last executing test programs: 42.040972592s ago: executing program 2 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @local, 0xe8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140ba}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 41.832692681s ago: executing program 2 (id=91): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x50) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r1, r0, 0x0) 41.802149202s ago: executing program 2 (id=93): r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1008040, &(0x7f0000000a80)={[{@noblock_validity}, {@nojournal_checksum}, {@minixdf}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}, {@nomblk_io_submit}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5ca, &(0x7f0000000200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x0) fallocate(r1, 0x0, 0x2000, 0x8003) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 41.147418518s ago: executing program 2 (id=100): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000a0000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000a0000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 41.146502825s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000ac0)="$eJzs3M2PU1UbAPDntjPDy9c7o+IHiIKikWicYQZUlmA0caGJiS5wOXYGghTGMKMRQrS6wKUhcW9cmvAXuNKNUVcmbnVvSIhhA7q65rb3Dm2nrczQWsf+fknpOT23Pefh3NOec8+0AYys/dk/ScSOiPglIiYb2dYD9jfubt24VPnjxqVKEmn6xu9J/bibNy5VikOL520vMrXWx5stX7h4Zr5aXTyf52dWzr47s3zh4rOnz86fWjy1eG7u6NEjh2dfeH7uub7EmbXp5p4Pl/bufuWtK69VTlx5+4erSRF/Sxzv96W+ppduVi4ST/arln+JnU3pZGyIDWFdshMy667x+vifjHLc7rzJePmToTYOGKg0TdMt3YtrKfAflsSwWwAMR/45n0TUKtkauHk9PwquH28sgLK4b+W3RslYlPJjxtvWt/2UrbZO1P78IrtF2/UUAIBB+OZ4476Y+92ef5RaruIfy/eGpiLinoi4NyLui4hdEXF/RDwQEQ9GxENNz+m079OufZNk7fyndG1Dgd2h6xN5Ys38r5j9xVQ5z+2sxz+enDxdXTwUEf+PiIMxviXLz/ao49uXfv6sW9n+pvlfdsvqL+aCeTuujbVdoFuYX5nfaLztrn8csWessbfXGn+yuhOQ9ePuiNizb2N1nH76q73dyv4+/h76sM+UfhnxVGNvsxZt8Uc+909670/O/C+qi4dmirNirR9/uvx6U7Yy2ZS5q/j7IOv/bdG5/3NTSfN+7fL667j866dd1zR3eP5PND8nO/8nkjfr6aLgg/mVlfOzERPJq/njx/LHW+urHzd3+/gs/oMHOsVfqr/HFf8TD0dEdhI/EhGPRsS+vO2PRcTjEXGgR/zfv/jEOxuPf7Cy+BfW1f9dE8Xe9pqi8pnvvq6XFJ011SP+JDr0/5F66mD+SKf3v8nWUyR6tvT83ZzNAAAAsPmUImJHJKXp1XSpND3d+Hv5XbGtVF1aXnnm5NJ75xYa3xGYivFScaVrcvV6aNRm82X91XJEVj6X54vrpYfz68afl7fW89OVperCsIOHEbe9y/jP/FYeduuAgfN9LRhdGx3/aZp+1OemAP8wn/8wuox/GF0dxv/WtnyP3wgANrNOn/8W9jAazP9hdBn/MLqMfxhdxj+MpPyb8GN38gX/gSWy95/h1b7+RJoOqfaJ4ce+mojS0GqPYce+vkSS/5ZGOvC6il+W6ccL1l/ILgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDp/RUAAP//S+LZpQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) socket$kcm(0xa, 0x1, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, 0x0}, 0x20000000) (async) sendmsg$kcm(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000ac0)="$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") (async) 40.809318631s ago: executing program 1 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xc, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0xfff2) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x4}]}}}]}, 0x4c}}, 0x200088c2) 40.809035239s ago: executing program 1 (id=106): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}], [{@obj_type={'obj_type', 0x3d, '%'}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f0000000140)="d35e5f728d3bb4baf137a0119979b4dae0280c48a7fa95e9f0f71c3f3c6eef681432c6ed1fec6e691dd203f64ba2357fea1f41bbca381495e9547468b97d6397517dcb0d3c5d8e7523e9927c46721225b2eb8a21c48afffab3c28e15d7fb4de479773d0efa50f91d3e3dddf35a71a3d85e1250eb37c665a15548470c14518c98819109518f0ba70b94ef72ecd2fd162fdb4b5a2e3c09d00b5b4faf5909de6a1b44627c99e866bd8b5f759ad18229c56b85e2") mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x162) 40.79477301s ago: executing program 1 (id=107): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb, 0x2}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x1004040, &(0x7f0000000880), 0x5, 0x5a3, &(0x7f00000002c0)="$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") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) setsockopt(r2, 0x112, 0xe, &(0x7f0000000100)="00060000", 0x4) nanosleep(&(0x7f0000000200)={0x0, 0x5000000}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e060c00c9000101"], 0x9) nanosleep(&(0x7f0000000400)={0x0, 0x20000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000780)={0x0, 0x2000000, 0x0}) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)='(', 0x1, r7}, 0x68) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, r5, r6], 0x5}) write$binfmt_elf64(r3, &(0x7f0000000900)=ANY=[], 0x878) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) sendfile(r8, r8, 0x0, 0x400) 40.645020997s ago: executing program 2 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0xffff, 0xe}, {0x5, 0xd}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x43f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000a000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 39.999507862s ago: executing program 1 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000280)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x200000000000082f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x560, &(0x7f0000000340)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x84, 0x60000) ioctl$I2C_TIMEOUT(r7, 0x707, 0x8000000000000000) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000140)=0x48, &(0x7f00000001c0)=0x1) 38.165876163s ago: executing program 1 (id=129): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000100180000000000000000000000010000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f0000000080)=""/221}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_clone(0x41000000, &(0x7f0000000000)="461aee521b4344d1f7c349c909", 0xd, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)="9e13d9f0598fa675181ae59f221ba23a8ee465f01cd4b2fc4acb225ef1c2da1a0167018cb46be128fd1fd9b77cc2ffc341bf6d47578ec57d7ee929f2983a00cb67b2ea6ba2f6151ff6cb323238d890d054bb8259fc85dcd6f516435fb86a1492157cc862bb8f97c83f39fc21922bc958a7355a750c2616c06357ce540409ff350110be7df2ff971124e64ecf3a2fbd3e76f45af28b6b1009ee0a99107f3b2bbee621c989dd3bcd73eb6947db461680c1027488c48de3c21dc7788f3f306858e68736f0c727dd1fa837457b89ded824788e90ae650ea1749c007bb2fa2285971976b0c2883ea800c86543c8") r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000100180000000000000000000000010000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f0000000080)=""/221}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) syz_clone(0x41000000, &(0x7f0000000000)="461aee521b4344d1f7c349c909", 0xd, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)="9e13d9f0598fa675181ae59f221ba23a8ee465f01cd4b2fc4acb225ef1c2da1a0167018cb46be128fd1fd9b77cc2ffc341bf6d47578ec57d7ee929f2983a00cb67b2ea6ba2f6151ff6cb323238d890d054bb8259fc85dcd6f516435fb86a1492157cc862bb8f97c83f39fc21922bc958a7355a750c2616c06357ce540409ff350110be7df2ff971124e64ecf3a2fbd3e76f45af28b6b1009ee0a99107f3b2bbee621c989dd3bcd73eb6947db461680c1027488c48de3c21dc7788f3f306858e68736f0c727dd1fa837457b89ded824788e90ae650ea1749c007bb2fa2285971976b0c2883ea800c86543c8") (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) (async) write(r1, &(0x7f00000003c0)='1', 0x1) (async) 37.713901403s ago: executing program 1 (id=135): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791a4800000000007a0028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x2, 0xff, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b2000001800010600000000000000001c140000fe00000100000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r11, @ANYRESDEC=r2, @ANYRES16=r0], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r12, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x80, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 37.648729949s ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x2200000, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r0, 0x707, 0x80001fd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0x400006, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) chdir(&(0x7f00000003c0)='./bus\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 37.518767058s ago: executing program 3 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x47) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000000c0), 0x5005) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3}, 0x50) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa0500070084000000060004404620"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) (async) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c000ca164d34927ea85c14ed1f656fa1b12abf20cce2a1a9a06293eccf1cc9fefe64e990c38b8be896d9744c60eb4f6a3ef91c6d78bdb445797dcaebf41594f9a79281af6d7b050761b55842dc84ccd439f3af14c59a9e03064dad46f825cbcd28a1fc4d180789052a032d63fdb8e90d52139d720f7435286a0db6aa92400c4c7e488e85ab288b8e2254b2ae4bc1b91a779cd82bdb86dc26299399f6dba1c61450bb772f68bf19eb1db2c5dc3f9c4478d393e113b0439870d6da8c544584f2d29427a844094600472c5bcf3da5f36f8d551cc67dea119c2d39ab30fb4e7e149e8697cf6fb60055d9635e9"]) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf17}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x5}, {0x6}, {0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f, 0x5f, 0x61]}}, 0x0, 0x46, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) (async) madvise(&(0x7f0000289000/0x4000)=nil, 0x4000, 0x64) (async) accept(r7, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) (async) fspick(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) 36.561359196s ago: executing program 3 (id=146): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x0) setns(0xc9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x0) (async) 36.539965547s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_pipe\x00', 0x800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 36.340716191s ago: executing program 3 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x90, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x90}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x90, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x90}}, 0x0) (async) 35.903498464s ago: executing program 3 (id=156): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@auto_da_alloc}, {@noblock_validity}, {@nouid32}]}, 0x1, 0x587, &(0x7f00000045c0)="$eJzs3V1rHFUcB+D/mWzSl7QmFUFrEQMFW1CTJq0oIthivfPCl4JXgjFJS+m2DU0EWyttoX4D/QCCd96Il0WkqCDeeif4AUQs0ubGu8hsZtJtu5vmZdOpneeBbebMyXDOZPn1zJydmQ2gtkbyf7KI3RExmyKG2uoaUVSOLP3erZsXpxZuXpxKsbj43j8pUrGu/P1U/BwsNt4aEb/9mOLxvnvbnTt/4dRkszlzriiPzZ+eHZs7f+HFk6cnT8ycmDkzMf7y+EuHDk4cOtCT/dwZET+PHm1cPf7Gnm+nvt516ftvrqU4HDuK+vb96JWRGFn+m7TL/66v9LqxivQV+9P+FqdGhR1iTcr3rz8inoyh6Ivbb95QfP5OpZ0DNtViilgEairJP9RUeRyQn/+Wr2qPSIAH5caRpQmAW2lpbm9hOf+NpbnB2NqaG9i+kKJ9WidFRC9m5vI2Zp9LQ/krNmkeDujs8pWIeKrT+J9a2RxuzeLn+c/uyH8WEW8XP/P1766z/ZG7yvIPD85G8v9hW/4/Wmf78g8AAAAAAAC9c/1IRLzQ6fO/bPn6n+hw/c9gRBzuQfv3//wvu9SDZoAObhyJeC0iymv/FtryXxjuK0o7W9cD9KfjJ5szByLisYjYH/1b8vL4Cm2M7Pm1v2td2/V/+Stvv7wWsOjHX40td24zPTk/uZF9BpbcuBLxdKNT/tPy+J/uHP9/eaYY+2dX2cbi0dd/6lZ3//wDm2Xxq4h9Hcf/20+uSCs/n2OsdTwwVh4V3OvTD6591619+Yfq5OP/9pXzP5zan9czt/Y2Pvv7jw3kv/Px/0A61nrkzECx7pPJ+flz4xED6a1710+svc/wKCrzUOYlz//+vZ3P/7sc/7dsi4jLq2zz2A9vXu1WZ/yH6uT5n17T+L/2hb3vf/lvt/ZXN/4fao3p+4s15v9gZasNaNX9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/oywidkTKRpeXs2x0NGIwIp6I7Vnz7Nz888fPfnxmOq9rff9/Vn7T79BSOZXf/z/cVp64q3wwInZFxBd921rl0amzzemqdx4AAAAAAAAAAAAAAAAAAAAeEoNd7v/P/dlXde+ATdeougNAZeQf6kv+ob7kH+pL/qG+5B/qS/6hvuQf6kv+ob7kHwAAAAAAHim7nr3+e4qIy69ua71yA0Vdf6U9Azbb4ao7AFTGI36gvlz6A/XlHB9I96nfuu4tAQAAAAAAAAAAAIBe2bfb/f9QV1nVHQAq0/3+f08GgEed+/+hvpzjA+7/BwAAAAAAAAAAAICH39z5C6cmm82Zc+td2LKxzS1YqM9CpB4k7gEtVP0/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPovAAD//0C19y8=") ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0xff, [0x1f, 0x7363, 0xee37, 0xfffffffffffffffc, 0x3, 0x1]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 35.833707144s ago: executing program 32 (id=156): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@auto_da_alloc}, {@noblock_validity}, {@nouid32}]}, 0x1, 0x587, &(0x7f00000045c0)="$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") ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0xff, [0x1f, 0x7363, 0xee37, 0xfffffffffffffffc, 0x3, 0x1]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 29.981892786s ago: executing program 5 (id=193): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pv6bR3+kU7t3J/v2TouefM5Zzb6dNz5vScOwFU1mD6Ty1if0RMJxH9yfxiWWdkhYMLz3vw50dn00cS9fprvyeRZHn585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTV7Hh49tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb0g7/TNd9/v/2TszW+++isZ+faXsSROxsvZE5dex1YZjMHG9yRZWdR3YqsrK0lH9nOy9CVOOoue2dW+RrFu+euXvjpPRH90xMMXrz8+fqXUxgHbqp5E1IGKSsQ/VFQ+Dsjf2y9/H1wrZVQCtMP9UwsTACvjv3NhbjB6GnMDux8ksXRaJ4mIzc3MNdsTEXfvjN08d2fsZmzTPBxQbP5GRDxZFP9JI/4HoicGGvFfa4r/dFxwJvua5r+6yfqXTxWLf2ifhfjvWTX+o0X8v7Uk/t/eZP2DD5Pv9DbFf+9mLwkAAAAAAAAq6/apiHi+6O//tcX1P1Gw/qcvIk5uQf2Dy45X/v2/dm8LqgEK3D8V8VLh+t9avvp3oCNL/aexHqArOXdhavJIRPw3Ig5F1670eGSVOg5/uu/LVmWD2fq//JHWfzdbC5i1417nruZzJsZnxx/1uoGI+zcinipc/5ss9v9JQf+f/j6YXmcd+569daZV2drxD2yX+tcRBwv7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtV/2bjv/AWE8CGpP3/7tXjfyBZer+emY3XcXSus96qbLPj/+7k9cYtZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeR3k85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7/f/f92qo9xv9QnjT+JzbU/288MXpr4PtW9a+v/z/W6OsPZTnm/2DBF3mYdjfnF4RjZ1FRu9sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+DWkTsiaQ2tJiu1YaGIvoi4n+xuzZ1ZWb2uXNX3rs8kZY1Pv+/ln/Sb//CcZJ//v/AkuPRZcdHI2JvRHze0ds4Hjp7ZWqi7IsHAAAAAAAAAAAAAAAAAACAHaKvxf7/1G8dZbcO2HadZTcAKE1B/P9URjuA9tP/Q3WJf6gu8Q/VJf6husQ/VJf4h+oS/1Bd4h8AAAAAAB4rew/c/jmJiPkXexuPVHdW1lVqy4DtViu7AUBp3OIHqsvSH6gu7/GBZI3ynpYnrXXmaqbPPsLJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT38Kdkp7/uWJfCn8TmnPskS+1299Z5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//+Ekkyg==") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x40) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, 0x0) 29.829137241s ago: executing program 5 (id=194): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'vfat\x00'}}, 0x26) sendfile(r0, r0, 0x0, 0x7a680000) 29.750030561s ago: executing program 5 (id=195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x9, 0x8, 0xd, 0x17b1, 0x7, ';\x00'}) (async) write(r0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000001500)='pagemap\x00') read$FUSE(r2, 0x0, 0x0) (async) write(r2, &(0x7f0000000000)="52ebd2aa10f71a59778b7a2be52ec1b80b8610a6288d79f0ec1a5c33519e9b30daa4f0c913aff916c50a847fd8b02a3140a0617a73a79f0119f2932689d6655f3aade0b12c7c1e6e72dbebdf2b17748eb8bc233a190dc2bb444dcc9d41d3ad421294766c7e20aa9f3755bb4d677cb148a5891a767f5efca0b61f32b69155b6182c610a177da00fab6b28f1abb4a9b0bd434da5e3f73739237c04d1779868e70693faa57278ccdbb1487c126dc2ef133831a8e0b7d0ae5a1f0f1893ee", 0xbc) (async) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x18) 29.580657431s ago: executing program 5 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200004, &(0x7f0000000000), 0x1, 0x79e, &(0x7f0000000f80)="$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") mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='bdev\x00', 0x2200892, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) ptrace(0x10, r2) ptrace(0x11, r2) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001880)={@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {&(0x7f0000001740)=""/228, 0xe4}, &(0x7f0000001840), 0x72}, 0xa0) pread64(r3, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x64, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x33, 0x7, 0x1, 0x0, "903e547bc7f9547187d7e6712e9e8f4597f79cdb2588d05511c112b2f20f0e8afb9026f370f349ee34f08b2165d57d"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000884}, 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1000000100003}, 0x2f) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd700000000000ffffffff000000000000000000000000000000100000000000000000000000000000ffffe0000002ac1414bb000000000000000000000000ff020000000000000000000000000001"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001a80)={0x0, r0, 0x3, 0x0, 0x1, 0x2}) 29.353362599s ago: executing program 5 (id=200): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x592, &(0x7f00000003c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e4ffffffffffffff000000000900000064222cbbc01490595f1a6b4516dc932c5b9b966f0efe7b4b444ff20407988e771f832b9d7b62340696002d237af5bb87ff66ee4b7b11db5a989edf1b0d6d9b226d46a501788b1786a100aec0dc0e505c04092c3bd5835e7bec27181d7220b9b2621ead2c1fdc356b48193317c7034fe5de99d601c4fd11f57145615893feb68028b85bbaef6c52117bb7255e54afaf6b5bfa00000000d7c05516de574ab3d6007185b62e1a066d3ff6d955f148bda3f25af9b025ad5fba91f7ee691cf9e7fabd6ba656acddc931b8c10f15e1e71b5e6125888a3cee5269b46ab969073d71d145c0ae8a0b01c2056156463558b5e4a2bf30d55632da05192ae14b"], 0x48) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000f7ff0080811080000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r2 = inotify_init1(0x80800) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x840005b9) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000001040)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)={0x424, 0x3f3, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x2, 0x19, [0x3, 0x8001, 0x6, 0x7f, 0x6, 0x0, 0xcd2b, 0x9, 0x3, 0xc, 0xdf, 0x5, 0x4, 0x9, 0x2, 0x7b, 0xa7d2, 0x9, 0xb, 0xa, 0x9, 0x80, 0x2, 0x2e9, 0xa8, 0x8, 0x1000, 0x8, 0x7e, 0x3, 0x3, 0x3, 0x7, 0x9, 0x0, 0xc, 0x2, 0x6, 0x6, 0xfffffff9, 0x4, 0xfffffff7, 0x3, 0x6, 0x8001, 0x2, 0x9, 0x6, 0x2, 0xca, 0x9, 0x3, 0x200001, 0xfa, 0x6, 0x6, 0x57a, 0x9, 0x4, 0xa, 0x4, 0x5, 0x62, 0x8], [0x70, 0x9, 0x7, 0x28000000, 0x7bf, 0x0, 0x3, 0x1ff, 0x200, 0x1, 0x0, 0x4000000, 0x200, 0x5, 0x6, 0x80000001, 0x4, 0x7af5, 0x4, 0x0, 0x70000, 0x9, 0x4, 0x800, 0x2, 0x8, 0x8, 0x54a, 0xfff, 0x9, 0xec97, 0x8, 0xfffffff9, 0x200, 0x6, 0x5, 0x0, 0x72, 0x7ff, 0x4, 0xff, 0x400, 0x5, 0x7, 0x5, 0x0, 0x9, 0x1000, 0xa, 0x3, 0x7, 0x3, 0x5, 0x8, 0x8, 0x4, 0x6, 0x5, 0x1, 0x0, 0x9, 0x0, 0x5, 0x5], [0xc8, 0x1, 0x7fffffff, 0x1, 0x3, 0xfff, 0x9, 0x338b, 0x7f, 0x7, 0x1, 0x1, 0x7, 0xc47, 0x5cd, 0x7, 0x3, 0x1000, 0xffffffff, 0x5, 0x7fffffff, 0x4, 0x3, 0x5, 0x4, 0x9, 0x4000, 0x8, 0x5, 0x2, 0x1, 0x7f70, 0x2, 0x4, 0x7d, 0x2, 0x10000, 0x7fff, 0x9, 0x80000000, 0x80000001, 0x8, 0x3, 0x2, 0x3, 0x9d, 0x3, 0x3, 0x8, 0x6af44f96, 0x6, 0x7, 0xf, 0x6, 0x401, 0x7, 0x1, 0x4e8, 0x0, 0x0, 0x3, 0x2, 0x8000, 0x7], [0x7, 0x2, 0x1, 0xffffffc6, 0x6, 0xc0000000, 0x7040, 0x8, 0x4, 0x9, 0x3, 0xffff8001, 0x9, 0x3, 0x3, 0x8, 0x0, 0xc, 0x7, 0x5, 0x1, 0x4, 0xe, 0xfffffffc, 0x6, 0x8, 0xc4, 0x6, 0x1ff, 0x7, 0x2, 0x1, 0x2, 0x24fe2da6, 0x7d, 0xa7, 0xff, 0x800, 0x8b, 0x5, 0x33, 0x0, 0x6, 0x5, 0x8001, 0x2, 0x3, 0xe, 0x8, 0x400, 0x6d, 0x5, 0x7c, 0x3, 0x6, 0x3cf, 0x8, 0xdee3, 0x9, 0x4, 0x80000001, 0xd, 0x9, 0x5], 0x3, ['/+\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4884}, 0x800) 28.637070887s ago: executing program 5 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) futex_waitv(&(0x7f0000001ac0)=[{0x0, 0x0, 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x8}]}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000060c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x884) write$tun(r0, &(0x7f0000000700)={@void, @val={0x2, 0x1, 0x8, 0x8, 0xc, 0x400}, @ipv6=@generic={0x3, 0x6, "529c4e", 0x10a0, 0x87, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x73, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}, @fragment={0x29, 0x0, 0xc, 0x1, 0x0, 0x8, 0x64}, @routing={0x0, 0x4, 0x2, 0x2, 0x0, [@loopback, @private1]}, @routing={0x89, 0x4, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x26}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x8, 0x20, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, @fragment={0x87, 0x0, 0x80, 0x1, 0x0, 0x3, 0x66}], "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"}}}, 0x10d2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) 28.635853516s ago: executing program 33 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) futex_waitv(&(0x7f0000001ac0)=[{0x0, 0x0, 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x8}]}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000060c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x884) write$tun(r0, &(0x7f0000000700)={@void, @val={0x2, 0x1, 0x8, 0x8, 0xc, 0x400}, @ipv6=@generic={0x3, 0x6, "529c4e", 0x10a0, 0x87, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x73, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}, @fragment={0x29, 0x0, 0xc, 0x1, 0x0, 0x8, 0x64}, @routing={0x0, 0x4, 0x2, 0x2, 0x0, [@loopback, @private1]}, @routing={0x89, 0x4, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x26}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x8, 0x20, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, @fragment={0x87, 0x0, 0x80, 0x1, 0x0, 0x3, 0x66}], "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"}}}, 0x10d2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) 25.145717312s ago: executing program 34 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0xffff, 0xe}, {0x5, 0xd}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x43f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000a000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.591089097s ago: executing program 35 (id=135): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791a4800000000007a0028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x2, 0xff, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b2000001800010600000000000000001c140000fe00000100000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r11, @ANYRESDEC=r2, @ANYRES16=r0], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r12, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x80, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 17.84229566s ago: executing program 7 (id=296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x43) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r1, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x2d, 0x7, 0xff}) 17.620889086s ago: executing program 7 (id=300): syz_clone(0x8000, &(0x7f0000000000)="3deeefc7d6805bd588efa7f78713e466eb2911083048b758f17d0e27b7", 0x1d, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="eeb2c8d7c4463db9f6668074d02dbec24ec6e670ea8f201ba4563eab54ad9ee96d2b18e416256bf4a60ff788619182a3bc9cd8318dd6a5cfbec6e13af10dda4b9a678b81666e24ec426e7cb169cf949ae95d720fa4e490435d5b3953edcdff0a3b86e8d22fcf019b49f215b28075d99f89a39194546a369243849af1b7b8e7d8fe3c71cd69dd114917c430fafe9af491ff29a7d9b509820402475e2753941c6f211766d668ca4d232699bb73519dfabf226f46a8bed262a14b2cea58138543ec0b3b49d512e822") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 17.385145947s ago: executing program 7 (id=306): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x4418, 0x20, 0x3, 0x58}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x80, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0xfffffffb}}, './file0\x00'}) mknodat(r5, &(0x7f00000000c0)='./file0\x00', 0x200, 0x6) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper], 0x0, 0x0, 0x0}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0x6) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 17.319186769s ago: executing program 7 (id=308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff04000000000088a8000081"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090000000000000001763d866b011800000000001800000001000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x9, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2e4e}], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x49, &(0x7f0000000480)=""/73, 0x0, 0x6, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r0, r0, r0, r6, r0, r0, r0, r0], &(0x7f0000000700)=[{0x3, 0x4, 0x6, 0xb}, {0x1, 0x1, 0x3, 0xb}, {0xb, 0x3, 0xd}, {0x0, 0x5, 0xc, 0x4}, {0x2, 0x2, 0xd}], 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r8, &(0x7f0000000000), &(0x7f0000000600)=""/203}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) 15.174566015s ago: executing program 7 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20008000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) 14.368347568s ago: executing program 7 (id=343): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x1c) 14.342239337s ago: executing program 36 (id=343): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, 0x0) fcntl$setsig(r0, 0xa, 0x1c) 5.667986931s ago: executing program 9 (id=470): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000040), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000001140)={'sit0\x00', &(0x7f00000010c0)={@local, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@multicast1}, {@multicast2}, {@private}, {@dev}, {@private}]}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)={0x20, r2, 0x9, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0xffffffffffffffff) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000040), 0x0}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000001140)={'sit0\x00', &(0x7f00000010c0)={@local, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@multicast1}, {@multicast2}, {@private}, {@dev}, {@private}]}}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)={0x20, r2, 0x9, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x200000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0xffffffffffffffff) (async) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") (async) 5.495023307s ago: executing program 9 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000104)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000440)='\x00\x00\x00\x00', &(0x7f0000000480)=@udp=r2}, 0x20) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r8}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x94b4, 0x8, 0x0, 0x3dd}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd607, 0x40, 0x2, 0x10, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0b, 0x80, 0x2, 0x1dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x687e, 0x1, 0x2, 0x9e}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc31d, 0x8410, 0x0, 0x73}}], 0x4, &(0x7f0000001bc0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x3, 0x9e8, 0x0, &(0x7f0000000bc0)=@buf_512="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"}}, &(0x7f0000001c40)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r11 = dup(r10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r11, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, [0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x1, 0x5, 0x3, 0x7, 0x0, 0x9, 0x8001, 0x6, 0x100000000000000]}, &(0x7f0000000540)=0x100) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r15 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x1}) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, r14, &(0x7f0000001c80)=@IORING_OP_SHUTDOWN={0x22, 0x40, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r16}}) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r17, 0x0, 0x40, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/62, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r17, 0x4) 5.429446221s ago: executing program 9 (id=475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x26000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) 5.353155076s ago: executing program 9 (id=476): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}]}}]}, 0x38}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xc, 0x5, 0xe, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x1, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x2, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfffe, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r3}, 0x18) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ff5cb40d01000000000000000000008500000036000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.24916218s ago: executing program 0 (id=493): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) write(r0, &(0x7f00000000c0)="240000001e005f8000400000000000000a000000040000000000080008000100000000ff", 0x24) 3.248357523s ago: executing program 0 (id=494): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) setns(0xc9, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) (async) socket(0x2b, 0x80801, 0x1) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) io_setup(0x482, &(0x7f0000000600)=0x0) (rerun: 64) io_submit(r3, 0x3, &(0x7f0000003180)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x648, r1, &(0x7f0000000500)="da4fe65a63243ed11d891b8f420c019cd5b1e991776b61916639fd44d61106cc1a67340610d391c3091e7ded9307bc97e24830d70fdb3766d272a84871b71e625596ecfa815396637899eba74bd9581817d7fd4c2d41e7b62807a8c0a22549b8cf288d93eb74a0d53c5f5243da0158202ec6c6de17cfb7e166ef587174abdd7fbfbec65b9871594fad549119ffaf64a8ef970602309ca580fa2b2945d40176489c85a9a55cf47fe0c9b1aeb9b161b32b9a99500055ae6505753a95d8b1dfb7aafcfea5913ed14a74d8436d330906152bb895e2825af33b12e819", 0xda, 0x7781, 0x0, 0x3}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000001e40)="cc6c3ab74b667b9a3976b0ba6a6d9b0d07ae3c59be7892b36189609b58f2266b4af745245b18c9238a2116a914b5bf9f6afef0b2c8d9f24fe1993963716759e5580897562b1aaec9cbccec87c83d34fb0e26224b3770b997c2755dffb1da5287a56a9650f809284082197484dd9960375fc045aa0de8f979df8448d15b5772c4a904104c815fc8f2d6446e642b97e2b1eecdd88bddbfe7d9c495b91bf2d2ac5512d0536fdcae964479d32727dd92f65ec6236281d163620bd15f12305bdd07f0090666ae77fc1f8c2d5b5d8bb113182e09ffb6a77b1a382a4af8624ba9221cb35dae96041d3aa794400fd8a79639fa2b61ad4e208910f94c23662d09787a8d1c0bb41866f3f1725635d46c56fcdd3809d32c962bcd538693a6b93c11f622bcd26bb7e11cfb8bb586d428a9a6ee6c5a004699dd9f8880579a40133ca5eb21b75c741ce7812a343b83b61a977d3a836d26ffbf3c9d66feab72d3e949d91bcffacbdd5756f95b13a71f69351da67069f8b5dc3c5791d14ba08bb91b051ccfb7f2794e36bd91d84ed0b0a2e72c097380a02a93d192a437f5009e2f3597b23e2cef02dfb593b6a3ac76c940b3ed2a909daf2b14d196af074e07e6f2ce6440268cf69e4d5e2a64b26d09e205fc8957045c534f8c8fb00c0a6c7bff55de0a163c12c643c9a350b7fc297f3d9f858d3bfd88d9c7af5c532843ef851c6c847d0cb19d4e26e3f78fd07a7c4c0c343c5079508da7bf0a978e7abfa8415bd1f25d85aab9955929e35a5b078af753c0f36f4ffe2d6c17eb30f9a172ee8500cc47ba227bbe1f76f2f96ec37fdab1acc5e5e6b7fe14d22a48ae88694655279d1b1ff25974669639933a778804e298e5e883a4b447b6dd017a1ab01572edc709a9cad0769896d443ac2160b2a99a6f2aadcfc41ad28f565c773ee9866aca9eb14adb4a9e70cd65f9332a28bdbfe6becb6b1bbd5fef7327fe290201cb275c44393f9eb39f05e3245596aa218fb92f8f89ff675242d987c3555f9208374dace6e8664ecee4af7720fd539ddc316bd35f5144c34335ae1ec3b411a12f2d76e40343d358a17f0da9deec9702cb30d6d933feef93ac5a9ea8fc154a45786134dc871d6b476cab56587db1c670460676de356eb72e7d0e99c3e79f59df8ad67540b5414c233e18721ae0cac5823516dc1a82c610a4ef515c75ea8123401af7d47826d512f2ee5f318c31dede61147b5ab9ab5c728875ee37ac706a65296544db8b753e9e25959ad6048848b95c36aca028749b315270bee2f3971add8ac1e9320035af3dea75b03c89ebca795ec013baa64d55cce1588521ddf465b96fc88fbc6b5891b5b5f5d82eea3e055580fb5cdfcf7cae6e5c452308fe980091ed3cf3db59bb48a5058322f9cb01128c1c24e0861e5c89cf9257426550a2b3cfe64213266c718e87db7681629d21a369a558d2daedad43f7c183311dbdd5f2be2eb2d37eddc026cc53d4d3e79547497474aa2bce3dbf8d1af59f7108a9a70a41767c5072f2de8a4dc145ba205f06b043a99786fff57e54c6d95e3ca14ce28f2618aa78066136ef4a8db1a1eeab9bce78b311947421845a11636b3fecd84c3b756ddbd4249c157c4ecf0e20a7cc06994dc0846dcfd2de36320d7493c7431b7378b3fea99a262840e3ec75eb7d026989144c4e40c3e4adfa9523a174c50eb4347801c80768e1446974bf3bcdebb717879f30f8cc715450411459693d8f0cecb81f06956e49a6d825783fd2ddbadd414422f29fe58d4a8369186a2055b24f28785175a28eaa25cfa7641a30c80fcb49d5def8a301fae537ddaa453b66f58a9c4aa56a70802f1e27ece2aa60891442126b9ddfbe6c020d67c08e1f96ae5baaeaa6dc7cabf8d8b52625dbe8da4ee829a7faa81da8e823d144234e90f6f3d9e413175272d60d6a033951ad68596ce57f397a92f24881523a602583f7e84f4aebc1e613f1144671fc3ff0a27e0ec1976a8a12acbc7352b3590bccaaccdea7e38f6b5f79d896faad84142a597025e7ada80de1f5aecadac31dec39e5d33dd16167848dc92f4422b9e9b9bfed8382d200f6ec93958d7c23c1143eb6f2eaad727a5c227db00474d357e793ee67a9f340421855a51556b23696bd420977e9feb5d151f81fcfe3dbd2e6c3f9c1538e1a5cdf9d1aa2d712895d35f77a9c89bd9f52a604300245a6875f6c5376ec92a01e6a50338ff1caa1c6504fabcd964927ce6887ac43a458d9d299c5be560cc511428f7a5cbd77c2005c3216343ef5b8332b3f9e8add77e0ea31ce559560ccffc4125891fa877dbcab45b0fb1847311231997629ba71f7a845c5c75e12602d7957cad0e49135355abe1de384308959e641ef176b3e74cb89290ce64491e4588def87ff07ea40ae08105e96ef2cd9db04b7acc634903733faa026d03cf90c37c796742c7cfd36fd40dbc3b8443e44cb2359c26fab4c3162007062a1bfd7908c86010a553e80f56f3e357244a6361ec5fbdc3dbb835e8bce5813ff4c5cbffd25f5edd57bb73adb0c6b1d249eb694be8ee5f403e06b93d193a3a019f13f7961ee5bc48a8b09bd8bcf323d73f9b4bc958b46fbddad763cecaff75f0f10f727d045d51c058845c8f16596f8bf60e349276f77e567f4dea3d50eed658f0657e6dca210e9fb3a0be85fbb6f84ec2bb38d720b113a2a07e22d442ce82d2b74ce220529dc73baaeb83c260fd766b1c8d5c6d2ee4c0f05257acf3711b106b7f598aa566442c08fd74013391de9311230b889b532e983e260e31a029321de1ec99a287e87435d2492466d0aca264321790a9c1e8f2fafe5be173de349ef552135b4832fe649311b5ad9365fde1e74c315facaa33b5965a8eee5aadf6e47d52f20c8ba61773621c3eb63903f817c22eec26a49f8e2f833be36e33bc7a53baf40de886f54ab1268c704d65826672020c3db057d3053d8083604e72b3b3cd4a710cae148abfc35393c1fc5cbe20105aa95a6cd3931482ed3d1d6da3de8c14972caa623dd0a7bfd92424692f845ad2076c3c5fed1826560af3ba13f3beaa462f7e4587f2a7a05ab2fa47a3b721f0ecdae7e7b209bb84e50aadb415bfce07ee9a90076862cd398008e9e7f823746fa120d38ce2ad7a00f976d002e621d8b1a071a0067c51855b4f7fcdc745b6a98bf3f678e19e1e15a91b9dcd44d4db865b30feb0b808b6bc997e7f97fca504c723d080c39a5663ddd1527394987984e01e8072b5a07a7de23312ae064b0d82659e87ea66c1f4ca295652fe3e8f77b9bc43a22a2f32abb7681c0796d5f3a3319390880ff68841ccc3b7705d5d7735108ba26d883c182b29609b754e35e7585dc9b797246ebb601ff0ea7d873f4bf7e51993b1505f7f265cb5f2635034f8910b54a53de6d11803ae26cf0700172add9638be94d3a68023f5fc0dd29ea3a455fca0b1de1d5f1991514b6c00089dd1bb72721166eddbf75a2f0e18e6a5633200a4c617777a80ae3c0ae9b4a7e67837d2357463360a2148fb4067ab0f893a80b16c2d9fa9ef346b4f4382466ef2204bea19f9680ed6adc5d3ce60b3604738b8d8a73c73c1ac0b3e0465e5916a6ec1ffa9a885e2343c002d24fbda220d6b711899bd26bea1a195b12905c110db40d4147cbdab97ac79c6f0648ca29d8c353762e658565ea7d441bfdc7da05b06f5f2c77781663285ea1351d084cb384a9212fb1a9b0e6d99a9b98bc4d56d1631cfdd1431f654ae34fa266b471627745c89c5e5850bdd3155d03c7613b5eae575af43a33c5d85b86031f4c99f08e8e7e5837054805ffcbac0a10156d7f6fb399e660ef21719b07e0c5f2a0d3e1c011ecf93da9a3e6992927c104838dafd43910613c2c0e5ef20daaea414f2ec0cb2999dcc0ae1575680466aa23671361376cda603434e74701663bf2824cc6de6e3dcf96949c3f31c0ae642f6be6fcf9f4355ce1dfb5e6896af2b0e61a373a0d19f65aa5456ca132e18270317c8e2ca9f0cc398ed6e673a726ec73051a80212be611080a91819cb2639af8e256b651e8a25ce3b597a1c3e6ca3975d689c4a7689171eda9ef297cc3ea546c3497479c5ae661dbbef2a8c8ffab99ed05f5a23f9b7187fc4380adaa69784dc989bbc1b35606c8a628b194d9f315f7f6b8512e83d7bc1e27c5b92e6d4dfee0db866ca468662b0693542fab5650c026a32fcc93c8048926087c44d574fe0c157927b0a9a1d3f068ea5feefd27f580d43f2db8f6e9590efa6e14b1c53dc4a946ec18fbc28a102cbb9a9a4e6d8778015151a01225a673221596c59a7994b2531f4811e41c62da952e3e5973af546753d71d41eee088ecdb829fb21500bf33eae26959f0fdf7e9a86474c128c28ff97815e213460b433323a1c4cc37e2fd3581218b664bce74594f4d012a0e50233c49e38763beb3f238f4d9605640242b37ae07533589690b05c2a718d9c9eac404210e982c37699659fc063892cf7c449b6b95b3066107339cac7f3c0a85c8788523f31466f9c1097e80de8cfa9fdff95f59ff753ad34ef55ddd6c8e86f130a784b1263f7dbb89acb51ab0afb583e05407369ac03ec888e01ed5ec42054e88f5d949ef641b8e641a044a353086bd464ee5c8953242f4193248076655624ee48b151f2f4a0b6595b2199eab13d1a097728743ae5c62b680a41626bbfcf6b4bcea30ba33e43bb1b7fd22ec82287b021796ed917a9821c57b8f5c26ebe4dbdf235fb24195cdaba91fbec2134240346f3d38f8fedfbf067a596d7aa0fe01f8011f29fe9cbd130eb311ade3971fe395c74e81e3eaad12f249baade76d50ba400c26ae96295fed6d6cc47725fb1c4d5d466b1da587924014bb6413872536950e7843236a87de9bcd8782331aaeb589cd8c217adc1f1cd66b1c4baaacda6394249b62c6c498ced5feff7bb787cfca167eb06ef491d81d5bd7c457e49317f56ea15e4ce000a1249fb5e1082452a5d130c3b3f8f26e2712791fdd41bb20cdf15ee21a973a63ddbe4d837078f1ef662f2b0e91bc3189f6fab5b6b0cefcde1f32ff427df7e833ade7de28f57f842d3c2e3841cc28bbf745335a94e4538aee8bd6e117792a0c16c1d0a85018aed49e57940095a11ce708f92daec86d332fea7daddd8fa2f7b63a4a5080d12b21cc8f9036c39b7296d17c1ee5cef72a15ec4212d57857451bb5d4ba08ef01d3d2a7886a0d03cf40cc5a997993b9de6b64ae20896fde7520d66495ba6aa58620fe973728ea03ccf17679a58b1245e79cfcdc8367afe0971daf5dc3bfa67f941f0f839e853abad449c69974cbeb045f680a80792fe7a4df69757315a0704a92415bb1e1994f873e1ea2e74c96542a01bd14a4d0d1e1dcb58b2c7d15623c7973e1e7bf3cff59ebfdc114f6936252f821d266d5ce5bf5b61d3f3840e2af3577703f5d83168ecee78323d2fe1fcd6d25a6b0d69e591a7f3487c9c20204e7aa4fe8f9fe58d523bc5c9f5dc70fd4acf3129c694af6dc04acf74e7a2c3106374339135e204cce96917f7d27147efae8a6b23651d037f24b8c2d77585cc68bb0022080af2838d8c53a517b6edc08474f5229b57d632fcd744fe9e2f3a07e9b2e463e62fd2926c162caa44eb258ce63757a7020df8d79373529e304eb1a7515629f21f8f949df74a24a45a7e59f924871d299c84eccf7f1ef407bc6fbf75dc3d4b8597024df307c967c45ea4b861afaa8e08405f654e2d6172f5d0081420c6f2a3122b283f02f53865aaf68d705099d3138a796be8c939aa0937e876088d88f623851f89c89eda4997273678b34ca18000b0c", 0x1000, 0xa092, 0x0, 0x2}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x5, 0xac, r2, &(0x7f0000003000)="829e7736982aec93f97783145b395d0c30bb890bacb62701edf9e9e15aff6b0195d3fc740f472be1c6cea8b6d5fe732184cdf9a013540cbf0a9704d33a16c3afa651caa57af2ca17f7a341645101866274e58affdaa878c8dd0fac952d14a46e3f5a4645699218b3f54b9c41ab1d096ef8c5559bbd9793fa30964b0ee58cf14a1aa18ac39b744d5060d46c9bf65562fef210bb935590d6568d97c4d5d2ffbaec74f165c0af1cd5644d67a4038e8b0ac11bfb4f77fae797827018beae6073960266f2cd1734c8", 0xc6, 0x2, 0x0, 0x1}]) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@index_off}, {@verity_off}]}) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000000000009500c4050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d756751dfb265a0e3ccae669e173a649c1cfd6587d452d6453559c3421eed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae89d24e1cebfba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc677d6dd4aed4af7500d7900a63278f4e92895614cd50cbe43a1ed2526814bcf11887d8dc91dd6f469f9740bf3a73b100000000000009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed20fa7a050fbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada127414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000000000000000000000000000000000000000000000000000000000000000000005233226ee7b4de17ff24000c52f4ebf1c893bb97734a83584898eccb26f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4e48f35530a0af4aac9d07713f05de969c38331973d55a17690b6f7f9ccbe44b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cfde6c25a3836978d2efa286a87f7a32417f1b825a16857aa54a859989d893ad4bf9180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a64657d5b3983c4ac41b154eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb258713624a757a6cc4fff48a27dab16ebbd8405a1abd85e0e946b9fe8e1dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230417d2d4424de5897bd110e6294bcfe98000bfa6e9919b956fa369d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e536be2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e2861a8a56d9d604a56e2dbcd2fbe9cb4db180a145785f94b27a380dffa612eee33056cd0824374f1bf2f89de1bb4fa70d6c8000000001342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c92072153d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a041d97fb2f23223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05ecca45f99beecf56341075ed4387159b563501166f7a8abcbcd38c5852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d987abea7a09d263988539b0d89bef76cac0f3d3ea4a139e108a4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa618ff39fb89b633b74b5572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe546c765d8a52a6bec46a26c022f7508ddd6c7e6161ba51408ba085fb506fd53173d1bf33d3a633568888bfc657f524a156dd54bcb16355c9a4200a7afcadff35f7e97ce8f63aa4f5686dbfab1d13128cde60a40a5721b281ee2d8f4e81c2673e159dd4d8cc11211865a9063b85dab4dc66898ff30b1116aed68403133e79abfbb29cdda78328755c282ff47ce9cbbae753da77a38a5b931cee09c8ebf7974862266f6ee2c3e19833869ba4ef05a99d851aa52d721ee9166e11e50da5ca162823d0c8f89cadac1b1d8bf9134408383104f4a20279fc249b1bfdab79878013773945056304a93179d0d3d6425eede4762b417c1ee8029af2d0b81f6aa2df229dcdaca1e97b184e267690ddd5b90999ef19b5b41d72afdd704c926d9c4a72f2886f73a9e71e5df7403ef6d965e60c938b856edfab81af093f650341de767e3b53fd000000002f764fd240d9fb6eaf864db2b58069eded19fcc4a229c72ee14d424f3d388e3c9d5af2e49f374f7915ee31a3e6c5a0ecfc4e8468d0f2955726d30eedaafc0a251335961796c1e9c2d674509c9eb1062cbe6f68a0323330edbd5224ad7b003e91d8b89e2552cb35c39d2b81addf19be15f455d592dc67f8eb0c631ca7b24d972f5fbb462367738832b7b19663f8cc2ca56e49bad4bd791a8277dfe2261265679b383ab4455fcd02d4686c4fa30d05a53b8e3a228947a16e9329bc9ce25659ad305b1f849128a573aa6fc639de8245067893278df9e1e60a5acdfea4d60415a1beafc4476bd5eaf3d55f05279b63fff168419ad0415bcc3c94f36a9ad19c8bad110eae5dac5bbd9ff33a2e0fb32b9ed37f6193fccb131d45e244479cb123140e0a3ddc39b5546f1e9534133894d95b5de60dbbbcd2936a56a8d42c275385319d11ad49ffd786d187c63a1b2f32d216655ab774d07092044fa526bbd9e7d810421d186e985edcdcd39ec406fb21f94abe57fbdd63d223778a0fd81c17ac2249eb17f1b6e81688e205b657140a77519bcc5f5e7934b724b6f80d065eaa55d017f5b4900c038cd9adbf0ed8e2b05ee372be51147728438c9f980f38293cbb470f722a2b303f9f5ca59ec778733b77a07c97f700000000200000007649cc4b6ab82e9d1cd2e0834b05b51679d5081504038ca0ef0ff01dc554548f86cd1e3eeaee4564f9345d1112ae364ed7ad4511a82fb82b0e9569ca901337058c534f891bcdc81f8756306f9223f5560000000000000000000000000000dae4f25530803f1d21b41f57b89084010334a66351d546380d71fc788a732aec27bbb888f1aee49ab7d418489d5caff0560ef4398cc005c49642366d7004a10093bf46c4d953ae9f13508e42df39e3082511f336a49423a6dfe3861cb476f7c6e0bf65b853ee2a913462ffc50fde069ae009663be77de752f2e5de736d101811d0e876d4de9485b91fd2e3950357c71766a2d663c4869ebd7c60c5aa92f44aae89cf5e4b2da7d372cb9fc486271379207f4a70d41b64d304b71fbf56a0007e2bb2807b2dcd36ad55c115d5e551dd7782f2ae7b7eebd975ce65504ea4897292fd44ae7b1262404276a5c689a8baec8148e39677719309ac73dee5679b9c49286919381caec61bed27b428cb4c861980c15637d667010b88b7fc0cd945f3d9f871e87c0d92da12e46ee2456b42fedfd4f0a4000000000000"], &(0x7f0000000240)='GPL\x00', 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r5, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdf1, 0x0}}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0), 0x4) sendmmsg$inet(r4, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}], 0x1, 0x40480c0) 2.228983978s ago: executing program 0 (id=497): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file1\x00', 0x8c6, &(0x7f0000001900)=ANY=[@ANYBLOB="696f6368617273653d302c756e695f786c6174653d312c636865636b3d7374726963742c756e695f786c6174653d302c666c7573682c726f6469722c757466383d312c756e695f786c6174653d312c636f646570616765043934392c73686f72746e616d653d6d697865642c726f6469722c757466383d312c646973636172642c757466383d302c726f6469722c00"], 0x1, 0x296, &(0x7f0000000680)="$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") (async) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file1\x00', 0x8c6, &(0x7f0000001900)=ANY=[@ANYBLOB="696f6368617273653d302c756e695f786c6174653d312c636865636b3d7374726963742c756e695f786c6174653d302c666c7573682c726f6469722c757466383d312c756e695f786c6174653d312c636f646570616765043934392c73686f72746e616d653d6d697865642c726f6469722c757466383d312c646973636172642c757466383d302c726f6469722c00"], 0x1, 0x296, &(0x7f0000000680)="$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") syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c90012000e00050018010a0008e7ffff02000700fea481ef13e8d9e6bfae7510aa2257e2dd931641f9d91d9e11c8064f8752fe95bc1e4e2a297e4de4cf9edec771a6b06315f082a226a152767245fb5d4aa809ef02de78b1f21ed953591fc920732fce21ce7579f5cad46cc06dac9af7cd54990d17f8c8b25e"], 0x17) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) madvise(&(0x7f00002db000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f00002db000/0x4000)=nil, 0x4000, 0x17) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f0000000840)) 2.075029147s ago: executing program 0 (id=499): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ae, &(0x7f0000000180)="$eJzs3c9vVNUeAPDvvTMtlL732kdenuLCNBoCidLSAgZ/LGBPCP7YubHSQpDhR2iNFk0sCW5MjBsXJK5ciP+FEt26MnHhwo0rQ4LGsNEYHXOnd4ahnWmnpcOtvZ9PcnvPuedOz7nQb8+Ze8/pBFBaY/l+T0RcTiJG2sqqja9p46TsvLu/vns625Ko11/+JYkkP9Y8P8n3w/mL/xyJ+ParJHZXVtY7t3D1/HStNnslz0/MX7g8Mbdw9cC5C9NnZ8/OXpx6ZurokcNHjk4efKDrS9vSJ66/8dbIBydf/eyTP5LJz384mcSx+PnMUln7dWyWsRiL3+r195Yfz/5dj252ZQWptH5O7kmWH2DLquYxMhgRj8RIVNr+N0fi/RcLbRzQV/Ukog6UVCL+oaSa44Dme/ve3genfR6VAA/DnePZ14EO8V/N7w2OxkBE7F32ug639DYkq+Obr09ez7bo0304oLPFazvy1PL4TxqxORo7G7ldd9P77vNmI4BT+T47/tIG6x9blhf/8PAsXouIRzuN/9eO/9fa4v/1DdYv/gEAAAAAAGDz3DoeEU93ev6X5s/mdsYTjed/ydLzv+/urRA8tgn1r/38L729CdUAHdw5HvFCx/m/rTm+o5U89++l2YDJmXO12YMR8Z+I2B8DO7L85Cp1HPhw941uZe3z/7Itq785FzBvx+3qjvtfMzM9P/0g1wwsuXMt4rFq9/k/Wf+ftPf/uez3weUe69i99+apbmVrxz/QL/VPI/Z17P+T1jnJ6n+fY6IxHphojgpWevydj77oVr/4h+Jk/f+u1eN/NGn/ez1z6/v+gxFxaKFa71a+0fH/YPJKpfn9M29Pz89fmYwYTE6sPD61vjbDdtWMh2a8ZPG//8nV7/+1xv9tcTgUEYs91vn/v4Z/7Fam/4fiZPE/s67+f/2JqZujX3arv7f+/3CjT9+fH3H/D1bXa4AW3U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CdKI+JfkaTjrXSajo9HDEfE/2JXWrs0N//UmUtvXpzJyhqf/582P+l3ZCmfND//f7QtP7Usfygi/hsRH1eGGvnx05dqM0VfPAAAAAAAAAAAAAAAAAAAAGwRw13W/2d+qhTdOqDvqvlevEP5VItuAFAY8Q/lJf6hvMQ/lJf4h/LaYPx7XADbgP4fymqgt9N29rsdQBH0/wAAAAAAsK3cev7ZG0lELD431Ngyg3lZ68HgUFGtA/opLboBQGHM4YXyMvUHyqvHyb/ANpa0Ur/XO5V3n/2f9KdBAAAAAAAAAAAAAMAK+/bc+n7N9f/AtmT9P5SX9f9QXtb/Q3l5jw+stYrf+n8AAAAAAAAAAAAAKN7cwtXz07Xa7BUJia2WGIiILdCMAhKDxYdnwb+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAlr8DAAD//1IlJPs=") syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setreuid(0xee01, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000140)={[&(0x7f00000000c0)='=\\\x98\xae!\\A=3\x06\x00\x80\x00\x00\f', &(0x7f0000000000)='=\\\x98\xae!\\A=3\x06\x00\x80\x00\x00\f']}, 0x1000) 1.334750378s ago: executing program 6 (id=509): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0x12, 0x0, 0x4}) 1.332943263s ago: executing program 6 (id=511): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r0, 0xbafa1000) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x7, r3}, 0x38) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[], 0x3, 0x236, &(0x7f0000001440)="$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") 1.259970944s ago: executing program 9 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x2, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffff9, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x2, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x203}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x7, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x3, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x3ff}, {0x400, 0x2658, 0x40000, 0x1}]}}]}}]}, 0x8c}}, 0x0) 1.232695289s ago: executing program 9 (id=515): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x85, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x2, 0xf}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008850) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x48100) io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bff, 0x1, 0x0, 0xc}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x9, 0x0) (async) lseek(r6, 0x9, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) bind$inet6(r2, 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) 1.216924484s ago: executing program 4 (id=516): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b119a000000000085100000020000000d0000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000017) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0xffff, 0x8000, 0x6, 0x6}, 0x19, [0x8000, 0x6c, 0x7, 0x2, 0x7, 0x5, 0x2, 0xfffff800, 0x4, 0xf80, 0x5, 0xe45, 0xa5, 0x2, 0x0, 0x191, 0x537, 0xfd, 0x8, 0x6e3, 0x66d5, 0x3, 0x0, 0x8, 0x1617, 0xbb4, 0x40, 0x1, 0xc91, 0x1, 0x7fd6330f, 0x2, 0x9, 0x6, 0x3, 0x44b, 0xff, 0x1bf, 0x581, 0x100, 0x28a, 0x9, 0x0, 0x7, 0x168c, 0x80000000, 0x10001, 0x0, 0xff, 0x9, 0x3, 0x8, 0x1, 0x3ff, 0xfffffbff, 0x8, 0x40, 0x8, 0x8, 0x0, 0x1000, 0x6, 0x8, 0x4], [0x4907, 0x8, 0x21e, 0x7, 0x8001, 0x6, 0x300000, 0xb, 0x5, 0x3, 0x1, 0x3, 0xf, 0x4, 0x6, 0x5, 0x3, 0x3, 0x1, 0x1, 0x2, 0x81, 0x3, 0x2, 0x40000000, 0x4, 0x6c2c, 0x2, 0x100, 0x178, 0xc577, 0x3, 0x372b, 0x7fffffff, 0x80000001, 0x3800000, 0x0, 0x10000, 0x4, 0xa, 0x3, 0x1, 0x7, 0x7, 0x8, 0x2, 0x6, 0xbfa, 0xfa06044, 0x0, 0x2, 0x4, 0x0, 0x5, 0x3, 0x5, 0x8, 0x2, 0x633fd35d, 0x2, 0x2, 0x1, 0x80, 0x401], [0x1, 0x0, 0x0, 0x2, 0x3, 0x5, 0x8001, 0x80, 0x4, 0x7fff, 0xfffffff4, 0x6, 0x401, 0x7d, 0xa, 0x9, 0x6, 0x4, 0x38, 0xc, 0x100, 0x10001, 0x6, 0x8, 0x3, 0x1, 0x5, 0x5, 0x1, 0x6, 0x69a5, 0x2, 0x429, 0x10001, 0x10000, 0x3, 0x9, 0x6, 0x1ff, 0xffffffff, 0x35, 0x4, 0x8, 0x7, 0x5, 0x2, 0x6, 0x4, 0x9, 0x1, 0x5, 0x10001, 0x10, 0x3, 0x1, 0x4, 0x3ff, 0x8, 0xfffff000, 0x200, 0x5, 0x3, 0xe, 0x7], [0x4, 0x7, 0x8, 0xc1, 0x9, 0xfffffb98, 0xfffffffd, 0x3, 0x1000, 0x216e, 0x0, 0x800, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x3, 0x3de, 0x7f, 0x3, 0x1, 0x1, 0x9, 0xbdef, 0x4, 0x1800000, 0x1, 0x4, 0xe, 0x9, 0x9, 0x5, 0xdf, 0x4, 0x9, 0x3, 0x2, 0x7, 0x5, 0xbe6, 0xffff, 0xd50, 0x7fff, 0xfffff090, 0x4, 0x2, 0x5, 0xffffff16, 0x8e, 0xfffffffc, 0x6, 0x1, 0x6, 0x6, 0x5, 0x6, 0xefaa, 0x7a24, 0x4, 0x800, 0xee4, 0x8001]}, 0x45c) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x3) 1.15290113s ago: executing program 4 (id=517): r0 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x1, 0x0, [0x3, 0x800, 0x7, 0x20000000, 0x6], [0x8000000000000000, 0x7, 0x100, 0x6, 0x96d, 0x7, 0x3, 0x1, 0x1, 0xd0, 0x1, 0x1, 0xffffffffffffffa2, 0x4, 0x1, 0x2, 0x0, 0x8, 0x5, 0x8000, 0x4, 0x2fd, 0x7, 0x1, 0x7ff, 0x1, 0x7, 0xfffffffffffffff4, 0x7, 0x8, 0x8, 0xebbc, 0x2, 0x8, 0x1, 0x8000, 0x1, 0xc6e0, 0x7, 0x8000000000000, 0xc72, 0x100000000, 0x4, 0x45, 0x40, 0x29ee, 0x1, 0x9, 0x0, 0x42, 0x5, 0x0, 0x1, 0x7, 0x5, 0x3, 0x0, 0x96fd, 0x9, 0x1, 0x8001, 0x9, 0x8001, 0x100000001, 0xc, 0x5, 0x1, 0x800, 0x80000001, 0x3d81add, 0x5, 0x0, 0x5, 0xfffffffffffffffd, 0x7, 0x8000000000000001, 0x8, 0x7, 0xac, 0xd5ae, 0xf2f, 0x5, 0x6, 0x4, 0x7, 0x3, 0x5, 0x6, 0xfffffffffffffff7, 0x2, 0x7, 0x6, 0x93, 0x0, 0x3ff, 0x32, 0x0, 0x7, 0x7fff, 0x7fff, 0xd, 0x7fffffffffffffff, 0x1, 0x5445, 0xe3, 0x3, 0x8, 0x3, 0x6, 0x5, 0xc0ab, 0x4, 0x5, 0xfffffffffffffff7, 0x3ff, 0x7, 0x100, 0x2, 0x6, 0x9, 0x2]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x3, 0x6, 0x1}) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000840), 0xffffffffffff08ac, 0x143080) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0xb33}}, 0x7, 0x36, 0x6, 0x6}, &(0x7f0000000940)=0x98) pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x1406, 0x2, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000b80), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r5, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc004) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) copy_file_range(r6, &(0x7f0000000c80)=0x1000, r3, &(0x7f0000000cc0)=0x9, 0x5, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000d00)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000d80)={0x3}) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000dc0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r0, &(0x7f0000000e40)={0xa0000009}) (async) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x80c8) memfd_create(&(0x7f0000000f80)='SMC_PNETID\x00', 0x1) (async) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001000)={{r10, r11/1000+10000}, {0x0, 0x2710}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001080)=@generic={&(0x7f0000001040)='./file0\x00', r8}, 0x18) sendmsg$nl_crypto(r8, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)=@upd={0xe8, 0x12, 0x10, 0x70bd29, 0x25dfdbff, {{'pcbc(aes-aesni)\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x400}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "8046d4701f55d0e80357406beacf187c3096edc31f4b23f4b82fa9134c6571015a9730bb9fbcdd40"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) (async) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x17a4, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x4000800) 1.147322961s ago: executing program 4 (id=518): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0x10, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @local}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 1.144880511s ago: executing program 8 (id=519): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20001) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/97) 1.131121978s ago: executing program 4 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x20008010) 1.105711682s ago: executing program 4 (id=521): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getpgid(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) lseek(r4, 0x3f63, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7ffffffd, @local, 0x8}}, 0x4, 0x7, 0x3f8, 0x3f70864d, 0x0, 0x84}, 0x9c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./bus\x00', 0x0, 0x8, r3}, 0x18) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1e0, 0x280, 0x1000, 0x0, 0x18, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0x1}, {0x4f4ef}, {0x4, 0x75, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}) 1.045343305s ago: executing program 6 (id=522): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0x12, 0x0, 0x4}) 1.04412727s ago: executing program 8 (id=523): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x600440a0}, 0x40000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) (async) ftruncate(r2, 0x8800000) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x558410e9) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x600440a0}, 0x40000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) 997.272446ms ago: executing program 6 (id=524): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x1, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xb6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 692.742104ms ago: executing program 0 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x5}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x5}]}}]}, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000700000000000000000000040a0000000000000002000006040000000500000004000000050000000900000000003030612e"], &(0x7f0000000f40)=""/4086, 0x47, 0xff6, 0x1}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) (async) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xffffffffffffffff) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f8efde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e4d7f469653412073656c662d74657374696e67206b65793020170d3634303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072aa648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8478efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f04040b020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d0000000000", 0x1d8, 0xffffffffffffffff) read(r4, &(0x7f0000000200)=""/100, 0x64) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x80000000008}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7}) 589.214198ms ago: executing program 6 (id=526): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000001c0)=0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r1, &(0x7f0000000140)="02", 0x1, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/138, &(0x7f0000000280)=0x8a) shutdown(r1, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x20, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x13c}, @nested={0x4, 0x1}, @nested={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 551.285971ms ago: executing program 8 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x9a9b, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4884) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f0000002200), 0x5005) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002240), 0x80, 0x0) r5 = openat(r4, &(0x7f0000002280)='./file0\x00', 0x80000, 0x44) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000022c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "c871797f042e08"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000032c0)={r6, 0xffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004300), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004340)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000004440)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004400)={&(0x7f0000004380)={0x44, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc, 0x75}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6bd}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x7, 0x2]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4850) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000045c0)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x44, r10, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '@#-)%%[5+:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x40854}, 0x40000) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f00000046c0)={0x48, 0x4, 0x0, 0x0, 0x8d, &(0x7f0000004600)="85fac51f0afa696efe8efcbcec33076f95453bdb7df1667f0241914c2dfc2b6f3cf58ecc8b78f45fba36311fb00a6ad7f24cfadddbe5e4593224a9af63dc6f11a6f1138c3d7378fe79790f8f22d907e6831cd0c91edeb508b694b1590ab3ec64d8c57ebdfe25d937889496c86d7437ebb5c5414295bfabcbf974cf302a815c64b4c8f6f98463dfcc1be7ba21ff", 0x6f}) (async) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000004740)={0x0, 0xb822}, &(0x7f0000004780)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000047c0)={r11, 0x80000000, 0x10}, &(0x7f0000004800)=0xc) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000004840)=""/1) write$cgroup_int(r5, &(0x7f0000004880), 0x12) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x15) (async, rerun: 64) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000004900), r1) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000004ac0)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000004a80)={&(0x7f0000004940)={0x12c, r12, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x5}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) (async) syz_emit_vhci(&(0x7f0000004b00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xcb}, @l2cap_cid_signaling={{0xc7}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x9, 0x9}}, @l2cap_conf_rsp={{0x5, 0x1, 0x18}, {0x7, 0x3, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x3, 0x35a, 0x1ff, 0x91}}]}}, @l2cap_conf_req={{0x4, 0x5, 0x17}, {0xfffa, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1d, 0x1, 0x3, 0x8, 0x5}}, @l2cap_conf_ews={0x7, 0x2, 0x516e}, @l2cap_conf_flushto={0x2, 0x2, 0x7}]}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x80}}, @l2cap_conf_req={{0x4, 0x0, 0x47}, {0x5, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x94, 0x1, 0x1ff, 0x4, 0x4, 0x1}}, @l2cap_conf_mtu={0x1, 0x2, 0x7f}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0x7, 0x1000, 0x7, 0x4}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_ews={0x7, 0x2, 0x200}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_conf_req={{0x4, 0x3, 0x17}, {0x6, 0x1ff, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x8, 0x0, 0x45b, 0xa21b, 0x7}}]}}, @l2cap_conf_req={{0x4, 0x4, 0x16}, {0x7c61, 0x56, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x4, 0x7, 0x6, 0xc993, 0x94}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0xd0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000004c00)={0x7, 0x9b, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000004c40)={r13}) (async) write$tun(r4, &(0x7f0000004c80)={@void, @void, @llc={@llc={0x4, 0xff, "e4f8", "d9c660040588ee9cb2"}}}, 0xd) 484.671879ms ago: executing program 6 (id=528): recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000500)=""/99, 0x63}, {&(0x7f0000000580)=""/113, 0x71}], 0xa}, 0x0) fallocate(0xffffffffffffffff, 0x12, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'pimreg1\x00', 0x0}) r1 = open$dir(&(0x7f0000000740)='./file0\x00', 0x200100, 0x322) mkdirat(r1, &(0x7f0000000780)='./file0\x00', 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x840, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) timerfd_gettime(r3, &(0x7f0000000800)) mmap$IORING_OFF_SQ_RING(0x0, 0x90000000, 0x300000e, 0x1a013, r3, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000009c0)={r3, 0x0, 0x56, 0x0, &(0x7f0000000840)="4d1272a54cd766b7fff412c06a996bcacdf651e92c58f1514c80440c0e85b6ecf23481f7a2ae846f460cbb2e5e113c53317fdc0fe140f9e2a53ec62dfdb15707de845da3ae46068dcdd86ad205488178feb5dc897b92", 0x0, 0x5, 0x0, 0xc5, 0x0, &(0x7f00000008c0)="f20ce1661e975e7c2eeaf22683571907e5fedcecf26693fac236e041b89e314b81569e33fac670b54bb32db181761c0616a608651c1f473e2b9565241acd16e29109a3a62a5e23844ad1951b624f5c3e60b7ee425edd167df422945734cf963fee84c6923da3dd33dd524654ec0746ad11837968153797be559a9a346b14b20f943b7785d0cda98b1b1519066098013f62226aea24884817e164aa7bb9814b93a9711e3b89bb8c7001a44f8d9c7ea3d87b467785a28d1c7cfe53e70ee254ac32495a79142a", 0x0, 0x2, 0x0, 0x3823}, 0x50) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000a40)=0x840084) fdatasync(r1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) syz_open_dev$video4linux(&(0x7f0000000a80), 0xb7, 0x8000) pipe2$9p(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RLCREATE(r4, &(0x7f0000000b00)={0x18, 0xf, 0x1, {{0x80, 0x4, 0x1}, 0x4}}, 0x18) lseek(r1, 0x3, 0x3) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pread64$ublk_ch(r3, &(0x7f0000000b80), 0x1000, 0x7) ioctl$FE_READ_SNR(r3, 0x80026f48, &(0x7f0000001b80)) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001bc0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d00)={@ifindex=r0, 0x31, 0x1, 0x7, &(0x7f0000001c00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={r3, 0xe0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000001e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001e40), &(0x7f0000001e80), 0x8, 0x44, 0x8, 0x8, &(0x7f0000001ec0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002040)={0xffffffffffffffff, r0, 0x25, 0xc, @val=@target_btf_id=r5}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000002200)=0xe8) getgroups(0x7, &(0x7f0000002240)=[0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00]) syz_mount_image$fuse(&(0x7f0000002080), &(0x7f00000020c0)='./file1\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@allow_other}], [{@subj_user={'subj_user', 0x3d, ','}}, {@obj_type={'obj_type', 0x3d, 'pimreg1\x00'}}]}}, 0x1, 0x0, &(0x7f0000002400)="b500acc3cf4acde1c0c5f734a793e26cb9b47748f926f684fb0d3d8c536788ca871c7e18284e6f0d4456a1563655965b5749800b0ce8337984793734bf2e854673909ed73ac8485f4c3b0013af565984ddbd2445f970035bd83d3a7ca7811f6550acff4bd1629e6f20a4f4214e5ad010db54519280745e28cb32bbab6485d99e3f919f0a56547befc04b299a8d440545458b678e480b0293f3215d7245fd90e4e32738248ea8") ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000024c0)={0x1ff, 0xffffffffffffffff}) 372.990271ms ago: executing program 0 (id=529): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, 0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x80000) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x10, 0x4, 0x7}, 0x2}}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xf423f, 0x0, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x2, 0x3, 0x80000000000000}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000f694ac00000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8bf0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 369.050411ms ago: executing program 8 (id=530): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000bc0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@shortname_lower}, {@numtail}, {@utf8}, {@uni_xlateno}, {@utf8}, {@fat=@nfs_stale_rw}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@utf8no}, {@utf8no}]}, 0x3, 0x297, &(0x7f0000000900)="$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") prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x455, 0x5, {}, {0xffffffffffffffff}, 0xffffffff, 0x2}) mount$cgroup(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@favordynmods}, {@favordynmods}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r0}}, {@pcr={'pcr', 0x3d, 0x4}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f) 261.379254ms ago: executing program 8 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffd, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x1081001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="b40000000000000073118e00000000002700000000000000950074eb00000000b2a1d7269ade1dd021220a609d2329fa913d9f9d76224062f36b4e5d66394c3561621cb288c4582e289907fcbb4c26c41c9eaf8f913a63b4821db973f8e1ab0376402cc79aff1b524dce20e1be1aa7c9b0b6272b3dae87662deebebee66bd424839d327cb8e218de0cffe8905b674b203d359c76bdfdfcb50711234f22f54f648253f9b8f158800e155ce9270f82c0a23f96b65fd26d83b46fde2e30cc30296f8e0213143a3675666132060e2cd29ecbe416942597593973e723b9db1acd3046b1f11d590c567810191901eabb4a646069cf0582e407"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) 338.485µs ago: executing program 4 (id=532): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x2) (async) getdents64(r1, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='vers\x00&\xe0g<*\x02\r\xdc\x86}/\x04\x17\'\xc4\x93\xbf0\xba\xcbe+\xa1\x02\x00\xec0\xd7\xbeN\xdf~6\xf8\xa2\xe5$\xea\xc0\xe7\xf1\xd8@\x8d\x06\x7fKM\xbe\xf7P\x88\x81\xd4\xc6\xf0\xde\xfa\xe1\xb4\xcf\xce_\x17M{!Jnh;\x85\xad\xee\a\xe0a_\xfc\xfa\xc6H!i*\x1e\xa2m\xfe\xd4C\xdd9m!yP\x18\x99\x1fDm\xa8\xb1p\x89\x12AI\x02tP\xb3\xdd\xa1>\x9c\xa3^+\xc2\xe2\x8a\x93z\xee\'j\x9aG\xcd|\xe6\xce3\x8a\xdb\xbb\xf4\x1a7\x84\xea\f@R\xd8\x82F{9\xf9\xd7\x9e8\x81 K3{1\xd0\b>\x82\x8d\xf7\xc9=\x844C\xd6ejf\xda%\xb1\xb9\x13\x8c\xeb\xbf\xc3V\xcd\x0f(\xfeq!\xf5Zv\xcc\xfa\x8eI\xcc\x88w', &(0x7f0000000180)='3\xfbxt\x99\x1b\x1c\xf7\x17S\xf0\x92\xc6\"\xb1\x8f\xdaX\xa1|\xf0\xd9Qb\xc9\v\xabK.^\x8b\x17\xc64\xa61\x1fi\x02C \xc21\xde\xfb\xech(@\xab\xed\x1c\xe5\x19\xac\xf1\xbfn0\x00\xe1\xc9\xe1J&Y\xc3\xdd\x9b\x17\xe2\nMo\xbc\xdf\f\xbe\xa8r\xc3\x99\xa2\xde\xa6^\b\r\xbd\xa8\x87_L\xe6\xedi\xa8\x9fUet\xaa4\x01C\x84\xc2=\xe6T\xf9]~p\x85 \x89\xfc\xa7\xde\xfc\xf0_\xf6i}\xa6\xc4}\xe0\x846s\xe4\x80f\xb7\xac\x9f\xb3{\xe51\xce(\xb3dy\xdf\t\x98`\xb8\t:\xf7\x9f\xdb}n\xf6Iy\xd6/\xa7ye\xc1\xa8\xab\fz\xc7\xfd\x16\r)\x9f\xcf\x81|\x98\xcd\x83\xad\xad\x9f\x98EX#x{\x98\x04~e\xeb\x13QRA\xe2\xac\x05`=_b\x84\x87\xaej\xfa\xe1\xfa\xd17\xa3\xbe\xde^P\x05\x9a\xfb\x8d\xa3\x9f\xc3\xfeW\xcfc\xd5\b\xbb\x03yV\a\b\xd2td\xf2\x1aea\xd0>W\xa5$\xde\xea\x9a\x97\x80\xdf0`\x90\xbce\x86i\xe6\x1b\xb9I\x9d\xdd\xaczv\xba\x1ew\xa0-l\x99\xee\x84\xcd\xd5\x93\xb8\xe8b\x91\x98\xc8\x17g\xa6*\x98\xad\xc3A\xa4|\xcaG\xea+\xac\x02q\xa2\xf5\xaa\\|\v\xcc1\xdd\x87G\'\x9c\xacV\xe8\n]!nV\xc7\xaa\x12\xbb\b\x12\xe9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_io_uring_setup(0xd3a, &(0x7f00000002c0)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000005d40)=0x0, &(0x7f0000005d00)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x44de, 0x6d90, 0x8, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000006c0)="374990d724320021ca3f6e961b07354ad4", 0x11}, {&(0x7f0000000400)="b0bb56210d7f93463efc39", 0xb}], 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00000001900010000000000000000001c140000fe0000010000000005001a0005000000840013000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080004"], 0xe0}}, 0x0) kernel console output (not intermixed with test programs): ting memory failure for pfn 0x11f076 at process virtual address 0x20076000 [ 30.117900][ T5047] Memory failure: 0x11f076: recovery action for dirty LRU page: Recovered [ 30.117907][ T5047] Injecting memory failure for pfn 0x11f077 at process virtual address 0x20077000 [ 30.117932][ T5047] Memory failure: 0x11f077: recovery action for dirty LRU page: Recovered [ 30.117940][ T5047] Injecting memory failure for pfn 0x11f078 at process virtual address 0x20078000 [ 30.117966][ T5047] Memory failure: 0x11f078: recovery action for dirty LRU page: Recovered [ 30.117973][ T5047] Injecting memory failure for pfn 0x11f079 at process virtual address 0x20079000 [ 30.117998][ T5047] Memory failure: 0x11f079: recovery action for dirty LRU page: Recovered [ 30.118005][ T5047] Injecting memory failure for pfn 0x11f07a at process virtual address 0x2007a000 [ 30.118031][ T5047] Memory failure: 0x11f07a: recovery action for dirty LRU page: Recovered [ 30.118038][ T5047] Injecting memory failure for pfn 0x11f07b at process virtual address 0x2007b000 [ 30.118064][ T5047] Memory failure: 0x11f07b: recovery action for dirty LRU page: Recovered [ 30.118071][ T5047] Injecting memory failure for pfn 0x11f07c at process virtual address 0x2007c000 [ 30.118096][ T5047] Memory failure: 0x11f07c: recovery action for dirty LRU page: Recovered [ 30.118103][ T5047] Injecting memory failure for pfn 0x11f07d at process virtual address 0x2007d000 [ 30.118131][ T5047] Memory failure: 0x11f07d: recovery action for dirty LRU page: Recovered [ 30.118138][ T5047] Injecting memory failure for pfn 0x11f07e at process virtual address 0x2007e000 [ 30.118163][ T5047] Memory failure: 0x11f07e: recovery action for dirty LRU page: Recovered [ 30.118170][ T5047] Injecting memory failure for pfn 0x11f07f at process virtual address 0x2007f000 [ 30.118195][ T5047] Memory failure: 0x11f07f: recovery action for dirty LRU page: Recovered [ 30.118202][ T5047] Injecting memory failure for pfn 0x11f080 at process virtual address 0x20080000 [ 30.118228][ T5047] Memory failure: 0x11f080: recovery action for dirty LRU page: Recovered [ 30.118235][ T5047] Injecting memory failure for pfn 0x11f081 at process virtual address 0x20081000 [ 30.118260][ T5047] Memory failure: 0x11f081: recovery action for dirty LRU page: Recovered [ 30.118267][ T5047] Injecting memory failure for pfn 0x11f082 at process virtual address 0x20082000 [ 30.118292][ T5047] Memory failure: 0x11f082: recovery action for dirty LRU page: Recovered [ 30.118299][ T5047] Injecting memory failure for pfn 0x11f083 at process virtual address 0x20083000 [ 30.118324][ T5047] Memory failure: 0x11f083: recovery action for dirty LRU page: Recovered [ 30.118331][ T5047] Injecting memory failure for pfn 0x11f084 at process virtual address 0x20084000 [ 30.118357][ T5047] Memory failure: 0x11f084: recovery action for dirty LRU page: Recovered [ 30.118364][ T5047] Injecting memory failure for pfn 0x11f085 at process virtual address 0x20085000 [ 30.118389][ T5047] Memory failure: 0x11f085: recovery action for dirty LRU page: Recovered [ 30.118396][ T5047] Injecting memory failure for pfn 0x11f086 at process virtual address 0x20086000 [ 30.118422][ T5047] Memory failure: 0x11f086: recovery action for dirty LRU page: Recovered [ 30.118429][ T5047] Injecting memory failure for pfn 0x11f087 at process virtual address 0x20087000 [ 30.118455][ T5047] Memory failure: 0x11f087: recovery action for dirty LRU page: Recovered [ 30.118462][ T5047] Injecting memory failure for pfn 0x11f088 at process virtual address 0x20088000 [ 30.118492][ T5047] Memory failure: 0x11f088: recovery action for dirty LRU page: Recovered [ 30.118501][ T5047] Injecting memory failure for pfn 0x11f089 at process virtual address 0x20089000 [ 30.118532][ T5047] Memory failure: 0x11f089: recovery action for dirty LRU page: Recovered [ 30.118539][ T5047] Injecting memory failure for pfn 0x11f08a at process virtual address 0x2008a000 [ 30.118564][ T5047] Memory failure: 0x11f08a: recovery action for dirty LRU page: Recovered [ 30.118571][ T5047] Injecting memory failure for pfn 0x11f08b at process virtual address 0x2008b000 [ 30.118596][ T5047] Memory failure: 0x11f08b: recovery action for dirty LRU page: Recovered [ 30.118603][ T5047] Injecting memory failure for pfn 0x11f08c at process virtual address 0x2008c000 [ 30.118628][ T5047] Memory failure: 0x11f08c: recovery action for dirty LRU page: Recovered [ 30.118635][ T5047] Injecting memory failure for pfn 0x11f08d at process virtual address 0x2008d000 [ 30.118660][ T5047] Memory failure: 0x11f08d: recovery action for dirty LRU page: Recovered [ 30.118785][ T5047] Injecting memory failure for pfn 0x11f08e at process virtual address 0x2008e000 [ 30.118814][ T5047] Memory failure: 0x11f08e: recovery action for dirty LRU page: Recovered [ 30.118823][ T5047] Injecting memory failure for pfn 0x11f08f at process virtual address 0x2008f000 [ 30.118853][ T5047] Memory failure: 0x11f08f: recovery action for dirty LRU page: Recovered [ 30.266310][ T5099] nfs4: Unknown parameter '/file0' [ 30.287664][ T5089] FAULT_INJECTION: forcing a failure. [ 30.287664][ T5089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.287687][ T5089] CPU: 0 UID: 0 PID: 5089 Comm: syz.3.49 Not tainted syzkaller #0 PREEMPT [ 30.287698][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.287703][ T5089] Call trace: [ 30.287707][ T5089] show_stack+0x2c/0x3c (C) [ 30.287728][ T5089] __dump_stack+0x30/0x40 [ 30.287741][ T5089] dump_stack_lvl+0xd8/0x12c [ 30.287754][ T5089] dump_stack+0x1c/0x28 [ 30.287766][ T5089] should_fail_ex+0x41c/0x590 [ 30.287779][ T5089] should_fail+0x14/0x24 [ 30.287790][ T5089] should_fail_usercopy+0x20/0x30 [ 30.287802][ T5089] __arm64_sys_wait4+0x170/0x2d0 [ 30.287816][ T5089] invoke_syscall+0x98/0x244 [ 30.287828][ T5089] el0_svc_common+0xec/0x23c [ 30.287839][ T5089] do_el0_svc+0x4c/0x5c [ 30.287850][ T5089] el0_svc+0x64/0x260 [ 30.287861][ T5089] el0t_64_sync_handler+0x44/0x104 [ 30.287871][ T5089] el0t_64_sync+0x198/0x19c [ 30.491126][ T5106] FAULT_INJECTION: forcing a failure. [ 30.491126][ T5106] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 30.491170][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT [ 30.491185][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.491192][ T5106] Call trace: [ 30.491196][ T5106] show_stack+0x2c/0x3c (C) [ 30.491217][ T5106] __dump_stack+0x30/0x40 [ 30.491230][ T5106] dump_stack_lvl+0xd8/0x12c [ 30.491241][ T5106] dump_stack+0x1c/0x28 [ 30.491253][ T5106] should_fail_ex+0x41c/0x590 [ 30.491266][ T5106] should_fail_alloc_page+0xec/0x10c [ 30.491279][ T5106] prepare_alloc_pages+0x194/0x484 [ 30.491288][ T5106] __alloc_frozen_pages_noprof+0x180/0x648 [ 30.491296][ T5106] alloc_pages_mpol+0x1fc/0x3d0 [ 30.491306][ T5106] alloc_frozen_pages_noprof+0xc4/0x10c [ 30.491315][ T5106] alloc_pages_noprof+0x30/0x148 [ 30.491324][ T5106] get_free_pages_noprof+0x1c/0xbc [ 30.491332][ T5106] __kasan_populate_vmalloc+0x48/0x1d0 [ 30.491344][ T5106] alloc_vmap_area+0xdf4/0x13e8 [ 30.491353][ T5106] __get_vm_area_node+0x210/0x32c [ 30.491362][ T5106] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 30.491372][ T5106] vmalloc_user_noprof+0xe4/0x140 [ 30.491382][ T5106] vb2_vmalloc_alloc+0xf8/0x304 [ 30.491393][ T5106] __vb2_queue_alloc+0x854/0x1124 [ 30.491405][ T5106] vb2_core_reqbufs+0x7f8/0xe0c [ 30.491416][ T5106] __vb2_init_fileio+0x2b8/0xe84 [ 30.491429][ T5106] vb2_core_poll+0x3ac/0x6b4 [ 30.491440][ T5106] vb2_poll+0x5c/0xe4 [ 30.491449][ T5106] vb2_fop_poll+0x114/0x1d0 [ 30.491458][ T5106] v4l2_poll+0x130/0x270 [ 30.491471][ T5106] do_sys_poll+0x59c/0xc80 [ 30.491480][ T5106] __arm64_sys_ppoll+0x1f0/0x270 [ 30.491496][ T5106] invoke_syscall+0x98/0x244 [ 30.491508][ T5106] el0_svc_common+0xec/0x23c [ 30.491520][ T5106] do_el0_svc+0x4c/0x5c [ 30.491532][ T5106] el0_svc+0x64/0x260 [ 30.491543][ T5106] el0t_64_sync_handler+0x44/0x104 [ 30.491553][ T5106] el0t_64_sync+0x198/0x19c [ 30.491669][ T5106] syz.3.55: vmalloc error: size 155648, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 30.491752][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT [ 30.491763][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.491767][ T5106] Call trace: [ 30.491770][ T5106] show_stack+0x2c/0x3c (C) [ 30.491782][ T5106] __dump_stack+0x30/0x40 [ 30.491794][ T5106] dump_stack_lvl+0xd8/0x12c [ 30.491805][ T5106] dump_stack+0x1c/0x28 [ 30.491816][ T5106] warn_alloc+0x1c4/0x1d8 [ 30.491828][ T5106] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 30.491838][ T5106] vmalloc_user_noprof+0xe4/0x140 [ 30.491847][ T5106] vb2_vmalloc_alloc+0xf8/0x304 [ 30.491857][ T5106] __vb2_queue_alloc+0x854/0x1124 [ 30.491869][ T5106] vb2_core_reqbufs+0x7f8/0xe0c [ 30.491880][ T5106] __vb2_init_fileio+0x2b8/0xe84 [ 30.491892][ T5106] vb2_core_poll+0x3ac/0x6b4 [ 30.491904][ T5106] vb2_poll+0x5c/0xe4 [ 30.491912][ T5106] vb2_fop_poll+0x114/0x1d0 [ 30.491921][ T5106] v4l2_poll+0x130/0x270 [ 30.491933][ T5106] do_sys_poll+0x59c/0xc80 [ 30.491941][ T5106] __arm64_sys_ppoll+0x1f0/0x270 [ 30.491949][ T5106] invoke_syscall+0x98/0x244 [ 30.491960][ T5106] el0_svc_common+0xec/0x23c [ 30.491971][ T5106] do_el0_svc+0x4c/0x5c [ 30.491982][ T5106] el0_svc+0x64/0x260 [ 30.491992][ T5106] el0t_64_sync_handler+0x44/0x104 [ 30.492001][ T5106] el0t_64_sync+0x198/0x19c [ 30.492014][ T5106] Mem-Info: [ 30.492019][ T5106] active_anon:34 inactive_anon:27385 isolated_anon:0 [ 30.492019][ T5106] active_file:2747 inactive_file:14922 isolated_file:0 [ 30.492019][ T5106] unevictable:797 dirty:1775 writeback:0 [ 30.492019][ T5106] slab_reclaimable:9098 slab_unreclaimable:86773 [ 30.492019][ T5106] mapped:39976 shmem:20238 pagetables:1054 [ 30.492019][ T5106] sec_pagetables:0 bounce:0 [ 30.492019][ T5106] kernel_misc_reclaimable:0 [ 30.492019][ T5106] free:1465489 free_pcp:2794 free_cma:7616 [ 30.492040][ T5106] Node 0 active_anon:136kB inactive_anon:109540kB active_file:10988kB inactive_file:59688kB unevictable:3188kB isolated(anon):0kB isolated(file):0kB mapped:159904kB dirty:7100kB writeback:0kB shmem:80952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8836kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 30.492062][ T5106] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 30.492086][ T5106] lowmem_reserve[]: 0 0 3650 3650 3650 [ 30.492106][ T5106] Node 0 Normal free:2784068kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:136kB inactive_anon:109540kB active_file:10988kB inactive_file:59688kB unevictable:3188kB writepending:7100kB zspages:0kB present:5242880kB managed:3738144kB mlocked:116kB bounce:0kB free_pcp:11176kB local_pcp:2728kB free_cma:0kB [ 30.492130][ T5106] lowmem_reserve[]: 0 0 0 0 0 [ 30.492148][ T5106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 30.492210][ T5106] Node 0 Normal: 509*4kB (UME) 672*8kB (UME) 346*16kB (UM) 72*32kB (UME) 42*64kB (UE) 6*128kB (UE) 2*256kB (ME) 0*512kB 4*1024kB (UME) 4*2048kB (UE) 672*4096kB (UM) = 2784020kB [ 30.492289][ T5106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 30.492296][ T5106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 30.492303][ T5106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 30.492309][ T5106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 30.492316][ T5106] 37903 total pagecache pages [ 30.492320][ T5106] 0 pages in swap cache [ 30.492323][ T5106] Free swap = 124996kB [ 30.492327][ T5106] Total swap = 124996kB [ 30.492331][ T5106] 2097152 pages RAM [ 30.492334][ T5106] 0 pages HighMem/MovableOnly [ 30.492337][ T5106] 392568 pages reserved [ 30.492341][ T5106] 8192 pages cma reserved [ 30.492344][ T5106] 144 pages hwpoisoned [ 30.514170][ T5107] Injecting memory failure for pfn 0x13efb6 at process virtual address 0x20001000 [ 31.204093][ T4716] Bluetooth: hci2: command tx timeout [ 31.204118][ T4716] Bluetooth: hci3: command tx timeout [ 31.204133][ T4716] Bluetooth: hci4: command tx timeout [ 31.204171][ T4710] Bluetooth: hci1: command tx timeout [ 31.204990][ T4710] Bluetooth: hci0: command tx timeout [ 31.332874][ T5114] FAULT_INJECTION: forcing a failure. [ 31.332874][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 31.332893][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT [ 31.332904][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.332909][ T5114] Call trace: [ 31.332912][ T5114] show_stack+0x2c/0x3c (C) [ 31.332931][ T5114] __dump_stack+0x30/0x40 [ 31.332943][ T5114] dump_stack_lvl+0xd8/0x12c [ 31.332955][ T5114] dump_stack+0x1c/0x28 [ 31.332966][ T5114] should_fail_ex+0x41c/0x590 [ 31.332979][ T5114] should_failslab+0xc4/0x120 [ 31.332992][ T5114] kmem_cache_alloc_noprof+0x94/0x5d4 [ 31.333005][ T5114] do_getname+0x48/0x234 [ 31.333014][ T5114] __arm64_sys_symlinkat+0x9c/0xdc [ 31.333025][ T5114] invoke_syscall+0x98/0x244 [ 31.333036][ T5114] el0_svc_common+0xec/0x23c [ 31.333048][ T5114] do_el0_svc+0x4c/0x5c [ 31.333059][ T5114] el0_svc+0x64/0x260 [ 31.333070][ T5114] el0t_64_sync_handler+0x44/0x104 [ 31.333080][ T5114] el0t_64_sync+0x198/0x19c [ 31.457187][ T5107] Memory failure: 0x13efb6: recovery action for already truncated LRU page: Ignored [ 31.506785][ T5117] ubi0: attaching mtd0 [ 31.575420][ T5117] ubi0: scanning is finished [ 31.575433][ T5117] ubi0: empty MTD device detected [ 31.696051][ T5125] tipc: Started in network mode [ 31.696093][ T5125] tipc: Node identity ac14140f, cluster identity 4711 [ 31.696391][ T5125] tipc: New replicast peer: 255.255.255.255 [ 31.699181][ T5125] tipc: Enabled bearer , priority 10 [ 31.825835][ T5143] loop2: detected capacity change from 0 to 512 [ 31.860294][ T5117] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 31.880354][ T5143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.901955][ T5143] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.930535][ T5143] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 31.970332][ T5143] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.66: iget: checksum invalid [ 32.002560][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.056401][ T5159] fuse: Invalid rootmode [ 32.086876][ T5162] __nla_validate_parse: 1 callbacks suppressed [ 32.087112][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 32.106349][ T5159] loop3: detected capacity change from 0 to 8192 [ 32.226634][ T5175] FAULT_INJECTION: forcing a failure. [ 32.226634][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 32.230666][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT [ 32.230690][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.230696][ T5175] Call trace: [ 32.230700][ T5175] show_stack+0x2c/0x3c (C) [ 32.230724][ T5175] __dump_stack+0x30/0x40 [ 32.230738][ T5175] dump_stack_lvl+0xd8/0x12c [ 32.230750][ T5175] dump_stack+0x1c/0x28 [ 32.230762][ T5175] should_fail_ex+0x41c/0x590 [ 32.230775][ T5175] should_failslab+0xc4/0x120 [ 32.230788][ T5175] __kvmalloc_node_noprof+0x160/0x7fc [ 32.230797][ T5175] bpf_jit_binary_pack_alloc+0x10c/0x238 [ 32.230809][ T5175] bpf_int_jit_compile+0x964/0x1184 [ 32.230820][ T5175] __bpf_prog_select_runtime+0x3a0/0x728 [ 32.230831][ T5175] bpf_prog_select_runtime+0x2c/0x3c [ 32.230842][ T5175] bpf_prepare_filter+0xc74/0xdac [ 32.230853][ T5175] __get_filter+0x1b4/0x224 [ 32.230862][ T5175] sk_attach_filter+0x28/0x8c [ 32.230872][ T5175] sk_setsockopt+0x1f08/0x2658 [ 32.230884][ T5175] sock_setsockopt+0x68/0x80 [ 32.230895][ T5175] do_sock_setsockopt+0x1a0/0x330 [ 32.230905][ T5175] __sys_setsockopt+0x104/0x170 [ 32.230914][ T5175] __arm64_sys_setsockopt+0xc8/0xe4 [ 32.230924][ T5175] invoke_syscall+0x98/0x244 [ 32.230936][ T5175] el0_svc_common+0xec/0x23c [ 32.230947][ T5175] do_el0_svc+0x4c/0x5c [ 32.230959][ T5175] el0_svc+0x64/0x260 [ 32.230969][ T5175] el0t_64_sync_handler+0x44/0x104 [ 32.230979][ T5175] el0t_64_sync+0x198/0x19c [ 32.274806][ T5175] tipc: Failed to remove unknown binding: 66,0,0/0:2034127312/2034127314 [ 32.274846][ T5175] tipc: Failed to remove unknown binding: 66,0,0/0:2034127312/2034127313 [ 32.275190][ T5175] tipc: Failed to remove unknown binding: 66,0,0/0:2034127312/2034127314 [ 32.275208][ T5175] tipc: Failed to remove unknown binding: 66,0,0/0:2034127312/2034127313 [ 32.281243][ T5175] loop1: detected capacity change from 0 to 512 [ 32.292527][ T5175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.305076][ T5175] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.307041][ T5175] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.326593][ T5175] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 32.328831][ T5175] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 32.328871][ T5175] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.74: Failed to acquire dquot type 1 [ 32.328893][ T5175] loop1: lost filesystem error report for type 5 error -117 [ 32.333986][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 32.334000][ C0] EXT4-fs (loop1): initial error at time 32: ext4_acquire_dquot:7069 [ 32.334015][ C0] EXT4-fs (loop1): last error at time 32: ext4_acquire_dquot:7069 [ 32.359618][ T4710] Bluetooth: hci3: Unknown advertising packet type: 0x16 [ 32.361496][ T5175] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.74: corrupted inode contents [ 32.368865][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.374143][ T5175] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.74: mark_inode_dirty error [ 32.374188][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.378148][ T5175] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.74: corrupted inode contents [ 32.378173][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.387308][ T5175] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.74: mark_inode_dirty error [ 32.387356][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.389330][ T5175] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.74: corrupted inode contents [ 32.389348][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.397899][ T5175] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 32.397939][ T5175] loop1: lost filesystem error report for type 5 error -117 [ 32.423149][ T5175] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.74: corrupted inode contents [ 32.423224][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.428440][ T5175] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.74: mark_inode_dirty error [ 32.428482][ T5175] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 32.428960][ T5175] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 32.428985][ T5175] loop1: lost filesystem error report for type 5 error -117 [ 32.433576][ T5175] EXT4-fs (loop1): 1 truncate cleaned up [ 32.437235][ T5175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.471481][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.546820][ T5186] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.723754][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.727613][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.729656][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 32.782207][ T5196] Injecting memory failure for pfn 0x13f146 at process virtual address 0x20a07000 [ 32.791690][ T5196] Memory failure: 0x13f146: Sending SIGBUS to syz.4.83:5196 due to hardware memory corruption [ 32.795203][ T5196] Memory failure: 0x13f146: recovery action for dirty LRU page: Recovered [ 32.814728][ T9] tipc: Node number set to 2886997007 [ 32.850296][ T5200] loop4: detected capacity change from 0 to 512 [ 32.852395][ T5200] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.870261][ T5200] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 32.872686][ T5200] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.84: attempt to clear invalid blocks 2 len 1 [ 32.872727][ T5200] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.875512][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 32.875530][ C0] EXT4-fs (loop4): initial error at time 32: ext4_clear_blocks:876: inode 13 [ 32.875547][ C0] EXT4-fs (loop4): last error at time 32: ext4_clear_blocks:876: inode 13 [ 32.883367][ T5200] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.890464][ T5200] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.84: invalid indirect mapped block 1819239214 (level 0) [ 32.893828][ T5200] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.895305][ T5200] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.84: invalid indirect mapped block 1819239214 (level 1) [ 32.895353][ T5200] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.903404][ T5200] EXT4-fs (loop4): 1 truncate cleaned up [ 32.907228][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.948380][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.987092][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 33.078321][ T30] audit: type=1326 audit(33.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa29782e8 code=0x7ffc0000 [ 33.081357][ T30] audit: type=1326 audit(33.070:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa29782e8 code=0x7ffc0000 [ 33.085390][ T30] audit: type=1326 audit(33.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa29782e8 code=0x7ffc0000 [ 33.085411][ T30] audit: type=1326 audit(33.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa29782e8 code=0x7ffc0000 [ 33.085426][ T30] audit: type=1326 audit(33.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa2977fe0 code=0x7ffc0000 [ 33.085441][ T30] audit: type=1326 audit(33.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa297804c code=0x7ffc0000 [ 33.085458][ T30] audit: type=1326 audit(33.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa2956ff8 code=0x7ffc0000 [ 33.085473][ T30] audit: type=1326 audit(33.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5220 comm="syz.2.91" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffa29792e8 code=0x7ffc0000 [ 33.128867][ T5219] loop4: detected capacity change from 0 to 1024 [ 33.146157][ T5219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.149308][ T5219] EXT4-fs error (device loop4): ext4_lookup:1784: inode #2: comm syz.4.89: 'file2' linked to parent dir [ 33.154976][ T5219] EXT4-fs (loop4): Remounting filesystem read-only [ 33.161110][ T5229] loop2: detected capacity change from 0 to 1024 [ 33.161517][ T5229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.183016][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.191572][ T5229] EXT4-fs (loop2): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.192643][ T5238] ublk_ctrl_add_dev: invalid recovery flags 10 [ 33.220388][ T5233] loop3: detected capacity change from 0 to 4096 [ 33.223092][ T5233] EXT4-fs: Ignoring removed orlov option [ 33.229252][ T5229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.93: bg 0: block 112: padding at end of block bitmap is not set [ 33.233217][ T5233] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.236745][ T5229] EXT4-fs (loop2): Remounting filesystem read-only [ 33.239900][ T5229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.93'. [ 33.242696][ T5233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.265097][ T5229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.270702][ T5233] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 33.273518][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 33.312444][ T5229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.316980][ T5229] bond0 (unregistering): Released all slaves [ 33.321829][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 33.337079][ T5257] gre1: entered allmulticast mode [ 33.354740][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.361605][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 33.489428][ T5271] overlayfs: refusing to follow metacopy origin for (file0/file2) [ 33.498363][ T5278] overlay: filesystem on ./file0 not supported as upperdir [ 33.498776][ T5279] overlayfs: refusing to follow metacopy origin for (file0/file1) [ 33.500981][ T5282] overlayfs: overlapping lowerdir path [ 33.503475][ T5277] overlayfs: refusing to follow metacopy origin for (file0/file2) [ 34.027059][ T5301] loop1: detected capacity change from 0 to 512 [ 34.028403][ T5301] overlayfs: failed lookup in lower (newroot/19, name='file0', err=-40): overlapping layers [ 34.029151][ T5301] overlayfs: failed lookup in lower (newroot/19, name='file0', err=-40): overlapping layers [ 34.087918][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.109950][ T5306] fuse: Bad value for 'fd' [ 34.137160][ T5308] loop1: detected capacity change from 0 to 1024 [ 34.138637][ T5308] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 34.178043][ T5310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.108'. [ 34.298325][ T5315] EXT4-fs: Ignoring removed oldalloc option [ 34.301525][ T5315] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.303599][ T5314] sctp: [Deprecated]: syz.4.111 (pid 5314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 34.303599][ T5314] Use struct sctp_sack_info instead [ 34.334078][ T5315] EXT4-fs (loop3): 1 truncate cleaned up [ 34.334696][ T5315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.363250][ T5315] pim6reg: entered allmulticast mode [ 34.366250][ T5315] pim6reg: left allmulticast mode [ 34.452819][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.471562][ T5324] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 34.474918][ T5324] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.478257][ T5324] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.114: iget: special inode unallocated [ 34.481111][ T5324] EXT4-fs (loop4): Remounting filesystem read-only [ 34.481197][ T5324] EXT4-fs (loop4): no journal found [ 34.481214][ T5324] EXT4-fs (loop4): can't get journal size [ 34.484969][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 34.484985][ C1] EXT4-fs (loop4): initial error at time 34: ext4_get_journal_inode:5927: inode 32 [ 34.485000][ C1] EXT4-fs (loop4): last error at time 34: ext4_get_journal_inode:5927: inode 32 [ 34.485325][ T5326] FAULT_INJECTION: forcing a failure. [ 34.485325][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 34.485341][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT [ 34.485351][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.485357][ T5326] Call trace: [ 34.485360][ T5326] show_stack+0x2c/0x3c (C) [ 34.485379][ T5326] __dump_stack+0x30/0x40 [ 34.485392][ T5326] dump_stack_lvl+0xd8/0x12c [ 34.485403][ T5326] dump_stack+0x1c/0x28 [ 34.485414][ T5326] should_fail_ex+0x41c/0x590 [ 34.485427][ T5326] should_failslab+0xc4/0x120 [ 34.485439][ T5326] kmem_cache_alloc_noprof+0x94/0x5d4 [ 34.485453][ T5326] security_file_alloc+0x3c/0x300 [ 34.485463][ T5326] init_file+0x90/0x28c [ 34.485471][ T5326] alloc_empty_file+0x80/0x1cc [ 34.485479][ T5326] alloc_file+0x58/0x98 [ 34.485493][ T5326] alloc_file_pseudo+0xe0/0x198 [ 34.485501][ T5326] __anon_inode_getfile+0x118/0x1c8 [ 34.485514][ T5326] __anon_inode_getfd+0x70/0xf4 [ 34.485526][ T5326] anon_inode_getfd+0x44/0x58 [ 34.485538][ T5326] do_inotify_init+0x2d4/0x408 [ 34.485548][ T5326] __arm64_sys_inotify_init1+0x40/0x54 [ 34.485558][ T5326] invoke_syscall+0x98/0x244 [ 34.485570][ T5326] el0_svc_common+0xec/0x23c [ 34.485582][ T5326] do_el0_svc+0x4c/0x5c [ 34.485593][ T5326] el0_svc+0x64/0x260 [ 34.485604][ T5326] el0t_64_sync_handler+0x44/0x104 [ 34.485613][ T5326] el0t_64_sync+0x198/0x19c [ 34.508700][ T5324] EXT4-fs (loop4): filesystem is read-only [ 34.509162][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.591303][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.916572][ T5341] set_capacity_and_notify: 2 callbacks suppressed [ 34.916619][ T5341] loop0: detected capacity change from 0 to 128 [ 34.936497][ T5341] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.948647][ T5345] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 34.968530][ T5345] loop1: detected capacity change from 0 to 512 [ 34.973509][ T5345] ext4: Bad value for 'min_batch_time' [ 35.119601][ T5349] ptrace attach of ""[5350] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5349] [ 35.629354][ T5358] loop3: detected capacity change from 0 to 512 [ 35.680557][ T5358] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.680622][ T5358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 35.680688][ T5358] System zones: 0-1, 15-15, 18-18, 34-34 [ 35.681207][ T5358] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.681706][ T5358] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 35.681739][ T5358] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 35.697175][ T5358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.121: bg 0: block 40: padding at end of block bitmap is not set [ 35.697240][ T5358] loop3: lost filesystem error report for type 5 error -117 [ 35.702182][ T5358] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 35.702210][ T5358] loop3: lost filesystem error report for type 5 error -117 [ 35.705631][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 35.705643][ C0] EXT4-fs (loop3): initial error at time 35: ext4_validate_block_bitmap:445 [ 35.705656][ C0] EXT4-fs (loop3): last error at time 35: ext4_mb_clear_bb:6680 [ 35.715878][ T5358] EXT4-fs (loop3): 1 truncate cleaned up [ 35.719156][ T5358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.426965][ T4713] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.459538][ T5364] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 36.567450][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.624224][ T5370] loop0: detected capacity change from 0 to 1024 [ 36.647892][ T5367] loop4: detected capacity change from 0 to 128 [ 36.650774][ T5367] vfat: Unknown parameter 'nl80211' [ 36.829528][ T5393] netlink: 43 bytes leftover after parsing attributes in process `syz.3.130'. [ 36.870109][ T5398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.131'. [ 36.884346][ T5398] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 36.907693][ T5406] loop0: detected capacity change from 0 to 512 [ 36.908389][ T5406] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.910318][ T5406] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.132: inode has both inline data and extents flags [ 36.910428][ T5406] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.132: couldn't read orphan inode 15 (err -117) [ 36.910440][ T5406] loop0: lost filesystem error report for type 5 error -117 [ 36.910916][ T5406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.933263][ T5406] fscrypt: AES-256-XTS using blk-crypto-fallback [ 36.954966][ T5398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.955404][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 36.985342][ T5406] veth3: entered allmulticast mode [ 36.987602][ T5406] bond1: (slave veth3): Enslaving as an active interface with an up link [ 37.000758][ T5398] bridge2: entered promiscuous mode [ 37.005054][ T5398] bond1: (slave bridge2): making interface the new active one [ 37.009707][ T5398] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 37.057630][ T5398] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 37.086804][ T5417] veth5: entered allmulticast mode [ 37.087900][ T5417] bond1: (slave veth5): Enslaving as an active interface with an up link [ 37.146247][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.340727][ T5428] overlayfs: failed to resolve './file0': -2 [ 37.544713][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.546022][ T5434] ip6gre1: entered allmulticast mode [ 37.552025][ T383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.627225][ T5438] fuse: Bad value for 'fd' [ 37.645805][ T5444] Injecting memory failure for pfn 0x107174 at process virtual address 0x20289000 [ 37.660365][ T5444] Memory failure: 0x107174: failed to unmap page (folio mapcount=1) [ 37.660400][ T5444] Memory failure: 0x107174: recovery action for unmapping failed page: Failed [ 37.676372][ T5447] tipc: Started in network mode [ 37.676416][ T5447] tipc: Node identity 4, cluster identity 4711 [ 37.676426][ T5447] tipc: Node number set to 4 [ 37.817447][ T5450] loop0: detected capacity change from 0 to 2048 [ 37.837109][ T5450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.840882][ T5450] EXT4-fs (loop0): shut down requested (1) [ 37.871010][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.261557][ T5470] loop0: detected capacity change from 0 to 1024 [ 38.283581][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.347567][ T5478] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 38.350476][ T5481] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 38.502541][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.148'. [ 38.564640][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.909876][ T5521] ublk_ctrl_add_dev: dev id not match 4294967295 0 [ 38.929316][ T5513] bond2: (slave vlan2): making interface the new active one [ 38.930929][ T5513] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 38.930977][ T9] bond_slave_0: entered promiscuous mode [ 38.930990][ T9] bond_slave_1: entered promiscuous mode [ 39.067716][ T276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.160172][ T5537] loop0: detected capacity change from 0 to 512 [ 39.178530][ T5537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.179894][ T276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.201651][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.210713][ T4709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.215405][ T4709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.217290][ T4709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.219555][ T4709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.221355][ T4709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.270768][ T276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.279358][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.358517][ T276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.366564][ T5552] FAULT_INJECTION: forcing a failure. [ 39.366564][ T5552] name failslab, interval 1, probability 0, space 0, times 0 [ 39.366604][ T5552] CPU: 0 UID: 0 PID: 5552 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT [ 39.366621][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.366628][ T5552] Call trace: [ 39.366631][ T5552] show_stack+0x2c/0x3c (C) [ 39.366650][ T5552] __dump_stack+0x30/0x40 [ 39.366661][ T5552] dump_stack_lvl+0xd8/0x12c [ 39.366670][ T5552] dump_stack+0x1c/0x28 [ 39.366680][ T5552] should_fail_ex+0x41c/0x590 [ 39.366691][ T5552] should_failslab+0xc4/0x120 [ 39.366701][ T5552] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 39.366712][ T5552] shmem_alloc_inode+0x2c/0x48 [ 39.366723][ T5552] alloc_inode+0x68/0x198 [ 39.366732][ T5552] new_inode+0x20/0x50 [ 39.366741][ T5552] shmem_get_inode+0xac/0x788 [ 39.366751][ T5552] __shmem_file_setup+0x168/0x284 [ 39.366760][ T5552] shmem_file_setup+0x40/0x54 [ 39.366769][ T5552] memfd_alloc_file+0x9c/0x2f0 [ 39.366778][ T5552] __arm64_sys_memfd_create+0x318/0x3ec [ 39.366786][ T5552] invoke_syscall+0x98/0x244 [ 39.366796][ T5552] el0_svc_common+0xec/0x23c [ 39.366806][ T5552] do_el0_svc+0x4c/0x5c [ 39.366815][ T5552] el0_svc+0x64/0x260 [ 39.366824][ T5552] el0t_64_sync_handler+0x44/0x104 [ 39.366833][ T5552] el0t_64_sync+0x198/0x19c [ 39.574759][ T5569] netlink: 56 bytes leftover after parsing attributes in process `syz.4.160'. [ 39.619477][ T5571] fuse: Bad value for 'fd' [ 39.628702][ T276] bridge_slave_1: left allmulticast mode [ 39.628750][ T276] bridge_slave_1: left promiscuous mode [ 39.629247][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.637656][ T276] bridge_slave_0: left allmulticast mode [ 39.637688][ T276] bridge_slave_0: left promiscuous mode [ 39.637775][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.757011][ T276] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 39.853183][ T276] bond1 (unregistering): (slave bridge2): Releasing active interface [ 39.906776][ T276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.950805][ T276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.987041][ T276] bond0 (unregistering): Released all slaves [ 39.993139][ T276] bond1 (unregistering): Released all slaves [ 40.074635][ T276] tipc: Disabling bearer [ 40.074850][ T276] tipc: Left network mode [ 40.254799][ T5595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.165'. [ 40.345687][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.395169][ T5607] loop0: detected capacity change from 0 to 8192 [ 40.396615][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 40.401634][ T5607] vfat: Unknown parameter 'ìc"- ÎÊÄÐ7#ñÉ2û;ºT³¦ªWñ­.™àæz¹ÿÒ' [ 40.446817][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.446889][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.446965][ T5541] bridge_slave_0: entered allmulticast mode [ 40.447386][ T5541] bridge_slave_0: entered promiscuous mode [ 40.448100][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.448127][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.448186][ T5541] bridge_slave_1: entered allmulticast mode [ 40.448595][ T5541] bridge_slave_1: entered promiscuous mode [ 40.490970][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 40.568300][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.626103][ T5638] loop0: detected capacity change from 0 to 512 [ 40.626446][ T5638] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 40.629338][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.658582][ T5627] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 40.658619][ T5627] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 40.673014][ T276] hsr_slave_0: left promiscuous mode [ 40.675177][ T276] hsr_slave_1: left promiscuous mode [ 40.675593][ T276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.675625][ T276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.676362][ T276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.676372][ T276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.689811][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 40.693121][ T276] veth1_macvtap: left promiscuous mode [ 40.693205][ T276] veth0_macvtap: left promiscuous mode [ 40.693307][ T276] veth1_vlan: left promiscuous mode [ 40.693349][ T276] veth0_vlan: left promiscuous mode [ 40.966676][ T276] team0 (unregistering): Port device team_slave_1 removed [ 40.992416][ T276] team0 (unregistering): Port device team_slave_0 removed [ 41.172035][ T5541] team0: Port device team_slave_0 added [ 41.177479][ T5541] team0: Port device team_slave_1 added [ 41.193931][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.203447][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.203470][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.215765][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.215796][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.215809][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.237892][ T5541] hsr_slave_0: entered promiscuous mode [ 41.238461][ T5541] hsr_slave_1: entered promiscuous mode [ 41.238679][ T5541] debugfs: 'hsr0' already exists in 'hsr' [ 41.238690][ T5541] Cannot create hsr debugfs directory [ 41.284824][ T4709] Bluetooth: hci3: command tx timeout [ 41.421211][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.455763][ T5541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.459042][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.459858][ T5541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.465910][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.466364][ T5541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.474418][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.474785][ T5541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.481203][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.557517][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.560841][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.568450][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.568516][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.571738][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.571787][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.684030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 41.851345][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.877073][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.989621][ T5541] veth0_vlan: entered promiscuous mode [ 41.996631][ T5541] veth1_vlan: entered promiscuous mode [ 42.013923][ T5541] veth0_macvtap: entered promiscuous mode [ 42.019798][ T5541] veth1_macvtap: entered promiscuous mode [ 42.036696][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.041522][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.053533][ T301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.053691][ T301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.053719][ T301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.053734][ T301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.125957][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.125990][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.149057][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.149095][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.246981][ T5712] Set syz1 is full, maxelem 1029 reached [ 42.271684][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.368049][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.177'. [ 42.385287][ T5717] loop5: detected capacity change from 0 to 512 [ 42.385838][ T5717] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.414708][ T5717] syz.5.177: attempt to access beyond end of device [ 42.414708][ T5717] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 42.418727][ T5717] syz.5.177: attempt to access beyond end of device [ 42.418727][ T5717] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 42.436305][ T5717] syz.5.177: attempt to access beyond end of device [ 42.436305][ T5717] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 42.724179][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.861358][ T4710] Bluetooth: hci0: adv larger than maximum supported [ 42.861827][ T4710] Bluetooth: hci0: Malformed LE Event: 0x0d [ 43.030054][ T5732] fuse: blksize only supported for fuseblk [ 43.337139][ T5737] loop5: detected capacity change from 0 to 4096 [ 43.339383][ T5737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.341168][ T5737] EXT4-fs (loop5): Test dummy encryption mode enabled [ 43.357361][ T5737] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 43.357432][ T5737] System zones: 0-5 [ 43.361036][ T5737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.368923][ T4710] Bluetooth: hci3: command tx timeout [ 43.393455][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 43.395003][ T30] audit: type=1326 audit(43.380:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.399949][ T30] audit: type=1326 audit(43.390:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.408199][ T30] audit: type=1326 audit(43.400:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.408241][ T30] audit: type=1326 audit(43.400:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.408265][ T30] audit: type=1326 audit(43.400:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.425337][ T30] audit: type=1326 audit(43.410:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb0d5b1ac code=0x7ffc0000 [ 43.430473][ T30] audit: type=1326 audit(43.420:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.435734][ T30] audit: type=1326 audit(43.420:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.451241][ T30] audit: type=1326 audit(43.440:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.451282][ T30] audit: type=1326 audit(43.440:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5736 comm="syz.5.182" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d782e8 code=0x7ffc0000 [ 43.701485][ T5541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.909517][ T5747] capability: warning: `syz.5.184' uses 32-bit capabilities (legacy support in use) [ 44.077278][ T5764] netlink: 'syz.0.186': attribute type 4 has an invalid length. [ 44.093163][ T5764] netlink: 'syz.0.186': attribute type 4 has an invalid length. [ 44.100479][ T5764] kernel profiling enabled (shift: 9) [ 44.165908][ T5766] No control pipe specified [ 44.237347][ T5769] process 'syz.5.188' launched './file1' with NULL argv: empty string added [ 44.748811][ T5779] loop5: detected capacity change from 0 to 128 [ 44.983423][ T5788] loop5: detected capacity change from 0 to 1024 [ 44.987846][ T5788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.990418][ T5788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.992690][ T5788] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.001492][ T5788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.050676][ T5541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.101624][ T5791] loop5: detected capacity change from 0 to 512 [ 45.108230][ T5791] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.131190][ T5791] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 45.131239][ T5791] syz.5.194: attempt to access beyond end of device [ 45.131239][ T5791] loop5: rw=8388608, sector=17179852715, nr_sectors = 1 limit=512 [ 45.131922][ T5791] syz.5.194: attempt to access beyond end of device [ 45.131922][ T5791] loop5: rw=2049, sector=17179852706, nr_sectors = 8 limit=512 [ 45.139956][ T5791] syz.5.194: attempt to access beyond end of device [ 45.139956][ T5791] loop5: rw=8388608, sector=17179852714, nr_sectors = 1 limit=512 [ 45.140034][ T5791] Buffer I/O error on dev loop5, logical block 17179852714, async page read [ 45.140052][ T5791] syz.5.194: attempt to access beyond end of device [ 45.140052][ T5791] loop5: rw=8388608, sector=17179852715, nr_sectors = 1 limit=512 [ 45.140063][ T5791] Buffer I/O error on dev loop5, logical block 17179852715, async page read [ 45.140073][ T5791] syz.5.194: attempt to access beyond end of device [ 45.140073][ T5791] loop5: rw=8388608, sector=17179852716, nr_sectors = 1 limit=512 [ 45.140084][ T5791] Buffer I/O error on dev loop5, logical block 17179852716, async page read [ 45.140094][ T5791] syz.5.194: attempt to access beyond end of device [ 45.140094][ T5791] loop5: rw=8388608, sector=17179852717, nr_sectors = 1 limit=512 [ 45.140104][ T5791] Buffer I/O error on dev loop5, logical block 17179852717, async page read [ 45.140114][ T5791] syz.5.194: attempt to access beyond end of device [ 45.140114][ T5791] loop5: rw=8388608, sector=17179852718, nr_sectors = 1 limit=512 [ 45.140124][ T5791] Buffer I/O error on dev loop5, logical block 17179852718, async page read [ 45.140136][ T5791] Buffer I/O error on dev loop5, logical block 17179852719, async page read [ 45.140147][ T5791] Buffer I/O error on dev loop5, logical block 17179852720, async page read [ 45.140158][ T5791] Buffer I/O error on dev loop5, logical block 17179852721, async page read [ 45.196778][ T5795] loop0: detected capacity change from 0 to 2048 [ 45.218334][ T5795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.224979][ T5795] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.228847][ T5795] EXT4-fs (loop0): Remounting filesystem read-only [ 45.328537][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.387245][ T5802] loop5: detected capacity change from 0 to 2048 [ 45.388534][ T5804] loop0: detected capacity change from 0 to 512 [ 45.435635][ T5804] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.197: corrupted in-inode xattr: invalid ea_ino [ 45.435689][ T5804] fserror_report: 2 callbacks suppressed [ 45.435714][ T5804] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.438987][ T5804] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.197: couldn't read orphan inode 15 (err -117) [ 45.439012][ T5804] loop0: lost filesystem error report for type 5 error -117 [ 45.444140][ T4710] Bluetooth: hci3: command tx timeout [ 45.445094][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 45.445113][ C1] EXT4-fs (loop0): initial error at time 45: ext4_iget_extra_inode:5210: inode 15 [ 45.445132][ C1] EXT4-fs (loop0): last error at time 45: ext4_orphan_get:1408 [ 45.446839][ T5804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.450441][ T5802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.572511][ T5541] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.692199][ T5817] evm: overlay not supported [ 45.872457][ T5819] gtp0: entered promiscuous mode [ 45.873639][ T5819] gtp0: entered allmulticast mode [ 45.877912][ T5819] team0: Device gtp0 is of different type [ 46.140512][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 46.162613][ T5812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.262032][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.272863][ T5360] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.323201][ T5831] xt_CONNSECMARK: invalid mode: 66 [ 46.370056][ T4709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.372008][ T4709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.373920][ T4709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.378473][ T4709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.382667][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 46.385805][ T4709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.415043][ T5833] bond1: option packets_per_slave: invalid value (18446744071562067968) [ 46.415076][ T5833] bond1: option packets_per_slave: allowed values 0 - 65535 [ 46.426829][ T5833] bond1 (unregistering): Released all slaves [ 46.455915][ T5360] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.528534][ T5360] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.562577][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 46.593451][ T5850] loop0: detected capacity change from 0 to 512 [ 46.634919][ T5360] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.638193][ T5850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.641734][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.642881][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.643117][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.643299][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.647089][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.647917][ T5850] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 46.648008][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.663327][ T5850] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 46.770020][ T4713] EXT4-fs warning (device loop0): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 46.773025][ T4713] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 46.776169][ T4713] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.781058][ T4713] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 46.781599][ T4713] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 46.781856][ T4713] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 46.782435][ T4713] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.782887][ T4713] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 46.837223][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.974278][ T5360] bridge_slave_1: left allmulticast mode [ 46.974314][ T5360] bridge_slave_1: left promiscuous mode [ 46.974411][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.993559][ T5360] bridge_slave_0: left allmulticast mode [ 46.993598][ T5360] bridge_slave_0: left promiscuous mode [ 46.993693][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.130408][ T5887] fuse: Bad value for 'fd' [ 47.260985][ T5360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.266401][ T5894] Injecting memory failure for pfn 0x13c0fd at process virtual address 0x20a07000 [ 47.273263][ T5895] Injecting memory failure for pfn 0x13c0fd at process virtual address 0x20a07000 [ 47.277748][ T5894] Memory failure: 0x13c0fd: Sending SIGBUS to syz.0.218:5894 due to hardware memory corruption [ 47.277789][ T5894] Memory failure: 0x13c0fd: recovery action for dirty LRU page: Recovered [ 47.278679][ T5895] Memory failure: 0x13c0fd: Sending SIGBUS to syz.0.218:5895 due to hardware memory corruption [ 47.278746][ T5895] Memory failure: 0x13c0fd: recovery action for already poisoned page: Failed [ 47.296892][ T5360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.326472][ T5360] bond0 (unregistering): Released all slaves [ 47.367392][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 47.943156][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.945976][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.947594][ T5835] bridge_slave_0: entered allmulticast mode [ 47.952455][ T5835] bridge_slave_0: entered promiscuous mode [ 47.956355][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.958603][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.958674][ T5835] bridge_slave_1: entered allmulticast mode [ 47.959099][ T5835] bridge_slave_1: entered promiscuous mode [ 48.040942][ T5956] loop0: detected capacity change from 0 to 128 [ 48.043665][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.046985][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.052960][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.068812][ T5360] hsr_slave_0: left promiscuous mode [ 48.070064][ T5360] hsr_slave_1: left promiscuous mode [ 48.070357][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.070368][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.071415][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.071426][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.088949][ T5360] veth1_macvtap: left promiscuous mode [ 48.089008][ T5360] veth0_macvtap: left promiscuous mode [ 48.089062][ T5360] veth1_vlan: left promiscuous mode [ 48.089169][ T5360] veth0_vlan: left promiscuous mode [ 48.329509][ T5360] team0 (unregistering): Port device team_slave_1 removed [ 48.341873][ T5360] team0 (unregistering): Port device team_slave_0 removed [ 48.424589][ T4710] Bluetooth: hci3: command tx timeout [ 48.448811][ T5959] fuse: Bad value for 'fd' [ 48.608722][ T5835] team0: Port device team_slave_0 added [ 48.627526][ T5835] team0: Port device team_slave_1 added [ 48.694494][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.694519][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.694545][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.713004][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.713035][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.713052][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.727297][ T5970] syz_tun: entered allmulticast mode [ 48.752124][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 48.766853][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 48.836813][ T5835] hsr_slave_0: entered promiscuous mode [ 48.841744][ T5835] hsr_slave_1: entered promiscuous mode [ 48.843408][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 48.846522][ T5835] Cannot create hsr debugfs directory [ 48.848400][ T5969] syz_tun: left allmulticast mode [ 48.851426][ T5974] bond1: entered promiscuous mode [ 48.851469][ T5974] bond1: entered allmulticast mode [ 48.902670][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 48.902707][ T30] audit: type=1326 audit(48.890:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5985 comm="syz.0.233" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x0 [ 48.928928][ T5989] netlink: 'syz.4.234': attribute type 10 has an invalid length. [ 48.948814][ T5989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.949659][ T5989] team0: Port device netdevsim1 added [ 48.954567][ T5989] netlink: 'syz.4.234': attribute type 10 has an invalid length. [ 49.006470][ T5993] fuse: Bad value for 'fd' [ 49.024593][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.082829][ T5835] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.087858][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.089931][ T5835] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.096159][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.097075][ T5835] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.099929][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.100737][ T5835] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.103691][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.192170][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.213255][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.221456][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.221511][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.231617][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.231673][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.488459][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.507627][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.668796][ T5835] veth0_vlan: entered promiscuous mode [ 49.676487][ T5835] veth1_vlan: entered promiscuous mode [ 49.703048][ T5835] veth0_macvtap: entered promiscuous mode [ 49.709024][ T5835] veth1_macvtap: entered promiscuous mode [ 49.719263][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.720336][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.764052][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 49.775595][ T276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.776637][ T276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.776658][ T276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.776676][ T276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.796322][ T6045] loop0: detected capacity change from 0 to 2048 [ 49.837982][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.838017][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.841762][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.855386][ T6045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.870397][ T276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.870430][ T276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.967289][ T4709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 49.971441][ T4709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 49.976140][ T4709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 49.979034][ T4709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 49.981676][ T4709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 50.360976][ T5360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.447820][ T5360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.484491][ T4709] Bluetooth: hci3: command tx timeout [ 50.529342][ T5360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.620370][ T5360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.643015][ T6077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.241'. [ 50.959775][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 50.997228][ T5360] bridge_slave_1: left allmulticast mode [ 50.997269][ T5360] bridge_slave_1: left promiscuous mode [ 50.997376][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.003085][ T5360] bridge_slave_0: left allmulticast mode [ 51.003104][ T5360] bridge_slave_0: left promiscuous mode [ 51.003205][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.028742][ T6101] loop6: detected capacity change from 0 to 128 [ 51.355688][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.355739][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.355851][ T6053] bridge_slave_0: entered allmulticast mode [ 51.356344][ T6053] bridge_slave_0: entered promiscuous mode [ 51.357919][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.361256][ T6111] loop6: detected capacity change from 0 to 512 [ 51.361650][ T6111] EXT4-fs: Ignoring removed bh option [ 51.370878][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.370995][ T6053] bridge_slave_1: entered allmulticast mode [ 51.450872][ T6111] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.450921][ T6111] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 51.450946][ T6111] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.247: Corrupt directory, running e2fsck is recommended [ 51.463109][ T6111] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 51.463200][ T6111] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.247: corrupted in-inode xattr: e_name out of bounds [ 51.463239][ T6111] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.465073][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 51.465089][ C0] EXT4-fs (loop6): initial error at time 51: ext4_iget_extra_inode:5210: inode 15 [ 51.465108][ C0] EXT4-fs (loop6): last error at time 51: ext4_iget_extra_inode:5210: inode 15 [ 51.477820][ T6111] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.247: couldn't read orphan inode 15 (err -117) [ 51.477865][ T6111] loop6: lost filesystem error report for type 5 error -117 [ 51.486199][ T6111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.492025][ T6053] bridge_slave_1: entered promiscuous mode [ 51.769229][ T6111] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.769277][ T6111] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 51.769314][ T6111] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.247: Corrupt directory, running e2fsck is recommended [ 51.831149][ T6111] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.831197][ T6111] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 51.831210][ T6111] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.247: Corrupt directory, running e2fsck is recommended [ 51.910894][ T5835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.008067][ T4709] Bluetooth: hci5: command tx timeout [ 52.009724][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.010707][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.387889][ T6135] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 52.397691][ T6053] team0: Port device team_slave_0 added [ 52.419075][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 52.419111][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 52.422643][ T4710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.423818][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.424473][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.425644][ T4710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.425849][ T4710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.439139][ T6136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 52.447827][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 52.447922][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 52.449542][ T6053] team0: Port device team_slave_1 added [ 52.475492][ T5360] hsr_slave_0: left promiscuous mode [ 52.476912][ T5360] hsr_slave_1: left promiscuous mode [ 52.478184][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.479544][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.481989][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.483550][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.505262][ T5360] veth1_macvtap: left promiscuous mode [ 52.515365][ T5360] veth0_macvtap: left promiscuous mode [ 52.517435][ T5360] veth1_vlan: left promiscuous mode [ 52.518033][ T5360] veth0_vlan: left promiscuous mode [ 52.568030][ T6146] loop0: detected capacity change from 0 to 512 [ 52.568380][ T6146] vfat: Unknown parameter '/dev/video#' [ 52.574465][ T4710] Bluetooth: hci3: command tx timeout [ 53.102069][ T5360] team0 (unregistering): Port device team_slave_1 removed [ 53.110201][ T5360] team0 (unregistering): Port device team_slave_0 removed [ 53.224425][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 53.335385][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.335423][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.344054][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.344943][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.344952][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.344968][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.368994][ T6053] hsr_slave_0: entered promiscuous mode [ 53.369325][ T6053] hsr_slave_1: entered promiscuous mode [ 53.369515][ T6053] debugfs: 'hsr0' already exists in 'hsr' [ 53.369526][ T6053] Cannot create hsr debugfs directory [ 53.439202][ T6175] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 53.537894][ T6182] loop6: detected capacity change from 0 to 128 [ 53.552295][ T6182] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.641585][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 53.652878][ T6053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.655334][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.657180][ T6053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.659877][ T5835] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.663224][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.663551][ T6053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.673286][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.740989][ T6053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.745367][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.819854][ T5360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.840899][ T6217] loop6: detected capacity change from 0 to 4096 [ 53.849926][ T6217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.857937][ T6217] EXT4-fs (loop6): Test dummy encryption mode enabled [ 53.858082][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 53.866235][ T6217] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 53.866314][ T6217] System zones: 0-5 [ 53.869214][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'. [ 53.872951][ T6217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.945683][ T5360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.970315][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.000545][ T5835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.070586][ T5360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.086741][ T4710] Bluetooth: hci5: command tx timeout [ 54.122725][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.123080][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.123182][ T6138] bridge_slave_0: entered allmulticast mode [ 54.130935][ T6138] bridge_slave_0: entered promiscuous mode [ 54.132457][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.132513][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.132590][ T6138] bridge_slave_1: entered allmulticast mode [ 54.136592][ T6138] bridge_slave_1: entered promiscuous mode [ 54.138151][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.211522][ T6265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 54.229412][ T5360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.241929][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.246641][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.258697][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.270450][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.270497][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.279580][ T6138] team0: Port device team_slave_0 added [ 54.288567][ T6138] team0: Port device team_slave_1 added [ 54.298523][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.298568][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.325464][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.325490][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.325519][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.328264][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.328283][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.328308][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.341633][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.365909][ T6138] hsr_slave_0: entered promiscuous mode [ 54.368774][ T6138] hsr_slave_1: entered promiscuous mode [ 54.371744][ T6138] debugfs: 'hsr0' already exists in 'hsr' [ 54.372899][ T6138] Cannot create hsr debugfs directory [ 54.486633][ T4710] Bluetooth: hci2: command tx timeout [ 54.507745][ T5360] bridge_slave_1: left allmulticast mode [ 54.507778][ T5360] bridge_slave_1: left promiscuous mode [ 54.507873][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.514251][ T5360] bridge_slave_0: left allmulticast mode [ 54.515578][ T5360] bridge_slave_0: left promiscuous mode [ 54.515670][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.633833][ T6316] loop0: detected capacity change from 0 to 512 [ 54.647353][ T4710] Bluetooth: hci3: command tx timeout [ 54.667896][ T6316] EXT4-fs (loop0): 1 orphan inode deleted [ 54.670332][ T6316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.699385][ T5360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.710265][ T5360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.747922][ T5360] bond0 (unregistering): Released all slaves [ 54.752688][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 54.934524][ T6138] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 54.937993][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.938696][ T6138] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 54.943482][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.946003][ T6138] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 54.950848][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.963210][ T5360] hsr_slave_0: left promiscuous mode [ 54.966876][ T5360] hsr_slave_1: left promiscuous mode [ 54.967183][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.967195][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.968539][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.968549][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.974911][ T5360] veth1_macvtap: left promiscuous mode [ 54.974956][ T5360] veth0_macvtap: left promiscuous mode [ 54.975012][ T5360] veth1_vlan: left promiscuous mode [ 54.975048][ T5360] veth0_vlan: left promiscuous mode [ 55.086419][ T5360] team0 (unregistering): Port device team_slave_1 removed [ 55.090470][ T5360] team0 (unregistering): Port device team_slave_0 removed [ 55.145630][ T6138] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 55.148650][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.153469][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 55.163543][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.206882][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.224286][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.229522][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.229574][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.237393][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.237446][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.343193][ T6053] veth0_vlan: entered promiscuous mode [ 55.347536][ T6053] veth1_vlan: entered promiscuous mode [ 55.352683][ T6053] veth0_macvtap: entered promiscuous mode [ 55.359782][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.411887][ T6053] veth1_macvtap: entered promiscuous mode [ 55.437340][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.438380][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.442171][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.442325][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.442388][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.442446][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.470073][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 55.509767][ T5360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.509798][ T5360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.539301][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.539335][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.545662][ T6403] loop0: detected capacity change from 0 to 512 [ 55.563256][ T6403] ip_tables: iptables: counters copy to user failed while replacing table [ 55.605674][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.608264][ T6411] loop6: detected capacity change from 0 to 128 [ 55.609427][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 55.668724][ T6411] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.795320][ T6138] veth0_vlan: entered promiscuous mode [ 55.797037][ T6138] veth1_vlan: entered promiscuous mode [ 55.814350][ T6138] veth0_macvtap: entered promiscuous mode [ 55.817285][ T6138] veth1_macvtap: entered promiscuous mode [ 55.824254][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.828288][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.860057][ T301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.876018][ T301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.899113][ T301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.901666][ T301] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.929869][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.929912][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.958788][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.958818][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.038068][ T6449] tipc: Started in network mode [ 56.038097][ T6449] tipc: Node identity -, cluster identity 4711 [ 56.086878][ T6460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.125291][ T6463] loop8: detected capacity change from 0 to 256 [ 56.164516][ T4709] Bluetooth: hci5: command tx timeout [ 56.564453][ T4709] Bluetooth: hci2: command tx timeout [ 56.759409][ T5835] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.845828][ T6503] netlink: 116 bytes leftover after parsing attributes in process `syz.6.291'. [ 56.890027][ T6507] bond1: Removing last ns target with arp_interval on [ 56.926550][ T6507] bond2: Removing last ns target with arp_interval on [ 56.958042][ T6507] bond3: Removing last ns target with arp_interval on [ 56.971654][ T6515] loop7: detected capacity change from 0 to 4096 [ 56.974716][ T6515] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.978969][ T6507] bond4: Removing last ns target with arp_interval on [ 56.982137][ T6502] syzkaller1: entered promiscuous mode [ 56.982182][ T6502] syzkaller1: entered allmulticast mode [ 56.993728][ T6515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.993769][ T6515] EXT4-fs (loop7): Test dummy encryption mode enabled [ 57.006965][ T6515] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 57.007050][ T6515] System zones: 0-5 [ 57.021183][ T6515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.047631][ T6514] mmap: syz.7.293 (6514): VmData 38019072 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 57.063144][ T6507] bond5: Removing last ns target with arp_interval on [ 57.080553][ T6053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.087108][ T6507] bond6: Removing last ns target with arp_interval on [ 57.139263][ T6550] loop7: detected capacity change from 0 to 1024 [ 57.142207][ T6550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.157934][ T6507] bond7: Removing last ns target with arp_interval on [ 57.170101][ T6507] bond8: Removing last ns target with arp_interval on [ 57.187426][ T6507] bond9: Removing last ns target with arp_interval on [ 57.206573][ T6550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.249297][ T6507] bond10: Removing last ns target with arp_interval on [ 57.286767][ T6507] bond11: Removing last ns target with arp_interval on [ 57.303780][ T6053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.342220][ T6507] bond12: Removing last ns target with arp_interval on [ 57.389985][ T6507] bond13: Removing last ns target with arp_interval on [ 57.408181][ T6580] tipc: Failed to remove unknown binding: 66,0,0/0:973644584/973644585 [ 57.411232][ T6580] tipc: Failed to remove unknown binding: 66,0,0/0:973644584/973644585 [ 57.437308][ T6507] bond14: Removing last ns target with arp_interval on [ 57.470192][ T6507] bond15: Removing last ns target with arp_interval on [ 57.505552][ T6507] bond16: Removing last ns target with arp_interval on [ 57.538152][ T6507] bond17: Removing last ns target with arp_interval on [ 57.542758][ T6607] Bluetooth: MGMT ver 1.23 [ 57.561100][ T6599] loop0: detected capacity change from 0 to 2048 [ 57.564942][ T6507] bond18: Removing last ns target with arp_interval on [ 57.613202][ T6617] loop7: detected capacity change from 0 to 1024 [ 57.616754][ T6507] bond19: Removing last ns target with arp_interval on [ 57.623727][ T6599] loop0: detected capacity change from 0 to 256 [ 57.628938][ T6619] loop8: detected capacity change from 0 to 512 [ 57.635170][ T6619] EXT4-fs: Ignoring removed orlov option [ 57.636987][ T6619] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 57.637159][ T6507] bond20: Removing last ns target with arp_interval on [ 57.637899][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 57.667513][ T6619] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2933: inode #15: comm syz.8.304: corrupted xattr block 252: invalid header [ 57.667563][ T6619] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.671871][ T6619] EXT4-fs (loop8): Remounting filesystem read-only [ 57.671911][ T6619] EXT4-fs warning (device loop8): ext4_evict_inode:288: xattr delete (err -117) [ 57.671999][ T6619] EXT4-fs (loop8): 1 orphan inode deleted [ 57.672480][ T6619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.697905][ T6507] bond21: Removing last ns target with arp_interval on [ 57.700846][ T6617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.759245][ T6138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.777375][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.308'. [ 57.783211][ T6507] bond22: Removing last ns target with arp_interval on [ 57.882818][ T6636] netlink: 1136 bytes leftover after parsing attributes in process `syz.8.310'. [ 58.028131][ T6662] loop8: detected capacity change from 0 to 512 [ 58.059424][ T6666] FAULT_INJECTION: forcing a failure. [ 58.059424][ T6666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.059477][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.7.308 Not tainted syzkaller #0 PREEMPT [ 58.059491][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.059504][ T6666] Call trace: [ 58.059508][ T6666] show_stack+0x2c/0x3c (C) [ 58.059529][ T6666] __dump_stack+0x30/0x40 [ 58.059541][ T6666] dump_stack_lvl+0xd8/0x12c [ 58.059553][ T6666] dump_stack+0x1c/0x28 [ 58.059564][ T6666] should_fail_ex+0x41c/0x590 [ 58.059577][ T6666] should_fail+0x14/0x24 [ 58.059587][ T6666] should_fail_usercopy+0x20/0x30 [ 58.059599][ T6666] strncpy_from_user+0x48/0x388 [ 58.059608][ T6666] do_getname+0x84/0x234 [ 58.059618][ T6666] getname_flags+0x2c/0x3c [ 58.059625][ T6666] do_sys_openat2+0xd0/0x1e8 [ 58.059637][ T6666] do_sys_open+0xb0/0xe0 [ 58.059647][ T6666] __arm64_sys_openat+0xa8/0xc4 [ 58.059658][ T6666] invoke_syscall+0x98/0x244 [ 58.059670][ T6666] el0_svc_common+0xec/0x23c [ 58.059681][ T6666] do_el0_svc+0x4c/0x5c [ 58.059692][ T6666] el0_svc+0x64/0x260 [ 58.059703][ T6666] el0t_64_sync_handler+0x44/0x104 [ 58.059712][ T6666] el0t_64_sync+0x198/0x19c [ 58.063264][ T6666] .: renamed from bond0 (while UP) [ 58.070401][ T6662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.120606][ T6678] loop6: detected capacity change from 0 to 2048 [ 58.137450][ T6678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.239305][ T30] audit: type=1326 audit(58.230:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6660 comm="syz.8.318" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b782e8 code=0x0 [ 58.244064][ T4709] Bluetooth: hci5: command tx timeout [ 58.394691][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.318'. [ 58.397841][ T4709] block nbd1: Receive control failed (result -1) [ 58.424758][ T5835] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.443616][ T5835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.511759][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.6.321'. [ 58.644100][ T4709] Bluetooth: hci2: command 0x040f tx timeout [ 58.885352][ T4710] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.885496][ T4710] Bluetooth: hci0: Injecting HCI hardware error event [ 58.886209][ T4709] Bluetooth: hci0: hardware error 0x00 [ 59.731646][ T6053] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.743045][ T6138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.752460][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.754697][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.754915][ T6053] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.762932][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.763199][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.763365][ T6053] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.775792][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.780544][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.780778][ T6053] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.781502][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.781682][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.781818][ T6053] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.782060][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 59.782373][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.782886][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.783336][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.783790][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.786165][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 59.787478][ T6053] EXT4-fs warning (device loop7): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 60.328304][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 60.340311][ T6753] netlink: 'syz.6.334': attribute type 10 has an invalid length. [ 60.354341][ T6753] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 60.490472][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.340'. [ 60.501689][ T6053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.540536][ T301] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.659643][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.661226][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.662742][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.668232][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.672922][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.705776][ T301] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.732412][ T4716] Bluetooth: hci2: command 0x040f tx timeout [ 60.806181][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 60.839942][ T6808] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 60.869005][ T301] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.921663][ T6824] loop0: detected capacity change from 0 to 256 [ 60.962837][ T301] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.058236][ T6831] netlink: 'syz.6.351': attribute type 4 has an invalid length. [ 61.084088][ T4709] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 61.371426][ T301] bridge_slave_1: left allmulticast mode [ 61.371464][ T301] bridge_slave_1: left promiscuous mode [ 61.371572][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.373544][ T301] bridge_slave_0: left allmulticast mode [ 61.373555][ T301] bridge_slave_0: left promiscuous mode [ 61.373616][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.449547][ T6846] FAULT_INJECTION: forcing a failure. [ 61.449547][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 61.449590][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: syz.8.354 Not tainted syzkaller #0 PREEMPT [ 61.449604][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.449610][ T6846] Call trace: [ 61.449613][ T6846] show_stack+0x2c/0x3c (C) [ 61.449632][ T6846] __dump_stack+0x30/0x40 [ 61.449644][ T6846] dump_stack_lvl+0xd8/0x12c [ 61.449656][ T6846] dump_stack+0x1c/0x28 [ 61.449667][ T6846] should_fail_ex+0x41c/0x590 [ 61.449679][ T6846] should_failslab+0xc4/0x120 [ 61.449692][ T6846] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 61.449705][ T6846] hugetlbfs_alloc_inode+0xdc/0x128 [ 61.449715][ T6846] alloc_inode+0x68/0x198 [ 61.449726][ T6846] new_inode+0x20/0x50 [ 61.449736][ T6846] hugetlbfs_get_inode+0x80/0x834 [ 61.449749][ T6846] hugetlb_file_setup+0x270/0x574 [ 61.449761][ T6846] newseg+0x3bc/0x904 [ 61.449771][ T6846] ipcget+0x920/0xce4 [ 61.449779][ T6846] __arm64_sys_shmget+0x128/0x17c [ 61.449789][ T6846] invoke_syscall+0x98/0x244 [ 61.449801][ T6846] el0_svc_common+0xec/0x23c [ 61.449812][ T6846] do_el0_svc+0x4c/0x5c [ 61.449823][ T6846] el0_svc+0x64/0x260 [ 61.449834][ T6846] el0t_64_sync_handler+0x44/0x104 [ 61.449844][ T6846] el0t_64_sync+0x198/0x19c [ 61.481824][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.8.354'. [ 61.555260][ T301] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.576797][ T301] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.615144][ T301] . (unregistering): Released all slaves [ 61.721469][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.722468][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.722561][ T6796] bridge_slave_0: entered allmulticast mode [ 61.723405][ T6796] bridge_slave_0: entered promiscuous mode [ 61.811835][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.812135][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.812238][ T6796] bridge_slave_1: entered allmulticast mode [ 61.816662][ T6796] bridge_slave_1: entered promiscuous mode [ 61.825616][ T6892] loop8: detected capacity change from 0 to 512 [ 61.831987][ T6892] ext4: Unknown parameter 'seclabel' [ 61.869076][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.870441][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.8.362'. [ 61.963752][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.005389][ T6796] team0: Port device team_slave_0 added [ 62.017280][ T6796] team0: Port device team_slave_1 added [ 62.198398][ T4397] 8021q: adding VLAN 0 to HW filter on device eth17 [ 62.201533][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.203156][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.211108][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.567547][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.567575][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.567603][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.665321][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.8.373'. [ 62.682986][ T6934] vlan2: entered promiscuous mode [ 62.683024][ T6934] bridge0: entered promiscuous mode [ 62.691571][ T6796] hsr_slave_0: entered promiscuous mode [ 62.691736][ T6933] 9p: Bad value for 'wfdno' [ 62.692101][ T6796] hsr_slave_1: entered promiscuous mode [ 62.724093][ T4709] Bluetooth: hci1: command tx timeout [ 62.725414][ T301] hsr_slave_0: left promiscuous mode [ 62.732021][ T301] hsr_slave_1: left promiscuous mode [ 62.732570][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.732595][ T301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.740655][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.740697][ T301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.750293][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 62.762463][ T301] veth1_macvtap: left promiscuous mode [ 62.763767][ T301] veth0_macvtap: left promiscuous mode [ 62.765281][ T301] veth1_vlan: left promiscuous mode [ 62.766460][ T301] veth0_vlan: left promiscuous mode [ 62.805406][ T4709] Bluetooth: hci2: command 0x040f tx timeout [ 62.931106][ T6960] netlink: 10 bytes leftover after parsing attributes in process `syz.4.377'. [ 63.031305][ T301] team0 (unregistering): Port device team_slave_1 removed [ 63.043347][ T301] team0 (unregistering): Port device team_slave_0 removed [ 63.100891][ T6972] cgroup: Bad value for 'name' [ 63.314254][ T6995] overlayfs: failed to clone lowerpath [ 63.315028][ T6995] overlayfs: failed to clone lowerpath [ 63.488754][ T6796] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 63.492198][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.495075][ T6796] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 63.497920][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.500043][ T6796] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 63.502945][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.506275][ T6796] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 63.509878][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.541235][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.549823][ T6796] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.557883][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.557955][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.568860][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.568924][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.659089][ T7024] netlink: 84 bytes leftover after parsing attributes in process `syz.0.388'. [ 63.771304][ T7040] netlink: 140 bytes leftover after parsing attributes in process `syz.0.389'. [ 63.879575][ T4397] 8021q: adding VLAN 0 to HW filter on device eth16 [ 63.887061][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.988954][ T6796] veth0_vlan: entered promiscuous mode [ 63.995774][ T6796] veth1_vlan: entered promiscuous mode [ 64.013689][ T6796] veth0_macvtap: entered promiscuous mode [ 64.018443][ T6796] veth1_macvtap: entered promiscuous mode [ 64.032378][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.042501][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.051916][ T7065] netlink: 48 bytes leftover after parsing attributes in process `syz.0.391'. [ 64.051978][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 64.119847][ T7069] netlink: 'syz.6.392': attribute type 13 has an invalid length. [ 64.121528][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.392'. [ 64.184781][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184917][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184966][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.185002][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.225626][ T7069] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 64.247680][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.247745][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.248599][ T7069] netlink: 'syz.6.392': attribute type 142 has an invalid length. [ 64.263378][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.269566][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.486795][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486878][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.504396][ T24] cfg80211: failed to load regulatory.db [ 64.651301][ T7093] Injecting memory failure for pfn 0x13b8d1 at process virtual address 0x20000000 [ 64.664950][ T7093] Memory failure: 0x13b8d1: Sending SIGBUS to syz.4.396:7093 due to hardware memory corruption [ 64.665025][ T7093] Memory failure: 0x13b8d1: recovery action for dirty LRU page: Recovered [ 64.665057][ T7093] Injecting memory failure for pfn 0x12099e at process virtual address 0x20001000 [ 64.665153][ T7093] Memory failure: 0x12099e: Sending SIGBUS to syz.4.396:7093 due to hardware memory corruption [ 64.665173][ T7093] Memory failure: 0x12099e: recovery action for dirty LRU page: Recovered [ 64.665194][ T7093] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20002000 [ 64.665204][ T7093] Memory failure: 0x2190ff: unhandlable page. [ 64.665210][ T7093] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 64.697491][ T4397] 8021q: adding VLAN 0 to HW filter on device eth18 [ 64.804499][ T4709] Bluetooth: hci1: command tx timeout [ 64.828309][ T30] audit: type=1326 audit(64.820:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7105 comm="syz.0.398" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 64.829195][ T30] audit: type=1326 audit(64.820:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7105 comm="syz.0.398" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 64.961044][ T7128] loop0: detected capacity change from 0 to 256 [ 65.043531][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.401'. [ 65.150252][ T30] audit: type=1326 audit(65.140:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.150294][ T30] audit: type=1326 audit(65.140:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.150327][ T30] audit: type=1326 audit(65.140:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.150343][ T30] audit: type=1326 audit(65.140:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.152512][ T30] audit: type=1326 audit(65.140:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.152532][ T30] audit: type=1326 audit(65.140:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.152549][ T30] audit: type=1326 audit(65.140:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.152565][ T30] audit: type=1326 audit(65.140:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.0.403" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87782e8 code=0x7ffc0000 [ 65.186841][ T7136] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.231102][ T7119] overlayfs: failed to resolve './file1': -2 [ 65.304511][ T7143] fuse: Bad value for 'fd' [ 65.738870][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.414'. [ 65.912313][ T7206] loop0: detected capacity change from 0 to 512 [ 65.928999][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.929225][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.961030][ T7206] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 65.977321][ T7206] EXT4-fs (loop0): mount failed [ 66.098879][ T7221] loop0: detected capacity change from 0 to 512 [ 66.105310][ T4397] 8021q: adding VLAN 0 to HW filter on device eth19 [ 66.135525][ T7221] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 66.215057][ T7221] loop0: detected capacity change from 0 to 2048 [ 66.238184][ T7221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.256426][ T7221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.420: bg 0: block 345: padding at end of block bitmap is not set [ 66.266027][ T7221] EXT4-fs (loop0): Remounting filesystem read-only [ 66.289603][ T7231] xt_HMARK: proto mask must be zero with L3 mode [ 66.356690][ T7221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.404158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.435410][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 66.649093][ T7252] loop0: detected capacity change from 0 to 256 [ 66.655172][ T7252] vfat: Unknown parameter 'rootcontext' [ 66.687160][ T7252] xt_policy: output policy not valid in PREROUTING and INPUT [ 66.688829][ T7253] xt_policy: output policy not valid in PREROUTING and INPUT [ 66.884065][ T4709] Bluetooth: hci1: command tx timeout [ 67.450643][ T7306] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.455426][ T7306] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.785147][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.448'. [ 67.821128][ T7347] netlink: 'syz.8.451': attribute type 5 has an invalid length. [ 67.874153][ T7353] overlay: Unknown parameter '/' [ 67.874672][ T7354] overlayfs: overlapping lowerdir path [ 68.153155][ T7378] __nla_validate_parse: 2 callbacks suppressed [ 68.153711][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.453'. [ 68.560571][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.8.458'. [ 68.835004][ T7455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 68.835047][ T7455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 68.840994][ T7455] overlayfs: failed to clone upperpath [ 68.975429][ T4709] Bluetooth: hci1: command tx timeout [ 69.103110][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 69.158985][ T7478] sctp: [Deprecated]: syz.9.468 (pid 7478) Use of int in max_burst socket option deprecated. [ 69.158985][ T7478] Use struct sctp_assoc_value instead [ 69.244532][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 69.354349][ T7506] vlan2: entered promiscuous mode [ 69.354381][ T7506] batadv0: entered promiscuous mode [ 69.354505][ T7506] vlan2: entered allmulticast mode [ 69.354520][ T7506] batadv0: entered allmulticast mode [ 69.382782][ T7508] loop0: detected capacity change from 0 to 512 [ 69.385560][ T7508] EXT4-fs: quotafile must be on filesystem root [ 70.550039][ T7526] loop0: detected capacity change from 0 to 4096 [ 70.666858][ T7536] nftables ruleset with unbound set [ 70.781712][ T7526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.815704][ T7537] overlayfs: failed to clone lowerpath [ 70.961683][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.146769][ T7576] loop0: detected capacity change from 0 to 256 [ 71.490177][ T7576] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.500957][ T7576] ip_tables: iptables: counters copy to user failed while replacing table [ 71.588934][ T7576] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.588976][ T7576] FAT-fs (loop0): Filesystem has been set read-only [ 71.617990][ T4709] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 71.621914][ T4709] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 72.685545][ T7642] loop0: detected capacity change from 0 to 256 [ 72.691521][ T7642] vfat: Unknown parameter 'iocharse' [ 72.792041][ T7643] syz.0.497 (7643): attempted to duplicate a private mapping with mremap. This is not supported. [ 73.190954][ T7656] loop0: detected capacity change from 0 to 1024 [ 73.194506][ T7656] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 73.300340][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.502'. [ 73.487461][ T7702] fuse: Bad value for 'fd' [ 73.686136][ T4709] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 73.686231][ T4716] Bluetooth: hci5: command 0xfc11 tx timeout [ 73.770846][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 73.770891][ T30] audit: type=1326 audit(73.760:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7749 comm="syz.4.518" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f782e8 code=0x0 [ 73.845237][ T7760] overlayfs: failed to resolve './cgroup': -2 [ 73.845358][ T7761] overlayfs: failed to resolve './cgroup': -2 [ 74.223802][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.524'. [ 74.229794][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'. [ 74.255275][ T7441] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.265045][ T7441] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.265090][ T7441] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.265109][ T7441] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.470352][ T7796] fuse: fd is not a fuse device [ 74.583783][ T7808] loop8: detected capacity change from 0 to 256 [ 74.942740][ T7833] syzkaller1: entered promiscuous mode [ 74.942789][ T7833] syzkaller1: entered allmulticast mode [ 74.948238][ T7833] netlink: 48 bytes leftover after parsing attributes in process `syz.8.533'. [ 90.033499][ T4710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.035920][ T4710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.037913][ T4710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.039883][ T4710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.041653][ T4710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.258566][ T4709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.261419][ T4709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.265517][ T4709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.267741][ T4709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.269479][ T4709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.408481][ T4710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.411445][ T4710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.413524][ T4710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.415258][ T4710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.417147][ T4710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.457683][ T4710] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 91.463840][ T4710] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 91.466259][ T4710] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 91.468244][ T4710] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 91.470089][ T4710] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 92.082012][ T4710] Bluetooth: hci5: command tx timeout [ 92.336505][ T4710] Bluetooth: hci6: command tx timeout [ 92.482119][ T4710] Bluetooth: hci7: command tx timeout [ 92.533573][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.533624][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.533703][ T7934] bridge_slave_0: entered allmulticast mode [ 92.534159][ T7934] bridge_slave_0: entered promiscuous mode [ 92.535039][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.535068][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.535128][ T7934] bridge_slave_1: entered allmulticast mode [ 92.535536][ T7934] bridge_slave_1: entered promiscuous mode [ 92.563382][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.774646][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.781051][ T7934] team0: Port device team_slave_0 added [ 92.990097][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.992097][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.993858][ T7939] bridge_slave_0: entered allmulticast mode [ 92.995725][ T7939] bridge_slave_0: entered promiscuous mode [ 92.998436][ T7934] team0: Port device team_slave_1 added [ 93.223981][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.224035][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.224114][ T7939] bridge_slave_1: entered allmulticast mode [ 93.224579][ T7939] bridge_slave_1: entered promiscuous mode [ 93.225217][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.225232][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.225255][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.225902][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.225916][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.225938][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.521755][ T4710] Bluetooth: hci8: command tx timeout [ 94.161642][ T4710] Bluetooth: hci5: command tx timeout [ 94.401666][ T4710] Bluetooth: hci6: command tx timeout [ 94.561950][ T4710] Bluetooth: hci7: command tx timeout [ 95.601515][ T4710] Bluetooth: hci8: command tx timeout [ 96.241400][ T4710] Bluetooth: hci5: command tx timeout [ 96.482844][ T4710] Bluetooth: hci6: command tx timeout [ 96.641359][ T4710] Bluetooth: hci7: command tx timeout [ 97.681234][ T4710] Bluetooth: hci8: command tx timeout [ 98.321189][ T4710] Bluetooth: hci5: command tx timeout [ 98.401301][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.561189][ T4710] Bluetooth: hci6: command tx timeout [ 98.721097][ T4710] Bluetooth: hci7: command tx timeout [ 99.760991][ T4710] Bluetooth: hci8: command tx timeout [ 120.798912][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 46s! [ 120.799002][ C0] Showing busy workqueues and worker pools: [ 120.799012][ C0] workqueue events: flags=0x100 [ 120.799061][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.799082][ C0] in-flight: 4813:perf_sched_delayed for 28s ,1161:xfrm_state_gc_task for 22s ,9:switchdev_deferred_process_work for 27s [ 120.799143][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799160][ C0] pending: delayed_vfree_work [ 120.799184][ C0] workqueue events_unbound: flags=0x2 [ 120.799192][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 120.799207][ C0] in-flight: 497:linkwatch_event for 27s linkwatch_event ,53:toggle_allocation_gate for 46s [ 120.799253][ C0] workqueue events_power_efficient: flags=0x82 [ 120.799261][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.799276][ C0] in-flight: 58:crda_timeout_work for 27s [ 120.799345][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 120.799354][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 120.799368][ C0] in-flight: 7441:addrconf_dad_work for 27s [ 120.799397][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.799407][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799423][ C0] pending: wg_packet_encrypt_worker [ 120.799439][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.799448][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799464][ C0] pending: wg_packet_handshake_receive_worker [ 120.799477][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.799490][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.799510][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 120.799534][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.799544][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799560][ C0] pending: wg_packet_handshake_receive_worker [ 120.799574][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.799583][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.799599][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.799621][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.799630][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799646][ C0] pending: wg_packet_handshake_receive_worker [ 120.799660][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.799669][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799684][ C0] pending: wg_packet_encrypt_worker [ 120.799697][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.799706][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799722][ C0] pending: wg_packet_handshake_receive_worker [ 120.799736][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.799745][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.799761][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 120.799778][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.799787][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799804][ C0] pending: wg_packet_handshake_receive_worker [ 120.799817][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.799825][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799841][ C0] pending: wg_packet_encrypt_worker [ 120.799853][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.799868][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.799896][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.799906][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799922][ C0] pending: wg_packet_handshake_receive_worker [ 120.799935][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.799944][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799960][ C0] pending: wg_packet_encrypt_worker [ 120.799973][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.799982][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.799998][ C0] pending: wg_packet_encrypt_worker [ 120.800011][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.800020][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800036][ C0] pending: wg_packet_handshake_receive_worker [ 120.800050][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.800059][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.800075][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.800094][ C0] workqueue hci2: flags=0x20012 [ 120.800102][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 120.800119][ C0] in-flight: 4709:hci_cmd_sync_work for 24s [ 120.800140][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.800149][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800165][ C0] pending: wg_packet_handshake_receive_worker [ 120.800178][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.800186][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.800200][ C0] pending: wg_packet_handshake_send_worker [ 120.800219][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.800228][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800244][ C0] pending: wg_packet_encrypt_worker [ 120.800257][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.800266][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800282][ C0] pending: wg_packet_handshake_receive_worker [ 120.800295][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.800305][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800321][ C0] pending: wg_packet_encrypt_worker [ 120.800333][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.800342][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800358][ C0] pending: wg_packet_handshake_receive_worker [ 120.800371][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.800380][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800396][ C0] pending: wg_packet_decrypt_worker [ 120.800416][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.800425][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800441][ C0] pending: wg_packet_encrypt_worker [ 120.800454][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.800463][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.800479][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.800505][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.800514][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.800530][ C0] pending: wg_packet_handshake_receive_worker [ 120.800543][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.800552][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.800568][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.800603][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=9 idle: 4817 10 4842 4800 4792 4890 [ 120.800656][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=14 idle: 12 267 14 301 40 5360 276 7446 7443 383 [ 120.800717][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=6 idle: 4710 4716 4719 50 4714 [ 120.800760][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.800770][ C0] pool 6: no worker in running state, cpu=1 is busy (nr_workers=9 nr_idle=9) [ 120.800777][ C0] The pool might have trouble waking an idle worker. [ 120.800780][ C0] Backtrace of last woken worker: [ 120.800784][ C0] task:kworker/1:6 state:R running task stack:0 pid:6099 tgid:6099 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 120.800804][ C0] Workqueue: 0x0 (events) [ 120.800816][ C0] Call trace: [ 120.800820][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.800832][ C0] __schedule+0x1370/0x2d80 [ 120.800840][ C0] schedule+0x13c/0x20c [ 120.800847][ C0] worker_thread+0x924/0xbd0 [ 120.800858][ C0] kthread+0x304/0x3d4 [ 120.800867][ C0] ret_from_fork+0x10/0x20 [ 120.800880][ C0] Sending NMI from CPU 0 to CPUs 1: [ 130.802521][ C0] After 10 seconds, these CPUS still haven't responded to the NMI: 1