213.865832][ T9284] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 213.865863][ T9284] unable to read xattr id index table [ 213.869192][ T9284] SQUASHFS error: zlib decompression failed, data probably corrupt [ 213.869219][ T9284] SQUASHFS error: Failed to read block 0x9b: -5 [ 213.869237][ T9284] SQUASHFS error: Unable to read metadata cache entry [99] [ 213.869249][ T9284] SQUASHFS error: Unable to read inode 0x127 [ 214.271012][ T9292] FAULT_INJECTION: forcing a failure. [ 214.271012][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.271056][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.8.1176 Tainted: G L syzkaller #0 PREEMPT [ 214.271075][ T9292] Tainted: [L]=SOFTLOCKUP [ 214.271079][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 214.271086][ T9292] Call trace: [ 214.271090][ T9292] show_stack+0x2c/0x3c (C) [ 214.271110][ T9292] __dump_stack+0x30/0x40 [ 214.271121][ T9292] dump_stack_lvl+0xd8/0x12c [ 214.271131][ T9292] dump_stack+0x1c/0x28 [ 214.271141][ T9292] should_fail_ex+0x41c/0x590 [ 214.271152][ T9292] should_fail+0x14/0x24 [ 214.271162][ T9292] should_fail_usercopy+0x20/0x30 [ 214.271173][ T9292] bpf_verifier_vlog+0x2f0/0xbc0 [ 214.271183][ T9292] __btf_verifier_log+0xe8/0x13c [ 214.271192][ T9292] btf_parse_hdr+0x358/0x71c [ 214.271201][ T9292] btf_new_fd+0x288/0xa24 [ 214.271209][ T9292] bpf_btf_load+0x144/0x190 [ 214.271217][ T9292] __sys_bpf+0x88c/0x8c8 [ 214.271224][ T9292] __arm64_sys_bpf+0xc8/0xe4 [ 214.271231][ T9292] invoke_syscall+0x98/0x244 [ 214.271241][ T9292] el0_svc_common+0xec/0x23c [ 214.271251][ T9292] do_el0_svc+0x4c/0x5c [ 214.271260][ T9292] el0_svc+0x64/0x260 [ 214.271271][ T9292] el0t_64_sync_handler+0x48/0x148 [ 214.271280][ T9292] el0t_64_sync+0x198/0x19c [ 215.219341][ T4724] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.275110][ T9295] loop8: detected capacity change from 0 to 256 [ 215.385956][ T9298] loop7: detected capacity change from 0 to 128 [ 215.418624][ T9298] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.594122][ T9301] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 215.707287][ T6363] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.047116][ T9307] syzkaller0: entered promiscuous mode [ 216.048435][ T9307] syzkaller0: entered allmulticast mode [ 216.061001][ T9307] tipc: Enabled bearer , priority 0 [ 216.077877][ T9306] tipc: Resetting bearer [ 216.107063][ T9306] tipc: Disabling bearer [ 216.195797][ T9312] siw: device registration error -23 [ 216.256897][ T4724] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 216.293850][ T9318] bond1: entered promiscuous mode [ 216.298497][ T9318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.334862][ T9321] loop2: detected capacity change from 0 to 512 [ 216.356940][ T9321] EXT4-fs (loop2): 1 orphan inode deleted [ 216.358785][ T9321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.372226][ T3705] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 216.757196][ T9332] loop8: detected capacity change from 0 to 256 [ 216.849035][ T9337] loop7: detected capacity change from 0 to 128 [ 216.874334][ T9337] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.936176][ T9337] FAULT_INJECTION: forcing a failure. [ 216.936176][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 216.936225][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.7.1193 Tainted: G L syzkaller #0 PREEMPT [ 216.936244][ T9337] Tainted: [L]=SOFTLOCKUP [ 216.936248][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 216.936255][ T9337] Call trace: [ 216.936258][ T9337] show_stack+0x2c/0x3c (C) [ 216.936276][ T9337] __dump_stack+0x30/0x40 [ 216.936287][ T9337] dump_stack_lvl+0xd8/0x12c [ 216.936297][ T9337] dump_stack+0x1c/0x28 [ 216.936307][ T9337] should_fail_ex+0x41c/0x590 [ 216.936319][ T9337] should_failslab+0xc4/0x120 [ 216.936327][ T9337] __kmalloc_noprof+0x108/0x6b8 [ 216.936337][ T9337] __vb2_queue_alloc+0x260/0x1124 [ 216.936347][ T9337] vb2_core_create_bufs+0x508/0x9b4 [ 216.936355][ T9337] vb2_create_bufs+0x4a8/0x6a0 [ 216.936366][ T9337] vb2_ioctl_create_bufs+0x230/0x354 [ 216.936376][ T9337] vidioc_create_bufs+0xd8/0x114 [ 216.936387][ T9337] v4l_create_bufs+0x11c/0x21c [ 216.936398][ T9337] __video_do_ioctl+0x768/0xaa8 [ 216.936407][ T9337] video_usercopy+0x74c/0xe88 [ 216.936416][ T9337] video_ioctl2+0x3c/0x50 [ 216.936424][ T9337] v4l2_ioctl+0x148/0x18c [ 216.936433][ T9337] __arm64_sys_ioctl+0x14c/0x1c4 [ 216.936444][ T9337] invoke_syscall+0x98/0x244 [ 216.936458][ T9337] el0_svc_common+0xec/0x23c [ 216.936467][ T9337] do_el0_svc+0x4c/0x5c [ 216.936477][ T9337] el0_svc+0x64/0x260 [ 216.936487][ T9337] el0t_64_sync_handler+0x48/0x148 [ 216.936497][ T9337] el0t_64_sync+0x198/0x19c [ 217.019325][ T6363] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.235174][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.380524][ T9355] netlink: 'syz.5.1200': attribute type 1 has an invalid length. [ 217.410356][ T9355] bond2: entered promiscuous mode [ 217.412267][ T9355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.443592][ T9355] bridge1: entered promiscuous mode [ 217.446342][ T9355] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 217.682676][ T9366] loop8: detected capacity change from 0 to 256 [ 217.809832][ T9370] 9pnet_fd: p9_fd_create_tcp (9370): problem connecting socket to 127.0.0.1 [ 217.992305][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 217.992344][ T30] audit: type=1800 audit(217.980:1363): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.030305][ T9375] loop8: detected capacity change from 0 to 512 [ 218.046681][ T9375] vfat: Unknown parameter '0000000000000000000000000000000000000000000' [ 218.053754][ T30] audit: type=1800 audit(218.040:1364): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 218.066329][ T9375] loop8: detected capacity change from 0 to 128 [ 218.082062][ T9375] FAT-fs (loop8): bogus number of FAT sectors [ 218.082093][ T9375] FAT-fs (loop8): Can't find a valid FAT filesystem [ 218.162516][ T30] audit: type=1800 audit(218.150:1365): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.277435][ T30] audit: type=1800 audit(218.260:1366): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.389059][ T30] audit: type=1800 audit(218.370:1367): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 218.426269][ T9402] loop8: detected capacity change from 0 to 256 [ 218.529786][ T30] audit: type=1800 audit(218.510:1368): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.772513][ T30] audit: type=1800 audit(218.760:1369): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 218.863798][ T30] audit: type=1800 audit(218.850:1370): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.878239][ T30] audit: type=1800 audit(218.860:1371): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168229 res=0 errno=0 [ 218.963310][ T9420] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1221'. [ 219.027436][ T30] audit: type=1800 audit(219.010:1372): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 219.365296][ T9434] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 219.723087][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.723162][ T9443] bridge0: port 2(bridge_slave_1) entered listening state [ 219.723287][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.723335][ T9443] bridge0: port 1(bridge_slave_0) entered listening state [ 219.794578][ T9455] loop7: detected capacity change from 0 to 1024 [ 219.799265][ T9455] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.803545][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.808275][ T9455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.809998][ T9455] EXT4-fs (loop7): Cannot use DAX on a filesystem that may contain inline data [ 219.824150][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.247303][ T9465] FAULT_INJECTION: forcing a failure. [ 220.247303][ T9465] name failslab, interval 1, probability 0, space 0, times 0 [ 220.247348][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.8.1232 Tainted: G L syzkaller #0 PREEMPT [ 220.247365][ T9465] Tainted: [L]=SOFTLOCKUP [ 220.247369][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 220.247376][ T9465] Call trace: [ 220.247381][ T9465] show_stack+0x2c/0x3c (C) [ 220.247402][ T9465] __dump_stack+0x30/0x40 [ 220.247413][ T9465] dump_stack_lvl+0xd8/0x12c [ 220.247423][ T9465] dump_stack+0x1c/0x28 [ 220.247433][ T9465] should_fail_ex+0x41c/0x590 [ 220.247445][ T9465] should_failslab+0xc4/0x120 [ 220.247453][ T9465] __kmalloc_node_noprof+0x10c/0x6d8 [ 220.247462][ T9465] __vmalloc_node_range_noprof+0x45c/0x105c [ 220.247473][ T9465] __vmalloc_node_noprof+0xec/0x14c [ 220.247482][ T9465] __vmalloc_noprof+0x64/0x8c [ 220.247491][ T9465] bpf_prog_alloc_no_stats+0x60/0x488 [ 220.247499][ T9465] bpf_prog_alloc+0x48/0x110 [ 220.247506][ T9465] bpf_prog_load+0x5dc/0x15f8 [ 220.247514][ T9465] __sys_bpf+0x870/0x8c8 [ 220.247521][ T9465] __arm64_sys_bpf+0xc8/0xe4 [ 220.247528][ T9465] invoke_syscall+0x98/0x244 [ 220.247538][ T9465] el0_svc_common+0xec/0x23c [ 220.247548][ T9465] do_el0_svc+0x4c/0x5c [ 220.247557][ T9465] el0_svc+0x64/0x260 [ 220.247568][ T9465] el0t_64_sync_handler+0x48/0x148 [ 220.247578][ T9465] el0t_64_sync+0x198/0x19c [ 220.247601][ T9465] syz.8.1232: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 220.247651][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.8.1232 Tainted: G L syzkaller #0 PREEMPT [ 220.247662][ T9465] Tainted: [L]=SOFTLOCKUP [ 220.247664][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 220.247668][ T9465] Call trace: [ 220.247670][ T9465] show_stack+0x2c/0x3c (C) [ 220.247681][ T9465] __dump_stack+0x30/0x40 [ 220.247690][ T9465] dump_stack_lvl+0xd8/0x12c [ 220.247700][ T9465] dump_stack+0x1c/0x28 [ 220.247709][ T9465] warn_alloc+0x1bc/0x1d0 [ 220.247717][ T9465] __vmalloc_node_range_noprof+0x77c/0x105c [ 220.247726][ T9465] __vmalloc_node_noprof+0xec/0x14c [ 220.247736][ T9465] __vmalloc_noprof+0x64/0x8c [ 220.247744][ T9465] bpf_prog_alloc_no_stats+0x60/0x488 [ 220.247752][ T9465] bpf_prog_alloc+0x48/0x110 [ 220.247759][ T9465] bpf_prog_load+0x5dc/0x15f8 [ 220.247766][ T9465] __sys_bpf+0x870/0x8c8 [ 220.247773][ T9465] __arm64_sys_bpf+0xc8/0xe4 [ 220.247780][ T9465] invoke_syscall+0x98/0x244 [ 220.247790][ T9465] el0_svc_common+0xec/0x23c [ 220.247799][ T9465] do_el0_svc+0x4c/0x5c [ 220.247809][ T9465] el0_svc+0x64/0x260 [ 220.247818][ T9465] el0t_64_sync_handler+0x48/0x148 [ 220.247827][ T9465] el0t_64_sync+0x198/0x19c [ 220.247838][ T9465] Mem-Info: [ 220.247846][ T9465] active_anon:89 inactive_anon:9724 isolated_anon:0 [ 220.247846][ T9465] active_file:3436 inactive_file:4963 isolated_file:0 [ 220.247846][ T9465] unevictable:768 dirty:297 writeback:0 [ 220.247846][ T9465] slab_reclaimable:9562 slab_unreclaimable:101265 [ 220.247846][ T9465] mapped:33138 shmem:4319 pagetables:3695 [ 220.247846][ T9465] sec_pagetables:0 bounce:0 [ 220.247846][ T9465] kernel_misc_reclaimable:0 [ 220.247846][ T9465] free:1466873 free_pcp:11426 free_cma:7616 [ 220.247870][ T9465] Node 0 active_anon:356kB inactive_anon:38896kB active_file:13744kB inactive_file:19852kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132552kB dirty:1188kB writeback:0kB shmem:17276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10624kB pagetables:14780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.247894][ T9465] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 220.247924][ T9465] lowmem_reserve[]: 0 0 3651 3651 3651 [ 220.247971][ T9465] Node 0 Normal free:2789604kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:356kB inactive_anon:38896kB active_file:13744kB inactive_file:19852kB unevictable:3072kB writepending:1188kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:45704kB local_pcp:45704kB free_cma:0kB [ 220.248001][ T9465] lowmem_reserve[]: 0 0 0 0 0 [ 220.248041][ T9465] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 220.248159][ T9465] Node 0 Normal: 679*4kB (UME) 1475*8kB (UM) 485*16kB (UM) 485*32kB (UME) 443*64kB (UME) 367*128kB (UME) 321*256kB (UME) 279*512kB (UME) 226*1024kB (UME) 0*2048kB 542*4096kB (UM) = 2789604kB [ 220.248313][ T9465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.248323][ T9465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 220.248333][ T9465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 220.248342][ T9465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 220.248352][ T9465] 12713 total pagecache pages [ 220.248359][ T9465] 0 pages in swap cache [ 220.248365][ T9465] Free swap = 124996kB [ 220.248372][ T9465] Total swap = 124996kB [ 220.248379][ T9465] 2097152 pages RAM [ 220.248386][ T9465] 0 pages HighMem/MovableOnly [ 220.248392][ T9465] 392261 pages reserved [ 220.248398][ T9465] 8192 pages cma reserved [ 220.248405][ T9465] 4 pages hwpoisoned [ 220.335767][ T4724] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 220.335798][ T4724] Bluetooth: hci3: Injecting HCI hardware error event [ 220.336632][ T4724] Bluetooth: hci3: hardware error 0x00 [ 220.979187][ T9482] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 221.353429][ T9492] FAULT_INJECTION: forcing a failure. [ 221.353429][ T9492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.356334][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.8.1242 Tainted: G L syzkaller #0 PREEMPT [ 221.356351][ T9492] Tainted: [L]=SOFTLOCKUP [ 221.356355][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 221.356361][ T9492] Call trace: [ 221.356365][ T9492] show_stack+0x2c/0x3c (C) [ 221.356390][ T9492] __dump_stack+0x30/0x40 [ 221.356408][ T9492] dump_stack_lvl+0xd8/0x12c [ 221.356423][ T9492] dump_stack+0x1c/0x28 [ 221.356434][ T9492] should_fail_ex+0x41c/0x590 [ 221.356445][ T9492] should_fail+0x14/0x24 [ 221.356455][ T9492] should_fail_usercopy+0x20/0x30 [ 221.356466][ T9492] copy_from_sockptr_offset+0x84/0x1e8 [ 221.356475][ T9492] do_tcp_getsockopt+0x150/0x1d1c [ 221.356483][ T9492] tcp_getsockopt+0x6c/0xe8 [ 221.356490][ T9492] sock_common_getsockopt+0xa8/0xc4 [ 221.356499][ T9492] do_sock_getsockopt+0x338/0x720 [ 221.356508][ T9492] __sys_getsockopt+0xfc/0x168 [ 221.356516][ T9492] __arm64_sys_getsockopt+0xc0/0xdc [ 221.356525][ T9492] invoke_syscall+0x98/0x244 [ 221.356535][ T9492] el0_svc_common+0xec/0x23c [ 221.356545][ T9492] do_el0_svc+0x4c/0x5c [ 221.356554][ T9492] el0_svc+0x64/0x260 [ 221.356565][ T9492] el0t_64_sync_handler+0x48/0x148 [ 221.356574][ T9492] el0t_64_sync+0x198/0x19c [ 221.359579][ T9470] fuse: Bad value for 'fd' [ 221.600478][ T9497] FAULT_INJECTION: forcing a failure. [ 221.600478][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.600525][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.6.1244 Tainted: G L syzkaller #0 PREEMPT [ 221.600543][ T9497] Tainted: [L]=SOFTLOCKUP [ 221.600548][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 221.600553][ T9497] Call trace: [ 221.600556][ T9497] show_stack+0x2c/0x3c (C) [ 221.600576][ T9497] __dump_stack+0x30/0x40 [ 221.600587][ T9497] dump_stack_lvl+0xd8/0x12c [ 221.600597][ T9497] dump_stack+0x1c/0x28 [ 221.600606][ T9497] should_fail_ex+0x41c/0x590 [ 221.600618][ T9497] should_fail+0x14/0x24 [ 221.600630][ T9497] should_fail_usercopy+0x20/0x30 [ 221.600640][ T9497] simple_read_from_buffer+0xc4/0x238 [ 221.600652][ T9497] proc_fail_nth_read+0x1a8/0x248 [ 221.600660][ T9497] vfs_read+0x230/0x8c8 [ 221.600671][ T9497] ksys_read+0x12c/0x228 [ 221.600677][ T9497] __arm64_sys_read+0x7c/0x90 [ 221.600684][ T9497] invoke_syscall+0x98/0x244 [ 221.600695][ T9497] el0_svc_common+0xec/0x23c [ 221.600704][ T9497] do_el0_svc+0x4c/0x5c [ 221.600714][ T9497] el0_svc+0x64/0x260 [ 221.600724][ T9497] el0t_64_sync_handler+0x48/0x148 [ 221.600734][ T9497] el0t_64_sync+0x198/0x19c [ 222.101428][ T9511] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 222.411030][ T4724] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 223.028613][ T9533] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1255'. [ 223.239989][ T9535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 223.249418][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1256'. [ 223.253734][ T9535] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1256'. [ 223.278227][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 223.278257][ T30] audit: type=1800 audit(223.260:1393): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 223.288616][ T30] audit: type=1800 audit(223.270:1394): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168637 res=0 errno=0 [ 223.299951][ T30] audit: type=1800 audit(223.280:1395): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=168653 res=0 errno=0 [ 223.313321][ T30] audit: type=1800 audit(223.300:1396): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=168656 res=0 errno=0 [ 223.313371][ T30] audit: type=1800 audit(223.300:1397): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=168655 res=0 errno=0 [ 223.313417][ T30] audit: type=1800 audit(223.300:1398): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=168654 res=0 errno=0 [ 223.331184][ T30] audit: type=1800 audit(223.320:1399): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=168645 res=0 errno=0 [ 223.346404][ T30] audit: type=1800 audit(223.330:1400): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 223.350529][ T30] audit: type=1800 audit(223.330:1401): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168669 res=0 errno=0 [ 223.372278][ T30] audit: type=1800 audit(223.360:1402): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168683 res=0 errno=0 [ 223.903031][ T9559] loop8: detected capacity change from 0 to 128 [ 223.916968][ T9559] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.028721][ T8560] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.363559][ T9572] FAULT_INJECTION: forcing a failure. [ 224.363559][ T9572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.363609][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.6.1270 Tainted: G L syzkaller #0 PREEMPT [ 224.363625][ T9572] Tainted: [L]=SOFTLOCKUP [ 224.363629][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 224.363634][ T9572] Call trace: [ 224.363637][ T9572] show_stack+0x2c/0x3c (C) [ 224.363656][ T9572] __dump_stack+0x30/0x40 [ 224.363666][ T9572] dump_stack_lvl+0xd8/0x12c [ 224.363676][ T9572] dump_stack+0x1c/0x28 [ 224.363686][ T9572] should_fail_ex+0x41c/0x590 [ 224.363697][ T9572] should_fail+0x14/0x24 [ 224.363709][ T9572] should_fail_usercopy+0x20/0x30 [ 224.363720][ T9572] _inline_copy_from_user+0x3c/0x174 [ 224.363728][ T9572] generic_map_update_batch+0x5d8/0x8dc [ 224.363739][ T9572] bpf_map_do_batch+0x2f0/0x4d0 [ 224.363747][ T9572] __sys_bpf+0x850/0x8c8 [ 224.363754][ T9572] __arm64_sys_bpf+0xc8/0xe4 [ 224.363760][ T9572] invoke_syscall+0x98/0x244 [ 224.363771][ T9572] el0_svc_common+0xec/0x23c [ 224.363780][ T9572] do_el0_svc+0x4c/0x5c [ 224.363790][ T9572] el0_svc+0x64/0x260 [ 224.363800][ T9572] el0t_64_sync_handler+0x48/0x148 [ 224.363810][ T9572] el0t_64_sync+0x198/0x19c [ 225.941916][ T4724] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 226.257264][ T9599] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 226.339733][ T9603] FAULT_INJECTION: forcing a failure. [ 226.339733][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 226.344649][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.7.1280 Tainted: G L syzkaller #0 PREEMPT [ 226.344677][ T9603] Tainted: [L]=SOFTLOCKUP [ 226.344683][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 226.344691][ T9603] Call trace: [ 226.344695][ T9603] show_stack+0x2c/0x3c (C) [ 226.344719][ T9603] __dump_stack+0x30/0x40 [ 226.344737][ T9603] dump_stack_lvl+0xd8/0x12c [ 226.344750][ T9603] dump_stack+0x1c/0x28 [ 226.344760][ T9603] should_fail_ex+0x41c/0x590 [ 226.344771][ T9603] should_failslab+0xc4/0x120 [ 226.344779][ T9603] __kmalloc_noprof+0x108/0x6b8 [ 226.344788][ T9603] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 226.344797][ T9603] memcg_list_lru_alloc+0xc4/0xf8 [ 226.344805][ T9603] __memcg_slab_post_alloc_hook+0x280/0x8cc [ 226.344817][ T9603] kmem_cache_alloc_lru_noprof+0x32c/0x5dc [ 226.344825][ T9603] alloc_inode+0x84/0x198 [ 226.344834][ T9603] new_inode+0x20/0x50 [ 226.344843][ T9603] configfs_new_inode+0x30/0x3c8 [ 226.344854][ T9603] configfs_create+0xc4/0x22c [ 226.344864][ T9603] configfs_lookup+0x328/0x624 [ 226.344874][ T9603] path_openat+0xda4/0x2a60 [ 226.344883][ T9603] do_file_open+0x1c8/0x2e8 [ 226.344891][ T9603] do_sys_openat2+0x114/0x1e8 [ 226.344901][ T9603] do_sys_open+0xb0/0xe0 [ 226.344910][ T9603] __arm64_sys_openat+0xa0/0xbc [ 226.344920][ T9603] invoke_syscall+0x98/0x244 [ 226.344939][ T9603] el0_svc_common+0xec/0x23c [ 226.344949][ T9603] do_el0_svc+0x4c/0x5c [ 226.344958][ T9603] el0_svc+0x64/0x260 [ 226.344969][ T9603] el0t_64_sync_handler+0x48/0x148 [ 226.344979][ T9603] el0t_64_sync+0x198/0x19c [ 226.906862][ T9615] syzkaller0: entered promiscuous mode [ 226.908148][ T9615] syzkaller0: entered allmulticast mode [ 226.924974][ T9615] FAULT_INJECTION: forcing a failure. [ 226.924974][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 226.925010][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: syz.5.1285 Tainted: G L syzkaller #0 PREEMPT [ 226.925028][ T9615] Tainted: [L]=SOFTLOCKUP [ 226.925032][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 226.925039][ T9615] Call trace: [ 226.925044][ T9615] show_stack+0x2c/0x3c (C) [ 226.925062][ T9615] __dump_stack+0x30/0x40 [ 226.925074][ T9615] dump_stack_lvl+0xd8/0x12c [ 226.925084][ T9615] dump_stack+0x1c/0x28 [ 226.925094][ T9615] should_fail_ex+0x41c/0x590 [ 226.925106][ T9615] should_failslab+0xc4/0x120 [ 226.925114][ T9615] __kmalloc_cache_noprof+0x94/0x5ec [ 226.925123][ T9615] tipc_mon_create+0xc4/0x420 [ 226.925134][ T9615] __tipc_nl_bearer_enable+0xae0/0xfb0 [ 226.925142][ T9615] tipc_nl_compat_doit+0x34c/0x50c [ 226.925152][ T9615] tipc_nl_compat_recv+0x650/0x92c [ 226.925162][ T9615] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 226.925173][ T9615] genl_rcv_msg+0x43c/0x620 [ 226.925182][ T9615] netlink_rcv_skb+0x238/0x414 [ 226.925190][ T9615] genl_rcv+0x38/0x50 [ 226.925199][ T9615] netlink_unicast+0x600/0x7f8 [ 226.925207][ T9615] netlink_sendmsg+0x648/0x948 [ 226.925215][ T9615] __sock_sendmsg+0xc8/0x17c [ 226.925224][ T9615] ____sys_sendmsg+0x3d0/0x6c8 [ 226.925235][ T9615] ___sys_sendmsg+0x198/0x224 [ 226.925244][ T9615] __sys_sendmsg+0x158/0x204 [ 226.925253][ T9615] __arm64_sys_sendmsg+0x80/0x94 [ 226.925262][ T9615] invoke_syscall+0x98/0x244 [ 226.925272][ T9615] el0_svc_common+0xec/0x23c [ 226.925282][ T9615] do_el0_svc+0x4c/0x5c [ 226.925292][ T9615] el0_svc+0x64/0x260 [ 226.925302][ T9615] el0t_64_sync_handler+0x48/0x148 [ 226.925312][ T9615] el0t_64_sync+0x198/0x19c [ 226.925351][ T9615] tipc: Disabling bearer [ 228.010448][ T9624] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 228.010494][ T9624] dummy0: left promiscuous mode [ 228.026965][ T9624] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.666214][ T9624] Set syz1 is full, maxelem 65536 reached [ 230.724840][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 230.724884][ T30] audit: type=1800 audit(230.710:1424): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 230.818900][ T30] audit: type=1800 audit(230.800:1425): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 230.900398][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1293'. [ 230.916875][ T9651] dlm: no locking on control device [ 230.926150][ T9651] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 230.937156][ T30] audit: type=1800 audit(230.920:1426): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 231.083983][ T30] audit: type=1800 audit(231.060:1427): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 231.143075][ T9655] loop2: detected capacity change from 0 to 256 [ 231.144730][ T9655] vfat: Unknown parameter '' [ 231.183294][ T30] audit: type=1800 audit(231.170:1428): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 231.187905][ T9655] loop2: detected capacity change from 0 to 1024 [ 231.286149][ T30] audit: type=1800 audit(231.270:1429): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 231.468178][ T30] audit: type=1800 audit(231.450:1430): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 232.008328][ T30] audit: type=1800 audit(231.990:1431): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 232.132705][ T9571] Set syz1 is full, maxelem 65536 reached [ 232.148443][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1304'. [ 232.177445][ T30] audit: type=1800 audit(232.150:1432): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 232.226978][ T30] audit: type=1800 audit(232.210:1433): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 232.502498][ T9683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 232.528050][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 232.530257][ T9683] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1306'. [ 233.026881][ T9697] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 233.358599][ T9710] syzkaller0: entered promiscuous mode [ 233.361118][ T9710] syzkaller0: entered allmulticast mode [ 233.384773][ T9710] tipc: Enabled bearer , priority 0 [ 233.398636][ T9709] tipc: Resetting bearer [ 233.439605][ T9709] tipc: Disabling bearer [ 234.873946][ T9737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1324'. [ 234.944993][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'. [ 235.049024][ T9739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.389164][ T9755] FAULT_INJECTION: forcing a failure. [ 235.389164][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 235.389205][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.5.1333 Tainted: G L syzkaller #0 PREEMPT [ 235.389220][ T9755] Tainted: [L]=SOFTLOCKUP [ 235.389223][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 235.389228][ T9755] Call trace: [ 235.389231][ T9755] show_stack+0x2c/0x3c (C) [ 235.389248][ T9755] __dump_stack+0x30/0x40 [ 235.389259][ T9755] dump_stack_lvl+0xd8/0x12c [ 235.389268][ T9755] dump_stack+0x1c/0x28 [ 235.389277][ T9755] should_fail_ex+0x41c/0x590 [ 235.389289][ T9755] should_failslab+0xc4/0x120 [ 235.389297][ T9755] __kmalloc_noprof+0x108/0x6b8 [ 235.389305][ T9755] __vb2_queue_alloc+0x260/0x1124 [ 235.389315][ T9755] vb2_core_create_bufs+0x508/0x9b4 [ 235.389323][ T9755] vb2_create_bufs+0x4a8/0x6a0 [ 235.389333][ T9755] vb2_ioctl_create_bufs+0x230/0x354 [ 235.389343][ T9755] vidioc_create_bufs+0xd8/0x114 [ 235.389353][ T9755] v4l_create_bufs+0x11c/0x21c [ 235.389364][ T9755] __video_do_ioctl+0x768/0xaa8 [ 235.389373][ T9755] video_usercopy+0x74c/0xe88 [ 235.389381][ T9755] video_ioctl2+0x3c/0x50 [ 235.389390][ T9755] v4l2_ioctl+0x148/0x18c [ 235.389399][ T9755] __arm64_sys_ioctl+0x14c/0x1c4 [ 235.389409][ T9755] invoke_syscall+0x98/0x244 [ 235.389419][ T9755] el0_svc_common+0xec/0x23c [ 235.389429][ T9755] do_el0_svc+0x4c/0x5c [ 235.389438][ T9755] el0_svc+0x64/0x260 [ 235.389449][ T9755] el0t_64_sync_handler+0x48/0x148 [ 235.389458][ T9755] el0t_64_sync+0x198/0x19c [ 235.463816][ T9752] 9p: Unknown access argument 18446744073709551615: -34 [ 235.599319][ T9759] loop7: detected capacity change from 0 to 256 [ 235.614255][ T9759] vfat: Bad value for 'uid' [ 235.614288][ T9759] vfat: Bad value for 'uid' [ 235.687967][ T9759] netlink: 'syz.7.1335': attribute type 58 has an invalid length. [ 235.688005][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1335'. [ 235.837707][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 235.837750][ T30] audit: type=1800 audit(235.810:1464): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 235.979902][ T30] audit: type=1800 audit(235.960:1465): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 236.033390][ T9783] loop2: detected capacity change from 0 to 2048 [ 236.133924][ T30] audit: type=1800 audit(236.120:1466): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 236.224603][ T30] audit: type=1800 audit(236.210:1467): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 236.339353][ T30] audit: type=1800 audit(236.320:1468): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 236.454722][ T30] audit: type=1800 audit(236.440:1469): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 236.900437][ T9797] FAULT_INJECTION: forcing a failure. [ 236.900437][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 236.900480][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.2.1345 Tainted: G L syzkaller #0 PREEMPT [ 236.900496][ T9797] Tainted: [L]=SOFTLOCKUP [ 236.900500][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 236.900507][ T9797] Call trace: [ 236.900511][ T9797] show_stack+0x2c/0x3c (C) [ 236.900534][ T9797] __dump_stack+0x30/0x40 [ 236.900545][ T9797] dump_stack_lvl+0xd8/0x12c [ 236.900555][ T9797] dump_stack+0x1c/0x28 [ 236.900565][ T9797] should_fail_ex+0x41c/0x590 [ 236.900576][ T9797] should_failslab+0xc4/0x120 [ 236.900585][ T9797] __kmalloc_cache_noprof+0x94/0x5ec [ 236.900594][ T9797] drm_mode_duplicate+0x64/0xd8 [ 236.900604][ T9797] drm_add_modes_noedid+0x108/0x1f0 [ 236.900613][ T9797] vkms_conn_get_modes+0x28/0x50 [ 236.900623][ T9797] drm_helper_probe_single_connector_modes+0x5d8/0x1398 [ 236.900636][ T9797] drm_mode_getconnector+0x5cc/0x1230 [ 236.900647][ T9797] drm_ioctl_kernel+0x250/0x31c [ 236.900654][ T9797] drm_ioctl+0x694/0xac8 [ 236.900661][ T9797] __arm64_sys_ioctl+0x14c/0x1c4 [ 236.900672][ T9797] invoke_syscall+0x98/0x244 [ 236.900683][ T9797] el0_svc_common+0xec/0x23c [ 236.900692][ T9797] do_el0_svc+0x4c/0x5c [ 236.900702][ T9797] el0_svc+0x64/0x260 [ 236.900713][ T9797] el0t_64_sync_handler+0x48/0x148 [ 236.900723][ T9797] el0t_64_sync+0x198/0x19c [ 236.977831][ T30] audit: type=1800 audit(236.960:1470): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 237.021073][ T9801] binder: 9800:9801 ioctl c0306201 20000080 returned -14 [ 237.028223][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1347'. [ 237.031778][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1347'. [ 237.033816][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1347'. [ 237.039215][ T9801] binder: 9800:9801 tried to acquire reference to desc 0, got 1 instead [ 237.039251][ T9801] binder: 9800:9801 ioctl c0306201 200003c0 returned -14 [ 237.039437][ T9801] binder: 9800:9801 got transaction with invalid parent offset or type [ 237.039485][ T9801] binder: 9800:9801 transaction call to 9800:0 failed 78/29201/-22, code 0 size 96-24 line 3617 [ 237.052882][ T1503] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.092952][ T30] audit: type=1800 audit(237.080:1471): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 237.185062][ T9805] netlink: 'syz.5.1349': attribute type 58 has an invalid length. [ 237.185098][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1349'. [ 237.276863][ T9807] fuse: Unknown parameter 'ÿÿ00000000000000000003' [ 237.280434][ T30] audit: type=1800 audit(237.260:1472): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 237.359355][ T30] audit: type=1800 audit(237.340:1473): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 237.388753][ T9812] loop7: detected capacity change from 0 to 1024 [ 237.397451][ T9812] EXT4-fs: Invalid want_extra_isize 7 [ 237.979380][ T9826] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 238.838205][ T9843] netlink: 'syz.8.1363': attribute type 58 has an invalid length. [ 238.838247][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1363'. [ 239.005860][ T9857] binder: 9855:9857 tried to acquire reference to desc 0, got 1 instead [ 239.011258][ T9857] binder: 9855:9857 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 239.011292][ T9857] binder: 9857 RLIMIT_NICE not set [ 239.011312][ T9857] binder: 9857 RLIMIT_NICE not set [ 239.041689][ T1503] binder: release 9855:9857 transaction 83 out, still active [ 239.041722][ T1503] binder: undelivered TRANSACTION_COMPLETE [ 239.045824][ T1503] binder: release 9855:9857 transaction 83 in, still active [ 239.046007][ T1503] binder: send failed reply for transaction 83, target dead [ 239.962456][ T9875] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 240.022609][ T9876] ptrace attach of ""[9877] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[9876] [ 240.138300][ T9869] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 240.352075][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1375'. [ 240.417206][ T9881] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1375'. [ 240.628356][ T9888] overlayfs: failed to clone upperpath [ 240.646846][ T9888] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 240.711790][ T9890] loop7: detected capacity change from 0 to 7 [ 240.779649][ T9890] Dev loop7: unable to read RDB block 7 [ 240.781326][ T9890] loop7: unable to read partition table [ 240.781435][ T9890] loop7: partition table beyond EOD, truncated [ 240.781466][ T9890] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 240.859034][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 240.859068][ T30] audit: type=1800 audit(240.840:1487): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 240.924032][ T30] audit: type=1800 audit(240.910:1488): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1383" name="UDC" dev="configfs" ino=26448 res=0 errno=0 [ 240.980507][ T30] audit: type=1800 audit(240.960:1489): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 241.104575][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1386'. [ 241.307809][ T9913] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 241.446659][ T30] audit: type=1800 audit(241.430:1490): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 241.491974][ T9919] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 241.495417][ T10] IPVS: starting estimator thread 0... [ 241.508485][ T9918] loop2: detected capacity change from 0 to 256 [ 241.526909][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1390'. [ 241.564465][ T30] audit: type=1800 audit(241.550:1491): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 241.576976][ T30] audit: type=1800 audit(241.560:1492): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1391" name="file1" dev="loop2" ino=1048754 res=0 errno=0 [ 241.581457][ T9920] IPVS: using max 59 ests per chain, 141600 per kthread [ 241.583788][ T9918] syz.2.1391: attempt to access beyond end of device [ 241.583788][ T9918] loop2: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 241.592480][ T9918] syz.2.1391: attempt to access beyond end of device [ 241.592480][ T9918] loop2: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 241.599743][ T30] audit: type=1800 audit(241.580:1493): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1391" name="file1" dev="loop2" ino=1048754 res=0 errno=0 [ 241.611570][ T9918] syz.2.1391: attempt to access beyond end of device [ 241.611570][ T9918] loop2: rw=2049, sector=1808, nr_sectors = 4 limit=256 [ 241.623476][ T9918] syz.2.1391: attempt to access beyond end of device [ 241.623476][ T9918] loop2: rw=2049, sector=1768, nr_sectors = 40 limit=256 [ 241.630167][ T9918] syz.2.1391: attempt to access beyond end of device [ 241.630167][ T9918] loop2: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 241.630207][ T9918] Buffer I/O error on dev loop2, logical block 442, lost async page write [ 241.858708][ T9926] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1391' resets device [ 241.921298][ T9929] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1393'. [ 241.923388][ T9929] netlink: 'syz.8.1393': attribute type 2 has an invalid length. [ 242.091698][ T3705] kworker/u8:9: attempt to access beyond end of device [ 242.091698][ T3705] loop2: rw=1, sector=1768, nr_sectors = 4 limit=256 [ 242.257198][ T9934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 242.274690][ T9934] __nla_validate_parse: 3 callbacks suppressed [ 242.274719][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1394'. [ 242.287636][ T30] audit: type=1800 audit(242.250:1494): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170193 res=0 errno=0 [ 242.287683][ T30] audit: type=1800 audit(242.260:1495): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=170209 res=0 errno=0 [ 242.287720][ T30] audit: type=1800 audit(242.260:1496): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=170212 res=0 errno=0 [ 242.302409][ T9933] fuse: Bad value for 'fd' [ 242.330570][ T9935] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1394'. [ 242.848272][ T9953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.852993][ T9952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.853088][ T9952] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.853162][ T9952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.853209][ T9952] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.853257][ T9952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.853287][ T9952] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.853329][ T9952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.853357][ T9952] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.853397][ T9952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.271755][ T9961] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 243.373851][ T9965] FAULT_INJECTION: forcing a failure. [ 243.373851][ T9965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.378533][ T9965] CPU: 0 UID: 0 PID: 9965 Comm: syz.2.1406 Tainted: G L syzkaller #0 PREEMPT [ 243.378553][ T9965] Tainted: [L]=SOFTLOCKUP [ 243.378557][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 243.378563][ T9965] Call trace: [ 243.378567][ T9965] show_stack+0x2c/0x3c (C) [ 243.378593][ T9965] __dump_stack+0x30/0x40 [ 243.378611][ T9965] dump_stack_lvl+0xd8/0x12c [ 243.378626][ T9965] dump_stack+0x1c/0x28 [ 243.378637][ T9965] should_fail_ex+0x41c/0x590 [ 243.378650][ T9965] should_fail+0x14/0x24 [ 243.378660][ T9965] should_fail_usercopy+0x20/0x30 [ 243.378671][ T9965] simple_read_from_buffer+0xc4/0x238 [ 243.378682][ T9965] proc_fail_nth_read+0x1a8/0x248 [ 243.378690][ T9965] vfs_read+0x230/0x8c8 [ 243.378701][ T9965] ksys_read+0x12c/0x228 [ 243.378707][ T9965] __arm64_sys_read+0x7c/0x90 [ 243.378714][ T9965] invoke_syscall+0x98/0x244 [ 243.378724][ T9965] el0_svc_common+0xec/0x23c [ 243.378734][ T9965] do_el0_svc+0x4c/0x5c [ 243.378743][ T9965] el0_svc+0x64/0x260 [ 243.378754][ T9965] el0t_64_sync_handler+0x48/0x148 [ 243.378764][ T9965] el0t_64_sync+0x198/0x19c [ 244.057334][ T9981] loop7: detected capacity change from 0 to 256 [ 244.061776][ T9981] vfat: Unknown parameter 'shortnameepage' [ 244.147267][ T1503] IPVS: starting estimator thread 0... [ 244.231091][ T9987] IPVS: using max 59 ests per chain, 141600 per kthread [ 244.411228][ T4724] Bluetooth: hci1: command 0x0406 tx timeout [ 244.453445][ T9997] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1417'. [ 244.704381][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1422'. [ 244.891684][T10012] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 245.296993][T10025] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 245.297311][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.297501][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.507790][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1428'. [ 245.738004][T10048] netlink: 'syz.5.1433': attribute type 1 has an invalid length. [ 245.757771][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1433'. [ 245.820522][T10048] veth3: entered allmulticast mode [ 245.830127][T10048] bond3: (slave veth3): Enslaving as an active interface with a down link [ 245.857172][T10054] loop2: detected capacity change from 0 to 256 [ 245.860375][T10052] bond3: (slave veth0_to_bond): making interface the new active one [ 245.861400][T10052] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.884284][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1433'. [ 245.899690][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 245.899721][ T30] audit: type=1800 audit(245.880:1530): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 245.928013][T10048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.025357][T10063] FAULT_INJECTION: forcing a failure. [ 246.025357][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 246.025394][T10063] CPU: 0 UID: 0 PID: 10063 Comm: syz.2.1438 Tainted: G L syzkaller #0 PREEMPT [ 246.025410][T10063] Tainted: [L]=SOFTLOCKUP [ 246.025414][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 246.025419][T10063] Call trace: [ 246.025422][T10063] show_stack+0x2c/0x3c (C) [ 246.025440][T10063] __dump_stack+0x30/0x40 [ 246.025450][T10063] dump_stack_lvl+0xd8/0x12c [ 246.025460][T10063] dump_stack+0x1c/0x28 [ 246.025470][T10063] should_fail_ex+0x41c/0x590 [ 246.025481][T10063] should_failslab+0xc4/0x120 [ 246.025489][T10063] __kmalloc_noprof+0x108/0x6b8 [ 246.025498][T10063] tomoyo_encode2+0x10c/0x330 [ 246.025506][T10063] tomoyo_encode+0x34/0x50 [ 246.025514][T10063] tomoyo_realpath_from_path+0x488/0x4dc [ 246.025522][T10063] tomoyo_check_open_permission+0x1c4/0x394 [ 246.025530][T10063] tomoyo_file_open+0x78/0xcc [ 246.025538][T10063] security_file_open+0xbc/0x258 [ 246.025546][T10063] do_dentry_open+0x2a8/0xfc0 [ 246.025556][T10063] vfs_open+0x44/0x2dc [ 246.025565][T10063] path_openat+0x21fc/0x2a60 [ 246.025573][T10063] do_file_open+0x1c8/0x2e8 [ 246.025581][T10063] do_sys_openat2+0x114/0x1e8 [ 246.025591][T10063] do_sys_open+0xb0/0xe0 [ 246.025600][T10063] __arm64_sys_openat+0xa0/0xbc [ 246.025609][T10063] invoke_syscall+0x98/0x244 [ 246.025620][T10063] el0_svc_common+0xec/0x23c [ 246.025629][T10063] do_el0_svc+0x4c/0x5c [ 246.025638][T10063] el0_svc+0x64/0x260 [ 246.025649][T10063] el0t_64_sync_handler+0x48/0x148 [ 246.025659][T10063] el0t_64_sync+0x198/0x19c [ 246.058564][T10063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.058781][ T30] audit: type=1800 audit(246.040:1531): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1438" name="UDC" dev="configfs" ino=27011 res=0 errno=0 [ 246.100114][ T30] audit: type=1800 audit(246.080:1532): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 246.891287][T10076] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 247.398843][ T30] audit: type=1800 audit(247.380:1533): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 247.636144][ T30] audit: type=1800 audit(247.620:1534): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 247.693489][ T30] audit: type=1800 audit(247.680:1535): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 248.014778][T10086] loop2: detected capacity change from 0 to 512 [ 248.041263][T10086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.069810][T10086] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1446: corrupted xattr block 33: invalid header [ 248.080144][T10086] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1446: corrupted xattr block 33: invalid header [ 248.087783][T10086] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1446: corrupted xattr block 33: invalid header [ 248.091776][T10086] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1446: corrupted xattr block 33: invalid header [ 248.125622][ T30] audit: type=1800 audit(248.110:1536): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 248.144145][ T30] audit: type=1800 audit(248.130:1537): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1446" name="softlockup_count" dev="sysfs" ino=49525 res=0 errno=0 [ 248.170618][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1450'. [ 248.347392][ T30] audit: type=1800 audit(248.330:1538): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 248.513038][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1452'. [ 248.618293][T10110] FAULT_INJECTION: forcing a failure. [ 248.618293][T10110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.618335][T10110] CPU: 0 UID: 0 PID: 10110 Comm: syz.5.1454 Tainted: G L syzkaller #0 PREEMPT [ 248.618354][T10110] Tainted: [L]=SOFTLOCKUP [ 248.618358][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 248.618364][T10110] Call trace: [ 248.618367][T10110] show_stack+0x2c/0x3c (C) [ 248.618385][T10110] __dump_stack+0x30/0x40 [ 248.618396][T10110] dump_stack_lvl+0xd8/0x12c [ 248.618406][T10110] dump_stack+0x1c/0x28 [ 248.618415][T10110] should_fail_ex+0x41c/0x590 [ 248.618426][T10110] should_fail+0x14/0x24 [ 248.618436][T10110] should_fail_usercopy+0x20/0x30 [ 248.618446][T10110] _inline_copy_from_user+0x3c/0x174 [ 248.618456][T10110] do_handle_open+0xe4/0x928 [ 248.618464][T10110] __arm64_sys_open_by_handle_at+0x80/0x94 [ 248.618472][T10110] invoke_syscall+0x98/0x244 [ 248.618482][T10110] el0_svc_common+0xec/0x23c [ 248.618492][T10110] do_el0_svc+0x4c/0x5c [ 248.618501][T10110] el0_svc+0x64/0x260 [ 248.618512][T10110] el0t_64_sync_handler+0x48/0x148 [ 248.618522][T10110] el0t_64_sync+0x198/0x19c [ 248.683244][T10112] loop7: detected capacity change from 0 to 256 [ 248.692366][T10112] vfat: Bad value for 'uid' [ 248.692397][T10112] vfat: Bad value for 'uid' [ 248.794148][ T30] audit: type=1800 audit(248.780:1539): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1446" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 248.813930][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.899138][T10120] netlink: 'syz.7.1453': attribute type 58 has an invalid length. [ 248.899171][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1453'. [ 248.915462][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.781256][T10145] FAULT_INJECTION: forcing a failure. [ 249.781256][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 249.781299][T10145] CPU: 0 UID: 0 PID: 10145 Comm: syz.6.1466 Tainted: G L syzkaller #0 PREEMPT [ 249.781318][T10145] Tainted: [L]=SOFTLOCKUP [ 249.781324][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 249.781336][T10145] Call trace: [ 249.781342][T10145] show_stack+0x2c/0x3c (C) [ 249.781364][T10145] __dump_stack+0x30/0x40 [ 249.781378][T10145] dump_stack_lvl+0xd8/0x12c [ 249.781388][T10145] dump_stack+0x1c/0x28 [ 249.781398][T10145] should_fail_ex+0x41c/0x590 [ 249.781410][T10145] should_failslab+0xc4/0x120 [ 249.781419][T10145] __kmalloc_noprof+0x108/0x6b8 [ 249.781428][T10145] tomoyo_realpath_from_path+0xbc/0x4dc [ 249.781437][T10145] tomoyo_path_number_perm+0x1f0/0x500 [ 249.781444][T10145] tomoyo_file_ioctl+0x2c/0x3c [ 249.781453][T10145] security_file_ioctl+0xdc/0x2b0 [ 249.781460][T10145] __arm64_sys_ioctl+0xa8/0x1c4 [ 249.781471][T10145] invoke_syscall+0x98/0x244 [ 249.781481][T10145] el0_svc_common+0xec/0x23c [ 249.781491][T10145] do_el0_svc+0x4c/0x5c [ 249.781500][T10145] el0_svc+0x64/0x260 [ 249.781511][T10145] el0t_64_sync_handler+0x48/0x148 [ 249.781521][T10145] el0t_64_sync+0x198/0x19c [ 249.781542][T10145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.443576][T10156] FAULT_INJECTION: forcing a failure. [ 250.443576][T10156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.443624][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.6.1470 Tainted: G L syzkaller #0 PREEMPT [ 250.443649][T10156] Tainted: [L]=SOFTLOCKUP [ 250.443654][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 250.443659][T10156] Call trace: [ 250.443662][T10156] show_stack+0x2c/0x3c (C) [ 250.443688][T10156] __dump_stack+0x30/0x40 [ 250.443699][T10156] dump_stack_lvl+0xd8/0x12c [ 250.443709][T10156] dump_stack+0x1c/0x28 [ 250.443719][T10156] should_fail_ex+0x41c/0x590 [ 250.443730][T10156] should_fail+0x14/0x24 [ 250.443739][T10156] should_fail_usercopy+0x20/0x30 [ 250.443750][T10156] _copy_from_iter+0x188/0x1064 [ 250.443758][T10156] packet_sendmsg+0x273c/0x4110 [ 250.443768][T10156] __sock_sendmsg+0xc8/0x17c [ 250.443777][T10156] __sys_sendto+0x250/0x328 [ 250.443786][T10156] __arm64_sys_sendto+0xe4/0x104 [ 250.443795][T10156] invoke_syscall+0x98/0x244 [ 250.443805][T10156] el0_svc_common+0xec/0x23c [ 250.443814][T10156] do_el0_svc+0x4c/0x5c [ 250.443824][T10156] el0_svc+0x64/0x260 [ 250.443834][T10156] el0t_64_sync_handler+0x48/0x148 [ 250.443844][T10156] el0t_64_sync+0x198/0x19c [ 250.849226][T10169] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1474'. [ 250.943895][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 250.943940][ T30] audit: type=1800 audit(250.930:1544): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 251.029587][T10174] FAULT_INJECTION: forcing a failure. [ 251.029587][T10174] name failslab, interval 1, probability 0, space 0, times 0 [ 251.033302][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.2.1478 Tainted: G L syzkaller #0 PREEMPT [ 251.033329][T10174] Tainted: [L]=SOFTLOCKUP [ 251.033335][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 251.033345][T10174] Call trace: [ 251.033350][T10174] show_stack+0x2c/0x3c (C) [ 251.033375][T10174] __dump_stack+0x30/0x40 [ 251.033387][T10174] dump_stack_lvl+0xd8/0x12c [ 251.033398][T10174] dump_stack+0x1c/0x28 [ 251.033410][T10174] should_fail_ex+0x41c/0x590 [ 251.033422][T10174] should_failslab+0xc4/0x120 [ 251.033432][T10174] __kmalloc_cache_noprof+0x94/0x5ec [ 251.033441][T10174] alloc_netdev_mqs+0x9d4/0xf2c [ 251.033453][T10174] rtnl_create_link+0x2b0/0xb78 [ 251.033460][T10174] rtnl_newlink_create+0x210/0x764 [ 251.033469][T10174] rtnl_newlink+0xdc4/0x1144 [ 251.033476][T10174] rtnetlink_rcv_msg+0x66c/0x9bc [ 251.033484][T10174] netlink_rcv_skb+0x238/0x414 [ 251.033493][T10174] rtnetlink_rcv+0x28/0x38 [ 251.033501][T10174] netlink_unicast+0x600/0x7f8 [ 251.033509][T10174] netlink_sendmsg+0x648/0x948 [ 251.033517][T10174] __sock_sendmsg+0xc8/0x17c [ 251.033526][T10174] ____sys_sendmsg+0x3d0/0x6c8 [ 251.033535][T10174] ___sys_sendmsg+0x198/0x224 [ 251.033544][T10174] __sys_sendmsg+0x158/0x204 [ 251.033552][T10174] __arm64_sys_sendmsg+0x80/0x94 [ 251.033561][T10174] invoke_syscall+0x98/0x244 [ 251.033572][T10174] el0_svc_common+0xec/0x23c [ 251.033581][T10174] do_el0_svc+0x4c/0x5c [ 251.033591][T10174] el0_svc+0x64/0x260 [ 251.033601][T10174] el0t_64_sync_handler+0x48/0x148 [ 251.033611][T10174] el0t_64_sync+0x198/0x19c [ 251.118003][ T30] audit: type=1800 audit(251.100:1545): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 252.651129][T10183] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 255.448389][ T30] audit: type=1800 audit(255.430:1546): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 255.551277][T10203] overlayfs: failed lookup in lower (newroot/303, name='file0', err=-40): overlapping layers [ 255.552482][T10204] FAULT_INJECTION: forcing a failure. [ 255.552482][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 255.552509][T10204] CPU: 0 UID: 0 PID: 10204 Comm: syz.6.1489 Tainted: G L syzkaller #0 PREEMPT [ 255.552525][T10204] Tainted: [L]=SOFTLOCKUP [ 255.552529][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 255.552536][T10204] Call trace: [ 255.552540][T10204] show_stack+0x2c/0x3c (C) [ 255.552561][T10204] __dump_stack+0x30/0x40 [ 255.552572][T10204] dump_stack_lvl+0xd8/0x12c [ 255.552582][T10204] dump_stack+0x1c/0x28 [ 255.552591][T10204] should_fail_ex+0x41c/0x590 [ 255.552603][T10204] should_failslab+0xc4/0x120 [ 255.552611][T10204] __kmalloc_noprof+0x108/0x6b8 [ 255.552619][T10204] tomoyo_realpath_from_path+0xbc/0x4dc [ 255.552628][T10204] tomoyo_path_number_perm+0x1f0/0x500 [ 255.552636][T10204] tomoyo_file_ioctl+0x2c/0x3c [ 255.552644][T10204] security_file_ioctl+0xdc/0x2b0 [ 255.552652][T10204] __arm64_sys_ioctl+0xa8/0x1c4 [ 255.552662][T10204] invoke_syscall+0x98/0x244 [ 255.552672][T10204] el0_svc_common+0xec/0x23c [ 255.552682][T10204] do_el0_svc+0x4c/0x5c [ 255.552691][T10204] el0_svc+0x64/0x260 [ 255.552702][T10204] el0t_64_sync_handler+0x48/0x148 [ 255.552711][T10204] el0t_64_sync+0x198/0x19c [ 255.552724][T10204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.648560][ T30] audit: type=1800 audit(255.630:1547): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 256.008756][ T30] audit: type=1800 audit(255.990:1548): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1494" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 256.045316][ T30] audit: type=1800 audit(256.030:1549): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 256.149662][T10225] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1497'. [ 256.168051][ T30] audit: type=1800 audit(256.150:1550): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171325 res=0 errno=0 [ 256.241935][ T30] audit: type=1800 audit(256.230:1551): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 256.284981][T10228] netlink: 'syz.6.1498': attribute type 2 has an invalid length. [ 257.402546][ T30] audit: type=1800 audit(257.380:1552): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1497" name="/" dev="fuse" ino=1 res=0 errno=0 [ 257.960740][T10233] syz2: rxe_newlink: already configured on bond_slave_0 [ 259.616465][ T30] audit: type=1800 audit(259.600:1553): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 259.668873][T10238] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1502'. [ 259.770724][ T30] audit: type=1800 audit(259.750:1554): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 259.829028][ T30] audit: type=1800 audit(259.810:1555): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 259.977939][ T30] audit: type=1800 audit(259.960:1556): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 260.062709][T10259] loop7: detected capacity change from 0 to 512 [ 260.092433][T10259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.096546][ T30] audit: type=1800 audit(260.080:1557): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 260.125085][T10257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1510'. [ 260.139527][T10259] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1507: corrupted xattr block 33: invalid header [ 260.139780][T10259] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1507: corrupted xattr block 33: invalid header [ 260.139953][T10259] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1507: corrupted xattr block 33: invalid header [ 260.140563][T10259] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1507: corrupted xattr block 33: invalid header [ 260.158099][T10263] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 260.240087][T10259] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1507: corrupted xattr block 33: invalid header [ 260.242319][T10259] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 260.242347][T10259] EXT4-fs (loop7): This should not happen!! Data will be lost [ 260.242347][T10259] [ 260.242363][T10259] EXT4-fs (loop7): Total free blocks count 0 [ 260.242378][T10259] EXT4-fs (loop7): Free/Dirty block details [ 260.242395][T10259] EXT4-fs (loop7): free_blocks=65280 [ 260.242413][T10259] EXT4-fs (loop7): dirty_blocks=31 [ 260.242424][T10259] EXT4-fs (loop7): Block reservation details [ 260.242434][T10259] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 261.035479][ T15] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 261.047524][ T6363] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 261.138255][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 261.139758][ T30] audit: type=1800 audit(261.120:1565): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 261.383767][T10286] netlink: 'syz.7.1517': attribute type 1 has an invalid length. [ 261.676804][ T30] audit: type=1800 audit(261.660:1566): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 261.777907][T10297] loop7: detected capacity change from 0 to 256 [ 261.791382][ T30] audit: type=1800 audit(261.780:1567): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 261.825537][ T30] audit: type=1800 audit(261.810:1568): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1521" name="file1" dev="loop7" ino=1048768 res=0 errno=0 [ 261.834977][T10297] syz.7.1521: attempt to access beyond end of device [ 261.834977][T10297] loop7: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 261.837595][T10297] syz.7.1521: attempt to access beyond end of device [ 261.837595][T10297] loop7: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 261.842513][T10297] syz.7.1521: attempt to access beyond end of device [ 261.842513][T10297] loop7: rw=2049, sector=1808, nr_sectors = 4 limit=256 [ 261.847395][ T30] audit: type=1800 audit(261.820:1569): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1521" name="file1" dev="loop7" ino=1048768 res=0 errno=0 [ 261.852835][ T30] audit: type=1800 audit(261.840:1570): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 261.867618][T10297] syz.7.1521: attempt to access beyond end of device [ 261.867618][T10297] loop7: rw=2049, sector=1768, nr_sectors = 40 limit=256 [ 262.079249][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1528'. [ 262.104639][T10309] netlink: 'syz.6.1527': attribute type 10 has an invalid length. [ 262.115175][ T30] audit: type=1800 audit(262.100:1571): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 262.393506][T10318] overlayfs: failed to clone upperpath [ 262.411252][T10318] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1531'. [ 262.702309][ T30] audit: type=1800 audit(262.680:1572): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1529" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 262.775728][ T30] audit: type=1800 audit(262.760:1573): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 262.938900][T10355] binder: 10349:10355 got transaction to invalid handle, 1 [ 262.942197][T10355] binder: 10349:10355 cannot find target node [ 262.943544][T10355] binder: 10349:10355 transaction async to 0:0 failed 84/29201/-22, code 0 size 0-0 line 3252 [ 264.012620][ T30] audit: type=1800 audit(263.980:1574): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 264.210400][T10367] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 264.257027][T10373] loop7: detected capacity change from 0 to 512 [ 264.718939][T10382] overlayfs: failed to clone upperpath [ 264.721862][T10382] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1542'. [ 264.763715][T10373] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 264.784964][T10373] EXT4-fs (loop7): 1 truncate cleaned up [ 264.786762][T10373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.130103][T10389] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1544'. [ 265.244367][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.247744][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.309572][ T6363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.415339][T10402] loop7: detected capacity change from 0 to 512 [ 265.432977][T10402] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1546: corrupted in-inode xattr: invalid size in ea xattr [ 265.436110][T10402] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.440667][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 265.440699][ C0] EXT4-fs (loop7): initial error at time 265: ext4_iget_extra_inode:5180: inode 15 [ 265.440736][ C0] EXT4-fs (loop7): last error at time 265: ext4_iget_extra_inode:5180: inode 15 [ 265.453258][T10402] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1546: couldn't read orphan inode 15 (err -117) [ 265.453303][T10402] loop7: lost filesystem error report for type 5 error -117 [ 265.468373][T10402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.586820][T10404] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 268.838642][ T6363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.888880][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 268.888913][ T30] audit: type=1800 audit(268.870:1577): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 269.177363][ T30] audit: type=1800 audit(269.160:1578): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1548" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 269.360290][ T30] audit: type=1800 audit(269.340:1579): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 269.412487][T10434] siw: device registration error -23 [ 269.451702][T10436] netlink: 'syz.5.1555': attribute type 39 has an invalid length. [ 269.467132][ T30] audit: type=1800 audit(269.450:1580): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 269.888004][ T30] audit: type=1800 audit(269.870:1581): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 270.078241][T10454] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 270.762017][ T30] audit: type=1800 audit(270.750:1582): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1568" name="resume" dev="sysfs" ino=1390 res=0 errno=0 [ 270.825876][ T30] audit: type=1800 audit(270.810:1583): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 270.960579][ T30] audit: type=1800 audit(270.940:1584): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 271.242416][ T30] audit: type=1800 audit(271.230:1585): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1571" name="qw_sign" dev="configfs" ino=28502 res=0 errno=0 [ 271.358725][ T30] audit: type=1800 audit(271.340:1586): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 271.551627][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1572'. [ 274.344386][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 274.345649][ T30] audit: type=1800 audit(274.330:1595): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 274.542536][ T30] audit: type=1800 audit(274.530:1596): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 274.559049][ T30] audit: type=1800 audit(274.540:1597): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 274.571907][T10548] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 274.619650][T10551] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 274.686130][ T30] audit: type=1800 audit(274.660:1598): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 274.782487][ T30] audit: type=1800 audit(274.770:1599): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 274.934156][T10571] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1604'. [ 274.939435][T10572] batman_adv: batadv0: Adding interface: dummy0 [ 274.941653][T10572] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.947209][T10572] batman_adv: batadv0: Interface activated: dummy0 [ 274.982127][T10569] net_ratelimit: 3 callbacks suppressed [ 274.988163][T10569] batadv0: mtu less than device minimum [ 274.991996][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.993567][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.995150][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.996708][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.998298][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.999853][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.001424][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.003006][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.004565][T10569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 275.597482][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1608'. [ 275.964774][T10590] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.520378][ T30] audit: type=1800 audit(276.430:1600): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 276.661826][ T30] audit: type=1800 audit(276.570:1601): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 276.748967][T10623] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 276.765669][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 276.997537][ T30] audit: type=1800 audit(276.980:1602): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 277.114272][ T30] audit: type=1800 audit(277.100:1603): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 277.442113][T10634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 277.447820][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'. [ 277.457608][ T30] audit: type=1800 audit(277.440:1604): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172268 res=0 errno=0 [ 277.882338][T10644] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 277.934899][T10646] siw: device registration error -23 [ 278.468357][T10660] overlayfs: failed to clone upperpath [ 278.473147][T10660] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1632'. [ 279.224332][T10672] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 279.273367][T10674] loop7: detected capacity change from 0 to 128 [ 279.298871][T10674] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.442952][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 279.442990][ T30] audit: type=1800 audit(279.430:1625): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 279.450557][ T6363] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.603263][T10680] tmpfs: Bad value for 'mpol' [ 280.600307][ T30] audit: type=1800 audit(280.580:1626): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172437 res=0 errno=0 [ 281.597077][ T30] audit: type=1800 audit(281.580:1627): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172456 res=0 errno=0 [ 281.607945][T10683] veth2: entered allmulticast mode [ 282.690825][T10682] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 283.056084][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 283.126166][ T30] audit: type=1800 audit(283.110:1628): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 283.492323][ T30] audit: type=1800 audit(283.480:1629): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1645" name="nullb0" dev="tmpfs" ino=1453 res=0 errno=0 [ 283.738635][T10710] random: crng reseeded on system resumption [ 283.975029][ T30] audit: type=1800 audit(283.960:1630): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 284.060416][ T30] audit: type=1800 audit(284.040:1631): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 284.140210][ T30] audit: type=1800 audit(284.120:1632): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 284.240060][ T30] audit: type=1800 audit(284.220:1633): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 284.256636][ T30] audit: type=1326 audit(284.240:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10724 comm="syz.8.1657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad57a168 code=0x7ffc0000 [ 285.261832][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 285.261880][ T30] audit: type=1800 audit(285.240:1640): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 286.234429][ T4714] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.310394][ T30] audit: type=1800 audit(287.290:1641): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 287.496008][T10751] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 287.582855][ T30] audit: type=1800 audit(287.570:1642): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 287.815483][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1662'. [ 287.830123][T10758] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1662'. [ 287.908501][T10763] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 287.909184][T10763] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 288.147399][ T30] audit: type=1800 audit(288.130:1643): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1665" name="nullb0" dev="tmpfs" ino=853 res=0 errno=0 [ 288.298396][T10774] 9p: Unknown access argument 18446744073709551615: -34 [ 288.378824][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1671'. [ 288.488210][ T30] audit: type=1800 audit(288.470:1644): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 288.652267][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.126379][T10803] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 289.337282][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1678'. [ 289.339673][T10804] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1678'. [ 289.404094][ T30] audit: type=1800 audit(289.390:1645): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 289.433851][T10807] loop2: detected capacity change from 0 to 256 [ 289.444915][ T30] audit: type=1800 audit(289.430:1646): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1679" name="file1" dev="loop2" ino=1048795 res=0 errno=0 [ 289.449659][T10807] syz.2.1679: attempt to access beyond end of device [ 289.449659][T10807] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 289.468412][ T30] audit: type=1800 audit(289.450:1647): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 289.632130][ T30] audit: type=1800 audit(289.620:1648): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 289.810229][T10820] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 289.899766][ T30] audit: type=1800 audit(289.880:1649): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 289.956305][T10826] binder: 10825:10826 tried to acquire reference to desc 0, got 1 instead [ 289.956849][T10826] binder: 10825:10826 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 289.956876][T10826] binder: 10826 RLIMIT_NICE not set [ 289.956895][T10826] binder: 10826 RLIMIT_NICE not set [ 289.987720][ T1503] binder: release 10825:10826 transaction 89 in, still active [ 289.987753][ T1503] binder: send failed reply for transaction 89 to 10825:10826 [ 289.987827][ T1503] binder: undelivered TRANSACTION_COMPLETE [ 289.987842][ T1503] binder: undelivered TRANSACTION_ERROR: 29189 [ 290.293185][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 290.293222][ T30] audit: type=1800 audit(290.280:1654): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 290.321393][T10842] loop7: detected capacity change from 0 to 256 [ 290.341547][ T30] audit: type=1800 audit(290.330:1655): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1692" name="file1" dev="loop7" ino=1048809 res=0 errno=0 [ 290.351512][T10842] syz.7.1692: attempt to access beyond end of device [ 290.351512][T10842] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 290.393901][ T30] audit: type=1800 audit(290.380:1656): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 290.458567][ T30] audit: type=1800 audit(290.440:1657): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 290.752535][T10851] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 290.766268][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 290.768602][T10851] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1695'. [ 290.782548][ T30] audit: type=1800 audit(290.770:1658): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172572 res=0 errno=0 [ 290.815097][ T30] audit: type=1800 audit(290.800:1659): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=172588 res=0 errno=0 [ 290.829544][ T30] audit: type=1800 audit(290.810:1660): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=172591 res=0 errno=0 [ 290.829589][ T30] audit: type=1800 audit(290.810:1661): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=172590 res=0 errno=0 [ 290.864094][ T30] audit: type=1800 audit(290.850:1662): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=172589 res=0 errno=0 [ 290.871842][ T30] audit: type=1800 audit(290.860:1663): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=172580 res=0 errno=0 [ 291.389125][T10871] 9p: Unknown access argument 18446744073709551615: -34 [ 291.479884][T10878] FAULT_INJECTION: forcing a failure. [ 291.479884][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 291.483733][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.6.1705 Tainted: G L syzkaller #0 PREEMPT [ 291.483760][T10878] Tainted: [L]=SOFTLOCKUP [ 291.483764][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 291.483771][T10878] Call trace: [ 291.483775][T10878] show_stack+0x2c/0x3c (C) [ 291.483802][T10878] __dump_stack+0x30/0x40 [ 291.483820][T10878] dump_stack_lvl+0xd8/0x12c [ 291.483834][T10878] dump_stack+0x1c/0x28 [ 291.483846][T10878] should_fail_ex+0x41c/0x590 [ 291.483858][T10878] should_failslab+0xc4/0x120 [ 291.483868][T10878] kmem_cache_alloc_noprof+0x94/0x5d8 [ 291.483877][T10878] skb_clone+0x1ac/0x320 [ 291.483887][T10878] __netlink_deliver_tap+0x364/0x6f4 [ 291.483897][T10878] netlink_deliver_tap+0x1d8/0x1dc [ 291.483906][T10878] netlink_unicast+0x5dc/0x7f8 [ 291.483914][T10878] netlink_sendmsg+0x648/0x948 [ 291.483922][T10878] __sock_sendmsg+0xc8/0x17c [ 291.483935][T10878] sock_write_iter+0x220/0x310 [ 291.483945][T10878] vfs_write+0x51c/0xa0c [ 291.483953][T10878] ksys_write+0x12c/0x228 [ 291.483960][T10878] __arm64_sys_write+0x7c/0x90 [ 291.483967][T10878] invoke_syscall+0x98/0x244 [ 291.483977][T10878] el0_svc_common+0xec/0x23c [ 291.483987][T10878] do_el0_svc+0x4c/0x5c [ 291.483997][T10878] el0_svc+0x64/0x260 [ 291.484008][T10878] el0t_64_sync_handler+0x48/0x148 [ 291.484017][T10878] el0t_64_sync+0x198/0x19c [ 291.741066][T10891] IPVS: set_ctl: invalid protocol: 128 10.1.1.0:20001 [ 291.929655][T10897] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1713'. [ 292.116442][T10898] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 292.281184][T10902] Cannot find add_set index 34 as target [ 292.285198][T10902] nft_compat: unsupported protocol 0 [ 292.374716][T10904] 9p: Unknown access argument 18446744073709551615: -34 [ 293.072589][T10930] loop7: detected capacity change from 0 to 256 [ 293.074457][T10930] vfat: Unknown parameter 'shortnameepage' [ 293.298397][T10935] loop7: detected capacity change from 0 to 256 [ 293.565405][T10943] 9p: Unknown access argument 18446744073709551615: -34 [ 294.133247][T10958] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 294.864019][T10962] netlink: 'syz.6.1736': attribute type 12 has an invalid length. [ 295.149914][T10957] smc: removing ib device syz2 [ 295.489765][T10957] ------------[ cut here ]------------ [ 295.489776][T10957] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.2.1732/10957 [ 295.492934][T10957] Modules linked in: [ 295.493665][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.2.1732 Tainted: G L syzkaller #0 PREEMPT [ 295.495552][T10957] Tainted: [L]=SOFTLOCKUP [ 295.496353][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 295.498214][T10957] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 295.499537][T10957] pc : rxe_pool_cleanup+0x58/0x60 [ 295.500362][T10957] lr : rxe_pool_cleanup+0x58/0x60 [ 295.501195][T10957] sp : ffff800094ca6f40 [ 295.501906][T10957] x29: ffff800094ca6f40 x28: dfff800000000000 x27: ffff0000ec6d7a86 [ 295.503238][T10957] x26: dfff800000000000 x25: ffff0000eec8d108 x24: dfff800000000000 [ 295.504602][T10957] x23: 1fffe0001dd919f1 x22: ffff0000eec8cf88 x21: dfff800000000000 [ 295.506042][T10957] x20: ffff80008458778c x19: ffff0000eec8d428 x18: 00000000ffffffff [ 295.507470][T10957] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bf02b0 [ 295.508879][T10957] x14: 00000000868e5610 x13: 0000000000000001 x12: 0000000000000000 [ 295.510226][T10957] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 295.511621][T10957] x8 : ffff8000a0818000 x7 : 0000000000000000 x6 : 0000000000000000 [ 295.513064][T10957] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800084405700 [ 295.514432][T10957] x2 : 0000000000000002 x1 : ffff0000ef8e0000 x0 : 0000000000000001 [ 295.515816][T10957] Call trace: [ 295.516381][T10957] rxe_pool_cleanup+0x58/0x60 (P) [ 295.517251][T10957] rxe_dealloc+0x30/0xd0 [ 295.518004][T10957] ib_dealloc_device+0x50/0x1e0 [ 295.518832][T10957] __ib_unregister_device+0x2bc/0x33c [ 295.519806][T10957] ib_unregister_device_and_put+0x5c/0x80 [ 295.520829][T10957] nldev_dellink+0x330/0x374 [ 295.521661][T10957] rdma_nl_rcv+0x4f0/0x814 [ 295.522453][T10957] netlink_unicast+0x600/0x7f8 [ 295.523280][T10957] netlink_sendmsg+0x648/0x948 [ 295.524120][T10957] __sock_sendmsg+0xc8/0x17c [ 295.524901][T10957] ____sys_sendmsg+0x3d0/0x6c8 [ 295.525722][T10957] ___sys_sendmsg+0x198/0x224 [ 295.526542][T10957] __sys_sendmsg+0x158/0x204 [ 295.527338][T10957] __arm64_sys_sendmsg+0x80/0x94 [ 295.528193][T10957] invoke_syscall+0x98/0x244 [ 295.529005][T10957] el0_svc_common+0xec/0x23c [ 295.529869][T10957] do_el0_svc+0x4c/0x5c [ 295.530623][T10957] el0_svc+0x64/0x260 [ 295.531327][T10957] el0t_64_sync_handler+0x48/0x148 [ 295.532237][T10957] el0t_64_sync+0x198/0x19c [ 295.533087][T10957] irq event stamp: 606332 [ 295.533841][T10957] hardirqs last enabled at (606331): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 295.535746][T10957] hardirqs last disabled at (606332): [] el1_brk64+0x20/0x54 [ 295.537351][T10957] softirqs last enabled at (606248): [] __alloc_skb+0x1c0/0x610 [ 295.539038][T10957] softirqs last disabled at (606246): [] __alloc_skb+0x1a8/0x610 [ 295.540676][T10957] ---[ end trace 0000000000000000 ]--- [ 295.542985][T10957] ------------[ cut here ]------------ [ 295.542991][T10957] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60, CPU#0: syz.2.1732/10957 [ 295.545792][T10957] Modules linked in: [ 295.546460][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.2.1732 Tainted: G W L syzkaller #0 PREEMPT [ 295.548210][T10957] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 295.549074][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 295.550749][T10957] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 295.552191][T10957] pc : rxe_pool_cleanup+0x58/0x60 [ 295.553088][T10957] lr : rxe_pool_cleanup+0x58/0x60 [ 295.554018][T10957] sp : ffff800094ca6f40 [ 295.554723][T10957] x29: ffff800094ca6f40 x28: dfff800000000000 x27: ffff0000ec6d7a86 [ 295.556141][T10957] x26: dfff800000000000 x25: ffff0000eec8d108 x24: dfff800000000000 [ 295.557562][T10957] x23: 1fffe0001dd919f1 x22: ffff0000eec8cf88 x21: dfff800000000000 [ 295.558972][T10957] x20: ffff80008458778c x19: ffff0000eec8d720 x18: 00000000ffffffff [ 295.560387][T10957] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bf02b0 [ 295.561818][T10957] x14: 00000000868e5610 x13: 0000000000000001 x12: 0000000000000000 [ 295.563192][T10957] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 295.564624][T10957] x8 : ffff8000a0818000 x7 : 0000000000000000 x6 : 0000000000000000 [ 295.566076][T10957] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800084405700 [ 295.567523][T10957] x2 : 0000000000000002 x1 : ffff0000ef8e0000 x0 : 0000000000000001 [ 295.569028][T10957] Call trace: [ 295.569612][T10957] rxe_pool_cleanup+0x58/0x60 (P) [ 295.570493][T10957] rxe_dealloc+0x6c/0xd0 [ 295.571293][T10957] ib_dealloc_device+0x50/0x1e0 [ 295.572195][T10957] __ib_unregister_device+0x2bc/0x33c [ 295.573210][T10957] ib_unregister_device_and_put+0x5c/0x80 [ 295.574229][T10957] nldev_dellink+0x330/0x374 [ 295.575003][T10957] rdma_nl_rcv+0x4f0/0x814 [ 295.575751][T10957] netlink_unicast+0x600/0x7f8 [ 295.576567][T10957] netlink_sendmsg+0x648/0x948 [ 295.577404][T10957] __sock_sendmsg+0xc8/0x17c [ 295.578240][T10957] ____sys_sendmsg+0x3d0/0x6c8 [ 295.579112][T10957] ___sys_sendmsg+0x198/0x224 [ 295.579903][T10957] __sys_sendmsg+0x158/0x204 [ 295.580677][T10957] __arm64_sys_sendmsg+0x80/0x94 [ 295.581555][T10957] invoke_syscall+0x98/0x244 [ 295.582404][T10957] el0_svc_common+0xec/0x23c [ 295.583243][T10957] do_el0_svc+0x4c/0x5c [ 295.583953][T10957] el0_svc+0x64/0x260 [ 295.584660][T10957] el0t_64_sync_handler+0x48/0x148 [ 295.585574][T10957] el0t_64_sync+0x198/0x19c [ 295.586393][T10957] irq event stamp: 607074 [ 295.587154][T10957] hardirqs last enabled at (607073): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 295.588893][T10957] hardirqs last disabled at (607074): [] el1_brk64+0x20/0x54 [ 295.590453][T10957] softirqs last enabled at (607072): [] handle_softirqs+0xc28/0xd98 [ 295.592161][T10957] softirqs last disabled at (606335): [] __do_softirq+0x14/0x20 [ 295.593775][T10957] ---[ end trace 0000000000000000 ]--- [ 295.595226][T10957] ------------[ cut here ]------------ [ 295.595231][T10957] WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xa4/0xd4, CPU#0: syz.2.1732/10957 [ 295.597642][T10957] Modules linked in: [ 295.598219][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.2.1732 Tainted: G W L syzkaller #0 PREEMPT [ 295.599795][T10957] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 295.600573][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 295.602249][T10957] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 295.603555][T10957] pc : rdma_restrack_clean+0xa4/0xd4 [ 295.604415][T10957] lr : rdma_restrack_clean+0xa4/0xd4 [ 295.605294][T10957] sp : ffff800094ca6f30 [ 295.605992][T10957] x29: ffff800094ca6f30 x28: dfff800000000000 x27: ffff0000ec6d7a86 [ 295.607369][T10957] x26: dfff800000000000 x25: ffff0000cb895000 x24: ffff0000cb895048 [ 295.608722][T10957] x23: 0000000000000048 x22: 1fffe0001dd919da x21: dfff800000000000 [ 295.610122][T10957] x20: ffff0000cb895000 x19: ffff0000eec8ced0 x18: 00000000ffffffff [ 295.611521][T10957] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff800084bf02b0 [ 295.612885][T10957] x14: 00000000868e5610 x13: 0000000000000001 x12: 0000000000000000 [ 295.614264][T10957] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 295.615622][T10957] x8 : ffff8000a0818000 x7 : 0000000000000000 x6 : 0000000000000000 [ 295.617048][T10957] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800084403848 [ 295.618527][T10957] x2 : 0000000000000000 x1 : ffff0000ef8e0000 x0 : 0000000000000001 [ 295.620023][T10957] Call trace: [ 295.620628][T10957] rdma_restrack_clean+0xa4/0xd4 (P) [ 295.621598][T10957] ib_dealloc_device+0x14c/0x1e0 [ 295.622483][T10957] __ib_unregister_device+0x2bc/0x33c [ 295.623445][T10957] ib_unregister_device_and_put+0x5c/0x80 [ 295.624453][T10957] nldev_dellink+0x330/0x374 [ 295.625276][T10957] rdma_nl_rcv+0x4f0/0x814 [ 295.626047][T10957] netlink_unicast+0x600/0x7f8 [ 295.626902][T10957] netlink_sendmsg+0x648/0x948 [ 295.627773][T10957] __sock_sendmsg+0xc8/0x17c [ 295.628598][T10957] ____sys_sendmsg+0x3d0/0x6c8 [ 295.629428][T10957] ___sys_sendmsg+0x198/0x224 [ 295.630242][T10957] __sys_sendmsg+0x158/0x204 [ 295.631033][T10957] __arm64_sys_sendmsg+0x80/0x94 [ 295.631879][T10957] invoke_syscall+0x98/0x244 [ 295.632677][T10957] el0_svc_common+0xec/0x23c [ 295.633464][T10957] do_el0_svc+0x4c/0x5c [ 295.634173][T10957] el0_svc+0x64/0x260 [ 295.634839][T10957] el0t_64_sync_handler+0x48/0x148 [ 295.635720][T10957] el0t_64_sync+0x198/0x19c [ 295.636501][T10957] irq event stamp: 607188 [ 295.637222][T10957] hardirqs last enabled at (607187): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 295.639063][T10957] hardirqs last disabled at (607188): [] el1_brk64+0x20/0x54 [ 295.640589][T10957] softirqs last enabled at (607184): [] handle_softirqs+0xc28/0xd98 [ 295.642237][T10957] softirqs last disabled at (607077): [] __do_softirq+0x14/0x20 [ 295.643934][T10957] ---[ end trace 0000000000000000 ]--- [ 295.789029][T10957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.831964][T10332] ================================================================== [ 295.831980][T10332] BUG: KASAN: slab-use-after-free in ib_dealloc_pd_user+0x84/0x168 [ 295.832002][T10332] Read of size 8 at addr ffff0000eec8c1f8 by task kworker/u8:30/10332 [ 295.832013][T10332] [ 295.832019][T10332] CPU: 0 UID: 0 PID: 10332 Comm: kworker/u8:30 Tainted: G W L syzkaller #0 PREEMPT [ 295.832031][T10332] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 295.832034][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 295.832040][T10332] Workqueue: krdsd rds_ib_dev_free [ 295.832055][T10332] Call trace: [ 295.832058][T10332] show_stack+0x2c/0x3c (C) [ 295.832071][T10332] __dump_stack+0x30/0x40 [ 295.832082][T10332] dump_stack_lvl+0xd8/0x12c [ 295.832091][T10332] print_address_description+0xb0/0x238 [ 295.832100][T10332] print_report+0x68/0x84 [ 295.832107][T10332] kasan_report+0x8c/0xc4 [ 295.832117][T10332] __asan_report_load8_noabort+0x20/0x2c [ 295.832128][T10332] ib_dealloc_pd_user+0x84/0x168 [ 295.832135][T10332] rds_ib_dev_free+0xc0/0x27c [ 295.832143][T10332] process_scheduled_works+0x788/0x10b8 [ 295.832153][T10332] worker_thread+0x798/0xbd0 [ 295.832161][T10332] kthread+0x304/0x3d4 [ 295.832170][T10332] ret_from_fork+0x10/0x20 [ 295.832177][T10332] [ 295.832179][T10332] Allocated by task 6878: [ 295.832186][T10332] kasan_save_track+0x40/0x78 [ 295.832193][T10332] kasan_save_alloc_info+0x44/0x54 [ 295.832202][T10332] __kasan_kmalloc+0x9c/0xb4 [ 295.832209][T10332] __kmalloc_noprof+0x340/0x6b8 [ 295.832217][T10332] _ib_alloc_device+0x48/0x4c8 [ 295.832225][T10332] rxe_net_add+0x30/0x114 [ 295.832233][T10332] rxe_newlink+0x114/0x1c0 [ 295.832239][T10332] nldev_newlink+0x478/0x4f0 [ 295.832246][T10332] rdma_nl_rcv+0x4f0/0x814 [ 295.832253][T10332] netlink_unicast+0x600/0x7f8 [ 295.832261][T10332] netlink_sendmsg+0x648/0x948 [ 295.832268][T10332] __sock_sendmsg+0xc8/0x17c [ 295.832275][T10332] ____sys_sendmsg+0x3d0/0x6c8 [ 295.832282][T10332] ___sys_sendmsg+0x198/0x224 [ 295.832290][T10332] __sys_sendmsg+0x158/0x204 [ 295.832297][T10332] __arm64_sys_sendmsg+0x80/0x94 [ 295.832304][T10332] invoke_syscall+0x98/0x244 [ 295.832313][T10332] el0_svc_common+0xec/0x23c [ 295.832320][T10332] do_el0_svc+0x4c/0x5c [ 295.832328][T10332] el0_svc+0x64/0x260 [ 295.832337][T10332] el0t_64_sync_handler+0x48/0x148 [ 295.832346][T10332] el0t_64_sync+0x198/0x19c [ 295.832352][T10332] [ 295.832354][T10332] Freed by task 10949: [ 295.832357][T10332] kasan_save_track+0x40/0x78 [ 295.832363][T10332] kasan_save_free_info+0x58/0x70 [ 295.832371][T10332] __kasan_slab_free+0x74/0xa4 [ 295.832378][T10332] __rcu_free_sheaf_prepare+0x130/0x2ac [ 295.832385][T10332] rcu_free_sheaf+0x28/0xd8 [ 295.832392][T10332] rcu_core+0x598/0xf04 [ 295.832399][T10332] rcu_core_si+0x10/0x1c [ 295.832405][T10332] handle_softirqs+0x2ec/0xd98 [ 295.832411][T10332] __do_softirq+0x14/0x20 [ 295.832417][T10332] [ 295.832418][T10332] The buggy address belongs to the object at ffff0000eec8c000 [ 295.832418][T10332] which belongs to the cache kmalloc-8k of size 8192 [ 295.832424][T10332] The buggy address is located 504 bytes inside of [ 295.832424][T10332] freed 8192-byte region [ffff0000eec8c000, ffff0000eec8e000) [ 295.832431][T10332] [ 295.832433][T10332] The buggy address belongs to the physical page: [ 295.832437][T10332] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ec88 [ 295.832445][T10332] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 295.832451][T10332] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 295.832459][T10332] page_type: f5(slab) [ 295.832466][T10332] raw: 05ffc00000000040 ffff0000c0002280 dead000000000100 dead000000000122 [ 295.832472][T10332] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 295.832478][T10332] head: 05ffc00000000040 ffff0000c0002280 dead000000000100 dead000000000122 [ 295.832484][T10332] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 295.832490][T10332] head: 05ffc00000000003 fffffdffc3bb2201 00000000ffffffff 00000000ffffffff [ 295.832496][T10332] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 295.832499][T10332] page dumped because: kasan: bad access detected [ 295.832503][T10332] [ 295.832504][T10332] Memory state around the buggy address: [ 295.832508][T10332] ffff0000eec8c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.832513][T10332] ffff0000eec8c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.832517][T10332] >ffff0000eec8c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.832521][T10332] ^ [ 295.832525][T10332] ffff0000eec8c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.832529][T10332] ffff0000eec8c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.832533][T10332] ==================================================================