last executing test programs: 1m22.367201826s ago: executing program 32 (id=28): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r7, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000480), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r11}}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) unshare(0x28010100) 1m20.626458397s ago: executing program 33 (id=39): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x210000, 0xd0, 0x18}, 0x18) r3 = dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r4, 0x29, 0x3c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000005c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtaction={0x85c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x80000001, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xb, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x10000003, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x801, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x85c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002000000eb00000000008000"/28], 0x50) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x4, 0x47e3, 0x1, 0x2, 0x8d22, 0xffff, 0x6}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0xf, 0x3, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x67, 0x0, 0x6, 0x2f, 0x0, @remote, @local}}}}) sendto$inet(r7, &(0x7f00000003c0)="f8dff0475028823c8f66203bab454ed8bb5e6172b339af3dd53b3a887fd8a05d2aea195a27cee7d64da60e1194", 0x2d, 0x20000000, &(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10) 1m8.786691428s ago: executing program 4 (id=142): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xffff, 0x3, 0x4}}}}]}, 0x44}}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x24, &(0x7f0000001140)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000011c0)=0x0, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x442, 0x1ff) syz_io_uring_submit(r2, r3, r4, &(0x7f00000012c0)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f00000013c0)='100', 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001500)={r5, r6, 0x1, 0xec, &(0x7f0000001400)="a07c565f4a8356213a6c8deba6f601adf1c839f2b31ea136a079edb70d59e49730db31b7db98ae5a4e594d7a74c08f8860f7c1ec168a93514db7b05200f2447af66a4510048622e59bb776eea651579939d6132b6536c704dc3243faa559de591ca53a7d09a28da2a8029ec64487cc5aad310588732963cc2ec7d9365fc3533e8dcbcc89bfdfd2c063d0d00f25fd12285ae9d25ac328cfc6de4116cb36d5179ad1c59e60884b7e32f69cd6b33da95e48d094f889664c0dc4bba3d15d49a4acddca7e0edb6324d956cf045b59f9bdff623d7638a3bc12518050ce40d041268374f71aa1de754b4abfa633ada0", 0x3, 0xa, 0x9, 0x8, 0x2, 0x1, 0x3, 'syz1\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0xac, 0xe6}}, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'g'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000900)={{r7, &(0x7f0000000000)='/\'\xf1/\x00', 0x20000, &(0x7f0000000040)={@_ha_fsid={[0x200, 0x8]}, {0x5, 0x9, 0x7, 0x970}}, 0x60ce, &(0x7f0000000240), &(0x7f0000000280)=0x3}, 0x6, &(0x7f0000000840)=[{0x0, 0xfffffffb, &(0x7f00000002c0)='wlan0\x00', &(0x7f0000000300)="780a69a51ff8b843c0903655961ea583e7d2bd79e8009100ec4770abb683e451c9ba0ef825c161290416", 0x2a, 0x20}, {0x1, 0xffffff01, &(0x7f0000000340)='wlan0\x00', &(0x7f0000000380)="13fdcd1051fc5a1a22007f19e7117cb7281f03a33d4f6ebb9c5e4743f7099c2a34931f223aa40bf249d200487e565f8a13207a0cd671b2b1883bfedec78cd71340e0b710698c666f931ad693c141c0a7d2ee04c9f7659b1c5fab0299affa3fd94cce5009f28fff3bb03790c7392b4872ed03fb1cfd34be5663983efe99d0cc8e6c00", 0x82, 0x40}, {0x3, 0x2, &(0x7f0000000440)='\x00', &(0x7f0000000480)="1e937d42fe20d6f966e1707dc59aef629f2027d909b55221f450", 0x1a, 0x22}, {0x0, 0x0, &(0x7f00000004c0)='\x00', &(0x7f00000005c0)="1b2c6e1b845c97693cc8ca2f7ebd2ee42bc3fb8ff0eadbdd4f04cf20e80750d2f0f3811c4cd94b66da8c91209e6c9940ad6e84c86c938b3978f9d7cec2efaf5e60939dac8bc37df36084c9ba011d8373b8a176563e594be57e9107ef6cfe020b54e776403c9e739ef3364fda3823346010efd3e77573c4815d99327f4da8b9657be5bb38645016ded08c1b27c4ee01a12722dead8adaa8574ac4008d3ea9a9f1839ecaaf4eced7bc9807743664530717998c0b8af9de752ffca282d16cfbc314a8bf96042da5b6e1f585e9505761599ab1d7de", 0xd3, 0x10}, {0x3, 0x0, &(0x7f00000006c0)='[\'$-.)*\a$\x00', &(0x7f0000000700)="d71335864d0093fe026d0bd48181d2c751413c0738f8ac37d787bb79c9c5b1af6883d959e480b49188d5edc89a5036ef3ccf04049c8a448b91f8f12e15", 0x3d, 0x20}, {0x3, 0x36, &(0x7f0000000740)=')\x00', &(0x7f0000000780)="5fb7c6151aa5d790360f07cc1ab9bc82360dd866cfbcbcfa4e5af602b4f5d87f2baa837ba8c2db65faffa249e1083efdd330597733aa9dff6f65d5b72605ddeb69e63b32499cf2c383e74906ae59ebdd12144aa817048f52976ad217d1f2b60fb4b2ec5ed26a562f7f535746ed4d88cffa4fe1b5f27eb846b4718eb4e3b06f8f30328821c449cf76615f38", 0x8b, 0x8}]}) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x510, 0x0, 0xe8, 0xe8, 0x0, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, &(0x7f0000000980), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xf}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x7fff, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vlan0\x00', 'veth0\x00', {}, {}, 0x32, 0x1, 0x35}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d5, 0xd], 0x1}}, @common=@addrtype={{0x30}, {0x808, 0xc08, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0xfffffffb, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e20}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@set4={{0x50}, {{0x0, 0x5, 0x1}, {{0x2}, 0x9}, {{0x6}, 0x3}, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x38}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1m8.681507254s ago: executing program 4 (id=144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m8.552813569s ago: executing program 4 (id=147): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) futex(0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0) syz_read_part_table(0x624, &(0x7f0000000640)="$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") 1m7.631990984s ago: executing program 4 (id=151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000be0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x13}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000740)={0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x4) r2 = landlock_create_ruleset(&(0x7f00000005c0)={0x0, 0x3}, 0x10, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x80002, 0x50) write(r4, &(0x7f0000000840)='10', 0x2) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000880)={0xa, 0x4}, 0xc) landlock_restrict_self(r2, 0xa) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) r5 = memfd_secret(0x80000) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x2, 0x6}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000540)=""/39, 0x35, 0x27, 0x1, 0x3}, 0x28) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000580), 0x4, 0x400400) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r9, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 1m7.523879777s ago: executing program 4 (id=154): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0), &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='bq24190 0x6b\n\x00', 0xd) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000200), 0x10, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000380), 0x10, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000380), 0x10, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) write$tcp_mem(r1, 0x0, 0xffffff32) 1m7.439663292s ago: executing program 6 (id=158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x34, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f"}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x9, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x34, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f"}}}}}}}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) (async) listen(r2, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x9, 0x4) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(r1, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async) 1m6.095991454s ago: executing program 6 (id=166): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r4 = dup(r3) r5 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0) ftruncate(r5, 0xdcb) copy_file_range(r5, 0x0, r4, 0x0, 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r2}, {r1, 0x4}], 0x2, 0x0, 0x0, 0x0) 1m6.07273891s ago: executing program 6 (id=168): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0) socket$rds(0x15, 0x5, 0x0) mount(&(0x7f0000000080), &(0x7f00000003c0)='.\x00', &(0x7f0000000400)='binder\x00', 0x2200892, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00076, &(0x7f0000000080)=ANY=[], 0xfd, 0x2d8, &(0x7f0000000980)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffffa, 0x3, 0xfffc0000, 0x8, 0x80, "b791f800000000000000006b00007c6fe79000", 0x6, 0x6}) syz_clone(0x20880000, &(0x7f0000000140)="42b6007e6f45ff4fbe6c88ad804322498c6e3069964156b31a7db778ecab08fcf7390ac438cc9c63e57c9f9a66c2d78e900ec30f6c192a8431556ab295ba554a85b6de9ef11b0a572688426e4588071b147167d2a18c7fc3c6cae54da296a400af9b5e4810ec0d3ad6a06fbe2b86c8b015f18d782cf5c490e14ebe2dac2e1b7b478398e2906dbc420b4702b69d918c07381f0dc520af77d7aca9dfa28c102d8f42c3f4a2", 0xa4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="86bce9088c3c594a7877d8bfbbf3074069abf9fb086b82f4c8e203f1508e05a61d915e66084f455f45752b0854bc41c9184fc2f24922a349c6858793f1e5a8983add3cb9bf740e2812ce7c13daa9ec10652875ccd55510628942343a9866d30548fef2426045e32eacde5ca69341a302318c25279e96425717a65bee52c59eaeea7c0ff525241b05a88cd9a607d327642639b31ebb7807bb880093d2e9b0eb5d7662a4d472fd48c0900628952a9478b3bb1b7fc07ee2ba1da3463bbdf7e73f6c82") r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000680)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000006c0)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000700)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000740)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000780)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f00000007c0)={&(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x1e) mkdirat(r8, &(0x7f0000000580)='./file0\x00', 0x93) 1m5.967914088s ago: executing program 4 (id=170): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x180d, &(0x7f0000000000)={0x0, 0x923f, 0x8, 0xa001002, 0x400003d7}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x10) shutdown(r3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = inotify_init1(0x0) r7 = dup(r6) inotify_rm_watch(r7, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=@newsa={0x228, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x800, 0x0, 0xa, 0x80, 0x80, 0x29, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x138, 0x1, {{'hmac(sha1)\x00'}, 0x780, "1a61eb7e803807c46eef1472c7bdeb8677d9f94580dd180889767ff8ef67bfb9b1d2f232da158257c39220b89112528986149333a15cb4a05f1b85b286a189c75392ac1fce8d5cd967d85509970358cfaeae6981eef5ed53c6815f2f532314af0bd09cdcc032c31ebec6b55d6aa3a2929ef609fd9848036b1df9d67a86ea46ed96d8ab7d400bf8d87fb640beb96808636e046248d95f484dd26cb84b722aba92f897d11dee65a4531048199210e2634e562fff1c896d6d9fca374897ba3a2c41170853e8c2541d7567f79e03f9ec9f2ac5e6c8f5ef5a5678ce04d957f22bfdc42236ab1d942b7091082bcaed59228b14"}}]}, 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x4, 0x200, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 1m5.900841287s ago: executing program 34 (id=170): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x180d, &(0x7f0000000000)={0x0, 0x923f, 0x8, 0xa001002, 0x400003d7}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x10) shutdown(r3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = inotify_init1(0x0) r7 = dup(r6) inotify_rm_watch(r7, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=@newsa={0x228, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x800, 0x0, 0xa, 0x80, 0x80, 0x29, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x138, 0x1, {{'hmac(sha1)\x00'}, 0x780, "1a61eb7e803807c46eef1472c7bdeb8677d9f94580dd180889767ff8ef67bfb9b1d2f232da158257c39220b89112528986149333a15cb4a05f1b85b286a189c75392ac1fce8d5cd967d85509970358cfaeae6981eef5ed53c6815f2f532314af0bd09cdcc032c31ebec6b55d6aa3a2929ef609fd9848036b1df9d67a86ea46ed96d8ab7d400bf8d87fb640beb96808636e046248d95f484dd26cb84b722aba92f897d11dee65a4531048199210e2634e562fff1c896d6d9fca374897ba3a2c41170853e8c2541d7567f79e03f9ec9f2ac5e6c8f5ef5a5678ce04d957f22bfdc42236ab1d942b7091082bcaed59228b14"}}]}, 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x4, 0x200, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 1m5.711698591s ago: executing program 6 (id=176): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$eJzs3U9qG1ccB/DfWJIttQtp0VUpeKBddGXsnsCmuFBqKLRo0XbRmNiGYAmDDYL8IYpXOUFOkPNkE3KBHCAhu3hhMkGekayEkY0S2TLJ57PR4733nfd7M4O0mtGtH7r7OwdHe8cPXka9nsTCeqzHSRKtWIihR1HqxevyfgDghjvJsniT5ZZKZ9QmJKsLV1oYAHBlxn//510LAHA9/v7n3z82trY2/0rTekT3ca+dRP6Zj2/sxZ3oxG6sRjNOI7KRvP3b71ubUU0HWvFTt99rD5Ld/58Vx994FXGWX4tmtMrza2luLN/vtWvxzXD9JOLPp9GM78rzv5Tko70YP/84Vv9KNOP57TiITuwUtQ3zD9fS9Nfsydv7/w16B/mk32svjeYVsyvXemEAAAAAAAAAAAAAAAAAAAAAAPiiraQjrQ/fv1M5PRtfmTSe5ye9H6g/9n6e1TRNsySff56vxvfVqM5z7wAAAAAAAAAAAAAAAAAAAHBTHN29t7/d6ewezrQxfKy/ZCjezXKt5WlTUSlK6yQR061VK5KXT65MuYvGoJ7dw6Qas7sEyainMT60HPlag55G3hjr+ezV63HWGN5d+9tJXJKql90kM2hkJbdfZWJq8eOeRrGDksmNC1Zf/PaTas6aE4aSiKiNTubFx6nN9hxe1zcQAAAAAAAAAAAAAAAAAAAwdP7Qb8ng8RwKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA5OP///yka/SI8aU5WGTSqUfTMeYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Bd4HAAD//4qtaNI=") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8802}, 0xc801) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f00000007c0)='encrypted\x00', &(0x7f0000000800), &(0x7f0000000840), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)='\x00', 0x1, 0xfffffffffffffffd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r5 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000b40)={0x2, @raw_data="31307a11778418d507db8f61699feef5452216b8c23e4ca1a53b335e6f16d1b04cc2d1ef10f73fa472f20c2f3d1c95441d25ff26eb9e729477b6218b84b3b1e30538f578809c1a8111f6d464e46849bb35df598284a94536f34d7818d219fe2e68332a0cb26a0372c6de7fb0885dcfc0a90b9a07c2acc62904598264a560ed6e2896ffeed6dc8682c46e21559954b77f9dd52a2fedc9225412d094984d6db30d6f5bc5f86183885cc21b57ae4e7d810bf5a72e51bb6f30b270354f6d214523d2d26db97ddefd3be1"}) write(r4, &(0x7f0000000980)='7', 0x1) keyctl$read(0xb, r3, &(0x7f00000009c0)=""/112, 0x349b7f55) add_key$user(&(0x7f0000000840), &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)="ccd506281881f4a4f10f4e56d884ee0baf3ec8718aaff0c929a3a90f8d7a0e05ba12b1c8929ebfe2371eb3794b122b67f0caafbf180acc8f55d56fe2094a52a6fe6bb816d462c8", 0x47, r3) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendfile(r6, r0, 0x0, 0x7ffffffd) 1m4.766172102s ago: executing program 6 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b00010062726964676500004000028006002700000000000800080088a8ffff0c0023"], 0xb8}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="500206000a40f1cb52d6db60566bfa"], 0xf) 1m2.221331199s ago: executing program 6 (id=187): r0 = memfd_secret(0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m2.088245485s ago: executing program 35 (id=187): r0 = memfd_secret(0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 59.788146164s ago: executing program 2 (id=210): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 59.76696109s ago: executing program 2 (id=211): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x4, &(0x7f00000001c0)={[{@nodiscard}, {@data_writeback}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) llistxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)=""/123, 0x7b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x8, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x68e0, &(0x7f0000000740)={0x0, 0x7000, 0x400, 0x0, 0x1005}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000008c0)={0x2e, 0x0, 0x0, r2, 0x1200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000980)) write(r1, &(0x7f0000000540)="21f7d038e5c99ce6777964800e1b1a77580061c1dd12ce8de748a4070a4bfa3fe0ec426d50fbc9249f7aff0a48cf5e271ffeab20c339f0929c470352efe02fe604292c", 0x43) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', 'mnt/encrypted_dir', [{0x20, 'nodiscard'}], 0xa, "35b9b063320e538b4b0fd6aa81a0e5f9f648ae47ab941331324163d2f1cdd5a04221c91232fa61dfdf75a9"}, 0x4a) sched_setscheduler(0x0, 0x2, 0x0) write(r0, &(0x7f00000006c0)="8995d66cbcfc5542a1c6f76c47a3692c954a4862b5e8d5e4c6e377aab67cf139f5cbf803c9ba38fcf9b40505939816770a898f39286b4ccd570f8949b362a95a84d85689b40499ac8ef44653b11557f7afaf13634c06", 0x56) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) 59.664266002s ago: executing program 2 (id=212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000fcffffff000000000800000085000000000000000000030020786c25005a8bb6642020207b1af8ff009f3098c0a10000000000002a43060000ffffffb702000008000000b703000000000002850000007b000000950000007bd52a5894ae31ed000000000f1b8cb1fe5af2f0b9248dec7a7baf55a22afd052ea533"], &(0x7f0000000f00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bind$802154_dgram(r0, &(0x7f0000000a80)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000ac0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r1 = fsopen(0x0, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0xa101, 0x0) ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f00000004c0)={0xe7, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x1) r4 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x9, [@restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0x6, [{0xa, 0x0, 0xd}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x4}, {0x8, 0x8}]}, @datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x8, 0x6}], "120d"}, @float={0xd, 0x0, 0x0, 0x10, 0xa362714721cce0b0}, @fwd={0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x8, 0x22, 0x0, 0x0, 0x6}]}, {0x0, [0x5f, 0x0, 0x5f, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f00000006c0)=""/236, 0xb1, 0xec, 0x0, 0x6}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x60e6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', r5, @fallback=0x35, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r3, 0xa, &(0x7f0000000880), &(0x7f00000008c0)=[{0x0, 0x2, 0x5, 0xf}, {0x0, 0x4, 0xf, 0xa}, {0x3, 0x2, 0x5, 0x2}, {0x2, 0x4, 0xe, 0x1}, {0x1, 0x5, 0x9, 0x5}, {0x2, 0x10001, 0xb, 0x5}, {0x5, 0x1, 0xc, 0x6}, {0x4, 0x1, 0xd, 0x6}, {0x1, 0x1, 0x1, 0x3}, {0x1, 0x2, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000b80)=0x7fffffff) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', r8, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x8000, 0x10, 0xffff, 0x2aa1f953}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r10, 0x0, 0x82, 0x0, 0x1ac1ee85, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x10, 0xa174}}) fchdir(r3) r11 = fsmount(0xffffffffffffffff, 0x1, 0x7d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x6, '\x00', 0x0, r11, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r11, r11, 0xf, 0x0, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x4, 0x3, 0x3, 0x1, 0x4, 0x3], 0x7ff, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) 59.538125224s ago: executing program 2 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000a00)={[{@dax_never}, {@grpquota}, {@nomblk_io_submit}, {@data_err_ignore}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x158) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002b80)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0xc3c276eef79dd734}}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002c00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002c80)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002d40)="be1c40114d26f4f247484a4893025f47", 0x10}, {&(0x7f0000002d80)="fa", 0x1}], 0x2, &(0x7f0000002dc0)=[@assoc={0x0, 0x117, 0x4, 0x7}], 0x18, 0x40488d2}, {0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002ec0)="0af238b2ca02f8dcd44e68b2971c23f424524550b3e0"}, {&(0x7f0000002f00)="367d34b95b757bf2af9544bd1673dc2666d01fc8e13cd1fcee255a190de417f0de2157"}, {&(0x7f0000002f40)="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"}, {&(0x7f0000003f40)="8a770ef711eebdbdfba5c6758431554bb1107dc026e5ce1edc834f268388af2f108c453f64ccf2aefc226590194118c9b78a29c91c364ac55e1c404b4dddd877cc56c070a273b6133056a41936c2587ed344f5c07a7029686b"}, {&(0x7f0000003fc0)="93a7a5de27cc1ec0ca8a066cf74353b05331350177bd355dafdf9f0fcf1530a862019b69aed01b62bf88af7f2ac70fedcc6e94c834e1930a29797c2845b97c89f376c43e829b3581fddab12c4fb9ec1ff041b877f17bf76cbccdb44f353d3a6289239cb70b3e0339555e253cdd6978f10a47a4a3c0d430"}], 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0xc0041) recvmsg(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002e80)=""/25, 0x19}], 0x1}, 0x8dff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000140)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) unlinkat(r5, &(0x7f0000000000)='./file0\x00', 0x200) 59.401001497s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf648, 0x88}, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) removexattr(&(0x7f0000000140)='.\x00', &(0x7f0000000180)=@random={'os2.', 'system.posix_acl_access\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x8, 0x5, 0xc, 0x6, "1b4b8efe7b0d156a716f96d085268ee72e7d19", 0x4}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5a, {0x2, 0x104, @broadcast}, 'veth0_virt_wifi\x00'}) close_range(r0, r0, 0x0) 58.883881973s ago: executing program 2 (id=224): r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000600)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000250001002abd7000fedbdf250b00000090000e808c005180b2b5a68dad388e50eb1efdd50e95f03930f4741e3879f87d3532c72dad4a2b185897192ad97ace1f664f5e6293c8a5a5fc2df9bafea378732032fb2ae5511c3960e0a0c5584dbaeda980d3f835e39f57ea57698c76ba67965d45fb2c8ea7548b1348181a5351df2db6422f951f8b13d684fff8c81d34a18addb05a3f37ed094b08f0b774c9b8a77f"], 0xa4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x1000004, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000200)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000440)={@desc={0x1, 0x0, @desc2}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xffffffffffffff5a, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) 58.028369904s ago: executing program 36 (id=224): r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000600)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000250001002abd7000fedbdf250b00000090000e808c005180b2b5a68dad388e50eb1efdd50e95f03930f4741e3879f87d3532c72dad4a2b185897192ad97ace1f664f5e6293c8a5a5fc2df9bafea378732032fb2ae5511c3960e0a0c5584dbaeda980d3f835e39f57ea57698c76ba67965d45fb2c8ea7548b1348181a5351df2db6422f951f8b13d684fff8c81d34a18addb05a3f37ed094b08f0b774c9b8a77f"], 0xa4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x1000004, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000200)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000440)={@desc={0x1, 0x0, @desc2}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xffffffffffffff5a, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) 47.416095609s ago: executing program 5 (id=340): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 47.404016413s ago: executing program 5 (id=343): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x21c0, 0x103) io_uring_enter(r0, 0x38b9, 0xcbe3, 0x2, &(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x94000, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002ac0), 0x0, &(0x7f0000002b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000100)={'lowerdir'}, 0x9, 0x2) linkat(0xffffffffffffff9c, &(0x7f0000002b40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000002b80)='./file0/file2\x00', 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0x4, 0xc0) getdents64(r1, &(0x7f0000001ac0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x21c0, 0x103) (async) io_uring_enter(r0, 0x38b9, 0xcbe3, 0x2, &(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8) (async) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x94000, 0x0, 0x3e, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002ac0), 0x0, &(0x7f0000002b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000100)={'lowerdir'}, 0x9, 0x2) (async) linkat(0xffffffffffffff9c, &(0x7f0000002b40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000002b80)='./file0/file2\x00', 0x1000) (async) openat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0x4, 0xc0) (async) getdents64(r1, &(0x7f0000001ac0)=""/4096, 0x1000) (async) 47.11601774s ago: executing program 5 (id=350): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r4, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x80800}, &(0x7f0000000080)=0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) 47.110540433s ago: executing program 5 (id=352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xc, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000007000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff509213a700000000bf91000000000000b702000003000000850000002a000000b70000000000003e95"], &(0x7f00000005c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000a00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./trace\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000bc0)='./trace\x00', &(0x7f0000000c00)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) writev(r1, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="ef", 0x1}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000280)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) (async) io_uring_setup(0x4c29, &(0x7f0000000a80)={0x0, 0x304c, 0x400, 0x5, 0x10000008}) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f0000000b00)=@abs={0xa, 0x2}, 0x6e) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='mountstats\x00') pread64(r9, &(0x7f0000000640)=""/253, 0xfd, 0x4eb) (async, rerun: 64) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x2}, &(0x7f0000000800)=0x0) (rerun: 64) timer_settime(r10, 0x1, &(0x7f0000000840)={{}, {0x77359400}}, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 32) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) (async) ptrace$setopts(0x4200, r11, 0x0, 0x1) (async) ptrace$cont(0x18, r11, 0x0, 0x0) (async, rerun: 32) ptrace$setregs(0x4212, r11, 0x58, &(0x7f0000000b80)) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) timer_settime(r10, 0x0, &(0x7f00000008c0)={{0x77359400}, {r12, r13+60000000}}, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000740), &(0x7f0000000780)=0x4) syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_FGETXATTR={0x2b, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) (async) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 46.981699067s ago: executing program 5 (id=356): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0xff00000000000000, 0x0, 0xa1, 0x0, 0x4, r0, 0x0, 0x0, 0x1100}]) 46.696012548s ago: executing program 5 (id=359): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 46.664967062s ago: executing program 37 (id=359): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 30.537548677s ago: executing program 8 (id=520): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f0000000000c6918342f84ec3570000000000850000005600000018170000", @ANYRES32=r0, @ANYBLOB="00000000000000001831000004000000000000000000000018240000", @ANYRES32=0x1, @ANYBLOB="0000000087090000d543feff0000000085200000020000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0bbc}, 0x94) 30.468104786s ago: executing program 8 (id=521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioprio_get$pid(0x1, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffd, 0x5, 0x4e20, 0x0, 0x2}, {0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0xf7e}, {0x1ff, 0xffffffffe, 0x4053e5, 0x26}, 0x6, 0x40000401, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x5, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 30.466518824s ago: executing program 8 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5891, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x10040044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x6d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2993a1956c7f9a86928ac42418451221aba7457784c9a1d2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "088cbdba69b5264f9c79f5d49152eeb49940c7f6e4f9e72d"}]]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x8840) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000340)=']:#\\\x00', 0x20001, &(0x7f0000000380)={@_ha_fsid={[0xfffffff8, 0x9]}, {0xa4, 0x9, 0x6, 0xfa}}, 0x5, &(0x7f00000003c0), &(0x7f0000000400)=0x1}) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, ']:#\\\x00'}], 0xa, "9a628f914a33d1215f56abca50bf4638c01fefca41f3de11"}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000540)=[@mss={0x2, 0x800}, @mss={0x2, 0x2}, @window={0x3, 0xf, 0x8}, @timestamp], 0x4) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000580)={r2, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={0x2, @in={{0x2, 0x4e21, @multicast1}}, 0x101, 0x2}, &(0x7f00000007c0)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000800)={r4, 0x8}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000880)={r5, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x3, 0x9, 0x4, 0x1}, &(0x7f0000000940)=0x98) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x880) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000000ac0)={0x0, 0x0, 0xa1, 0x794f, 0x45, 0x8}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000b00)={0x3, @pix_mp={0xfffffff5, 0x121, 0x55595659, 0x8, 0xb, [{0x21, 0x2}, {0x3, 0x3}, {0x9, 0x5}, {0x7, 0xffff}, {0xc5a3, 0x1}, {0x6, 0x101}, {0xd9d, 0x833b}, {0xc, 0x90}], 0xd, 0x10, 0x0, 0x2}}) r8 = getpgid(0xffffffffffffffff) sched_setscheduler(r8, 0x1, &(0x7f0000000c00)) syz_ublk_setup_io_uring(0x283f, &(0x7f0000000c40)={0x0, 0xbaa7, 0x2000, 0x2, 0x36e, 0x0, r2}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00), &(0x7f0000000d40)) syz_io_uring_setup(0x7941, &(0x7f0000000d80)={0x0, 0x50ce, 0x20, 0x1, 0x2b}, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)=0x0) syz_io_uring_submit(r9, 0x0, r10, &(0x7f0000000ec0)=@IORING_OP_SOCKET={0x2d, 0x28, 0x0, 0xffff, 0x1, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x8a3a}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, r1, 0x202, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dd96c8a5a9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x500880a}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 30.46268652s ago: executing program 8 (id=523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x8, &(0x7f0000000540)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x48}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x567058a4}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000800)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000880), 0x1) sendto$inet6(r0, &(0x7f00000008c0)='l', 0x1, 0x0, &(0x7f0000000900)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='E', 0xffe0}], 0x1}}], 0x1, 0x4000000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140), 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[], 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r3, &(0x7f0000000640)=0xfffffffffffeffff, 0x10001) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r4, 0x2000009) sendto(r2, &(0x7f0000000740)='Bu', 0x2, 0x480a0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7ffff004) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) 30.263164659s ago: executing program 8 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000440)="054dc9cd01000000", 0x8, 0x4044020, &(0x7f0000000480)={0x2, 0xfffd, @remote}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000500000014000380040004000c0002000900000004000100180001801400020073797a5f74756e00"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000580)={0x60000006}) syz_clone(0x80248000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_pwait2(r7, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x72, 0x3, 0x7fff0003}]}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000500)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setns(0xc9, 0x0) r8 = socket(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000540)) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$6lowpan_control(r9, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 29.908212542s ago: executing program 8 (id=529): r0 = socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000340)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) preadv2(r2, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1, 0x3, 0x5, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000280)={r3, 0x2}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback, @remote}, 0xc) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "10e42283cb40539ba292e7a9e3b339b3"}, 0x11, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'veth0_to_batadv\x00', {0x20665}, 0x1}) 29.864892655s ago: executing program 38 (id=529): r0 = socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000340)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) preadv2(r2, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1, 0x3, 0x5, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000280)={r3, 0x2}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback, @remote}, 0xc) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "10e42283cb40539ba292e7a9e3b339b3"}, 0x11, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'veth0_to_batadv\x00', {0x20665}, 0x1}) 4.003647856s ago: executing program 7 (id=750): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f00000005c0)) sendmmsg(r5, &(0x7f0000000600), 0x800001d, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000120069b17a4ceecc537e000007001d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.468267355s ago: executing program 0 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000180)="10") close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.355458426s ago: executing program 0 (id=758): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3f505642, 0xb, 0x101}) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='devices.list\x00', 0x26e1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="06fe8c06dfcf268c"}}) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 3.34852121s ago: executing program 0 (id=759): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9}, 0x8, 0x10, &(0x7f00000008c0), 0x10}, 0x94) r2 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x29a5, 0x1000008, 0x110, 0xffffffffffffffff, 0x20000000) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x80000000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(0x0, 0x4, 0x1000018, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_SOCKET={0x2d, 0x1, 0x0, 0x1, 0x7, 0x0, 0x3800000, 0x0, 0x0, {0x0, 0x0, 0x400}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f00000002c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f000026f000/0x14000)=nil, 0x14000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xb41bf000) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1}, {0x1, 0x1}}], 0x8) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000280), 0x81, 0x2d9, &(0x7f0000000580)="$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") r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r6, 0x4b4b, &(0x7f0000000340)=""/281) 3.0642116s ago: executing program 7 (id=762): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0xfff8, 0x3ff, 0x5, 'syz0\x00', 'syz1\x00', {0x80000000}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0xa, 0x7, 0x6, 'pptp\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000018c0)={'syzkaller1\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5, 0x1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5, 0x1}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r2, &(0x7f0000001900)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) (async) write$tun(r2, &(0x7f0000001900)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) 2.824584245s ago: executing program 7 (id=765): recvmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{&(0x7f00000013c0)=@tipc=@name, 0x80, &(0x7f0000003800)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/180, 0xb4}, {&(0x7f00000026c0)=""/122, 0x7a}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/182, 0xb6}], 0x5}, 0x320d}, {{&(0x7f0000003880)=@generic, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003900)=""/87, 0x57}, {&(0x7f0000003980)=""/213, 0xd5}, {&(0x7f0000003a80)=""/177, 0xb1}, {&(0x7f0000003b40)=""/150, 0x96}], 0x4, &(0x7f0000003c40)=""/144, 0x90}, 0x3}, {{&(0x7f0000003d00)=@in6, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/219, 0xdb}], 0x1, &(0x7f0000003ec0)}, 0x363}, {{&(0x7f0000003f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f80)=""/3, 0x3}, {&(0x7f0000003fc0)=""/82, 0x52}, {&(0x7f0000004040)=""/239, 0xef}, {&(0x7f0000004140)=""/247, 0xf7}], 0x4, &(0x7f0000004280)=""/121, 0x79}, 0x7f}, {{&(0x7f0000004300)=@llc, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000004380)=""/4096, 0x1000}, 0x757c}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000007640)=[{&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/131, 0x83}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/67, 0x43}, {&(0x7f0000001440)=""/107, 0x6b}, {&(0x7f00000075c0)=""/80, 0x50}], 0x6, &(0x7f00000076c0)=""/188, 0xbc}, 0xffffffff}], 0x6, 0x40000002, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0x4010aa0a, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007b80)={'tunl0\x00', 0x0}) capset(&(0x7f0000007cc0)={0x20071026}, &(0x7f0000007d00)={0x0, 0x7ab0}) openat(0xffffffffffffff9c, &(0x7f0000007d40)='./file0\x00', 0x42042, 0x85) bpf$OBJ_GET_PROG(0x7, &(0x7f0000007d80)=@generic={&(0x7f0000007dc0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000007c00)={&(0x7f0000007c40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x2, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x0) capset(&(0x7f0000007580)={0x19980330}, &(0x7f0000007b00)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000007b40)=0x100000001, 0x76dc) mount(0x0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000003ec0), &(0x7f0000007540)='./file0\x00', 0x400a8, &(0x7f0000007580)=ANY=[], 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000007900)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000007940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000007980)='./file0\x00', &(0x7f00000079c0), 0x8, &(0x7f0000007a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000007a40)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000007a80)='.\x00', &(0x7f0000007ac0)={0x474203, 0x408}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000000c0)={0x2, 0x8002}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x200, 0x645c0000, 0x4, r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r3}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) 2.723556215s ago: executing program 7 (id=767): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0xb0) mknodat$loop(r0, &(0x7f0000000040)='.\x00', 0x40, 0x0) (async) mknodat$loop(r0, &(0x7f0000000040)='.\x00', 0x40, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'erspan0\x00'}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)="0af1fcda08ae6136e5b828af458afa25e5b1f6012288fb9c63b6afb4ff15730dfcf000b683dc8a17c044f177918156e54ed85a30f9541445a3615852760b676d0953655ba3a7b900cd749e10d5f0bf81efaa73fd7be59e905dc419d8dad62c80e3459cfe13623d29730c3edd0883304af1c278a4a2856ade1b0392ed5a779d555f71d02ef5e336bf4f3636c2ac1791784ce15899d54773c431aac52b09605014a67dbc239e4efc7f0f57c62ff01d3a", 0xaf}, {&(0x7f00000001c0)="e4ae1b21ddc8f3d7b09db59201d129d3fc9480520243155904e6d4d2e5a4114b18534e48749e35bcc6575689f179bea748f59a7da25ff8bd39eea8c676ebd113b5a3de2d24b6029b4273aee009e9bb6d05d2085a4498304bf5d5c0f43f7ec3760c8603e39a6dcc4773b0bc73c6ca3713ebdb1e3ed609e2c49c41b487d66721f8528a8e3f5cb665a9b295bc0cff624eb4e25b3a7c645933897ca8b4fae906a3ea97aa45dfa08454b5911a03994a9841979d7d670875cec1fee34194c4ee0a34b59766b4480727908199c993b02d167aeb9dc3c6acefd645ee8f7fc1101fd67b998d9ea80fb255", 0xe6}, {&(0x7f00000002c0)="8f966a55e952e1ab527bb1178a6744cdd2e8bfebef3c81abeaf204eb33945e290e11de80a93798c92d6296264b130464a9abd4b42493cc0466191cf91da2d0e030746022190c1fae6f6cf564ac72b4cbe2397d9d44ef4da94ae955d472bea4eec60144762c39d83ce723acb23facd57d6990882eedb62f4b71a2185e6c31749b292b7303afb8cabbfb532a07f60532b8d35be1b11758f2899bca", 0x9a}, {&(0x7f0000000380)="567907f015323a99ab51df4fc7051793e6c229110f40b4d64be94b5142d18dac7cbd36aefb80a9f4f79fc4a058a716863d7c64d6a4fdbe30493899bf0663a5d98471b3e35607d2ebfa346c1a433f5fc76c81f82a4ae9957befd51c9717daf192379e40068b297e282ae0f43045621080c92069707f56eb4494c6de26371941754e811da7a91540ce35d87fbe4c2f2d5e40d23c32914129716baf3c6cb2cd74414ea5f1be204929149663fbf94a50dc4954d9938c4806d86ffa64b984", 0xbc}, {&(0x7f0000000440)="965638dfd543899143c2ab714798e5d4e4ca84d3dee43b5ad4121d8758090075a5165c7332fc925a57c0b3c4cbc3a45c74c6365a6ffb101815fbd11d0a43c7c93cb2cb890e5c4d5b6fbfa1e723186cbf2f799067afb78b1d0bac61f5bd7cecbc1a2e2935d8f119296f4351bc54ab8769bef87292f6a23bfe6d6a0426c883f314e2cdb02c214a6ac8f6443413b7fedd6d879d20b3676b2c6ef3e34cbefa5a9ff5c5701e16b4374a4ce330d13156147c34251cb446f400742f22", 0xb9}, {&(0x7f0000000500)="3a10e5e764365a3b6d09caee2ddc3143462fade8037432c3b16c971f7484cc3f34065457bee0d99bcfe2be58a45d09730218a2a4ba30de24b3cf4020a5ad2302a409fda55ea3ee6829f69def2b50a6b63535ce6921da240ac8952e79cdc56d96634c83196842f492e4bd64e4916cdc4beaee2f4c88a97a061e07b1b6ed24c519dee8bdc2ff45a666cfcf", 0x8a}], 0x6, &(0x7f0000000640)=[{0x90, 0x101, 0x0, "aec28bfa924abd68ebd078eddf7dd3675769f42db856e4e848186a2e2b68f0ac92c6601f06df9f8ec35e6d09f39b33939bbd6aa6ebb737260079f28ae9191585838802fb8120e8cdcfde173599c400a411c899a5c51a45c29c86007132db879a2f26f4eb2098cd7c227428a129b0e253634275aa6827c2d762e3e1276b"}, {0xc0, 0x113, 0x6395, "d4866d75271519b93e821aa8f1e78274661cc340d804e6b9773a477a79a18add0a34db5870e4b0dc4e684a86a2544706197d6e7e0d5fe880e2e284f12ecdee4f7744b8a3f7cbb3ddd5fdaea6452be3937ae2593b7e262425e7d55041a949feb762719a2d9b39276731c54d511fbe642ec40716d8d832aed6a88d2489ef2ef869b93fca74d153f14c1d3e54f62eaf83b64dd1a901a6463ba44e02cb746c405119dfd442c563df8f58ba"}, {0xa8, 0x84, 0x65d, "cd82bce68954304341bbc79ce49f94e0d65d6b41c1cff0e84ad76513546854c854b7b1727b3b801973bc8c6104bd7220401d5b63e98ad0cefb926021227549057e7317d32be89fe5d6f60939d50dbb7b4a33be3f6c792def27165b238e288e81462732666767eb4122692c8de2578c3b30055b6b19acd0b507113051909f65e4250b707b0c11dc652ded7db3c9ba7a68b26f10beb535"}], 0x1f8}, 0x48000) r1 = openat$incfs(r0, &(0x7f0000000880)='.pending_reads\x00', 0x200, 0x8a) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x84) close_range(0xffffffffffffffff, r1, 0x2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x20, 0x10, 0x800, 0x1, {{0x2e, 0x4, 0x0, 0xb, 0xb8, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@lsrr={0x83, 0x13, 0xc3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x4, [{@rand_addr=0x64010102, 0x6}, {@multicast2}, {@multicast1, 0x1}, {@local, 0x6}, {@multicast2, 0xffffffff}, {@loopback, 0xe5c8}, {@empty, 0x7fffffff}, {@private=0xa010100, 0xe}]}, @rr={0x7, 0x17, 0x74, [@loopback, @multicast2, @broadcast, @rand_addr=0x64010102, @empty]}, @lsrr={0x83, 0xf, 0x14, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xe, "a34e385df4be53396b1ce20d"}, @generic={0x82, 0x8, "2fc41c6845df"}, @generic={0x44, 0xf, "3fb74a719a33be9f82b487b3b7"}, @end]}}}}}) sendmsg$xdp(r1, &(0x7f0000001200)={&(0x7f0000000c00)={0x2c, 0x8, r3, 0x13}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000c40)="54cbb496d2e66b0a75e419efed13f06197a7342c4532186f82c789a9357f5a5ea38a58c4e190d02872ee0cdd88deb27db0479a9d26c71477412836c74cde6df12bc7b65f920c5c32cddcf11bedfffc8194caab56c477e7bbf27e74079ef078c21fa70faeac5bc8e1cd9b2e77a932d5c4535e6aae9479e867fe5b72ee78ce4d7f1373462af6e1e39dbb33f95020e6710623891ac6456eea2356a375291c7f2ae95438256cbc71e96bc588fe77677f4258cb97d2329a9eb762d366ec37549b3ea38f77b1d01908377e8a09f8de5be17e815b5c5845f07787217414d4c40bb6c31767facc70c44edb95655f51ed6dd98107946401", 0xf3}, {&(0x7f0000000d40)="e2f56e73059c7da7339cf5e20ab84a08a2bba2a6c979f45b8a7e85c48cc4b6923f00c8ecb16d97f95048a6bc670f880ed20997a8d4cc215e82484a56e09e7808a34fa99940aa06701ad27507785dafcbbbf652d0b669faa04d62b0b860c8bde107f518fe8a989221a77ba064ec5046a478681d694c8cf91152e0b1b8fbbe28489386e84fb8f47d552d154dc034a123a6d6eb92552c444b8d93e848f45289ccae460d1fc66243162d7da07aff94a64657281d9a13c0e9bb656d9a0fc9224e5e4f35a11cb1fe", 0xc5}, {&(0x7f0000000e40)="7101665d8ad2c8b394aa4ceb6c49310fe6501596c38c72b49a1eb1064c130f3ca041c84687d8b17ae50bd0b22d9262620ff46d1da29fc6a40fc40bfd5729706f7697745f81e2b89bb208d3fc2c132ddcf36788fd38b3b86bc0f7bbd90f192d9886fa22d3fce9b975e6786ce4cebe830ef775eac3473b3e4c2a3a4f77805389d5", 0x80}, {&(0x7f0000000ec0)="f29597e8eaa3d60d481bf431ba2724ee00becb4238b9b456a07618c81793a12e654e33ae28eb7cda31ee77ac82833e23d49132835f13fa30a713810b536ff66b097ddc4ff8700575f52c41d330d2de5ce85d5b69381e1813c91c7923b97fbfb0ff53e59628e013ea11e2504212ae116b2656591d2d121b9b0f1b5fd933288c411e78cfaa2631033c4b28a7096e44c460d00b1f4bb01b9306bfdae4177e8efac35cc1b96e55515552aa56", 0xaa}, {&(0x7f0000000f80)="42c4cae20dcd469b9d3caf45db4a128d4c632c938a5e11af0fd54d0975bfa9b3c7412f47911b816ffd866fbf3380af6c8082de39ce51bcefe94b01b4b76afaac19e2567a19ed6140965a8c41a9d97546255e70b7330b8a1ae19099a165ed2d0bdd9c04acc0515ccae0114a12e5989b64561d06f9b909d3e4f35c5a1f196b7352", 0x80}, {&(0x7f0000001000)="ba2904c5ee29b4698b9f8571fdca2afb8be419405569aba2047335e08e9cba4c4ca7f6e5f247199fb59f33b1ee0348e5d4450d26242e70e8c9321719701c2f7710c811c69d1ef91174a97472ea8e4e7657769dfd95963085e89c14702c14da453cdda0173dad", 0x66}, {&(0x7f0000001080)="3fa5fd3783928494722fc5219baee833032571ab66d7ee15e68d67b462711cb5ee6d9a7720bdc45f8854256fb93850702f97b07f275b2d4ee2e8ae47512b864be00d401ab42e9eba1959cf151a4a71dc09648f95bc9519a2c64005560e9b514dc7c6a79bede128de53ca68474c660cbad40c3c843a937c1257f9b09adfed8df1cad55ca3a352fc858f78ec0ed3b30d762613758fccdf1a3fad717493dcaf3569384703f94db7ec63a4e27aab669699374a23946872b5ed42c623656b90b8222357fd0be82d47ace2e390e188c95562baaad0edd912f149a49f8745e0d985105fe1fa2ead114a94c644763ab11af92b00ec56f6f628", 0xf5}], 0x7}, 0x4001) unlinkat(r0, &(0x7f0000001240)='./file0\x00', 0x200) fsopen(&(0x7f0000001280)='qnx6\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x2}, @enum64={0x1, 0x7, 0x0, 0x13, 0x0, 0xa, [{0xa, 0x6, 0xfffffffd}, {0xf, 0x1, 0x2}, {0x8, 0x8, 0x8}, {0x7, 0x1, 0x5}, {0x6, 0x6, 0x2}, {0x8, 0xfffffff7, 0x1}, {0x9, 0x5, 0x4}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0xd, 0xffff}, {0x1, 0xfffffff8}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}, @enum64={0x5, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x87, 0x8}, {0x5, 0x9, 0xc}, {0x1, 0x1, 0x4040000}, {0xa, 0x8, 0x3}]}]}, {0x0, [0x51, 0x0, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000001400)=""/141, 0x10c, 0x8d, 0x0, 0x5}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x2}, @enum64={0x1, 0x7, 0x0, 0x13, 0x0, 0xa, [{0xa, 0x6, 0xfffffffd}, {0xf, 0x1, 0x2}, {0x8, 0x8, 0x8}, {0x7, 0x1, 0x5}, {0x6, 0x6, 0x2}, {0x8, 0xfffffff7, 0x1}, {0x9, 0x5, 0x4}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0xd, 0xffff}, {0x1, 0xfffffff8}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}, @enum64={0x5, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x87, 0x8}, {0x5, 0x9, 0xc}, {0x1, 0x1, 0x4040000}, {0xa, 0x8, 0x3}]}]}, {0x0, [0x51, 0x0, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000001400)=""/141, 0x10c, 0x8d, 0x0, 0x5}, 0x28) syz_emit_vhci(&(0x7f0000001500)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000001500)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540), 0x208801, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540), 0x208801, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000001580)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000001580)=0x1) bind$bt_hci(r1, &(0x7f00000015c0)={0x1f, 0x3, 0x1}, 0x6) socket(0x8, 0x2, 0x9) (async) r5 = socket(0x8, 0x2, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r6, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x93}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r6, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x93}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r4) getpeername$packet(r5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001800)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xf4, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004895}, 0x840) openat$null(0xffffffffffffff9c, &(0x7f00000019c0), 0x2400, 0x0) (async) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000019c0), 0x2400, 0x0) ioctl$RTC_AIE_OFF(r9, 0x7002) acct(0x0) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001b80)='bpf_lsm_getprocattr\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xd, 0x5, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f0000001c00)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x60, '\x00', r3, @sock_ops=0x3, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x5, 0x8, 0xff, 0x367}, 0x10, 0xffffffffffffffff, r9, 0x2, 0x0, &(0x7f0000001c80)=[{0x2, 0x2, 0x8}, {0x0, 0x3, 0x2, 0xc}], 0x10, 0x9}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xd, 0x5, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f0000001c00)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x60, '\x00', r3, @sock_ops=0x3, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x5, 0x8, 0xff, 0x367}, 0x10, 0xffffffffffffffff, r9, 0x2, 0x0, &(0x7f0000001c80)=[{0x2, 0x2, 0x8}, {0x0, 0x3, 0x2, 0xc}], 0x10, 0x9}, 0x94) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001d80), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x4, 0xb, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xea}}]}, &(0x7f0000001a80)='GPL\x00', 0x4, 0x48, &(0x7f0000001ac0)=""/72, 0x40f00, 0x1, '\x00', r3, @fallback=0x6, r9, 0x8, &(0x7f0000001b40)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x6, &(0x7f0000001e00)=[r1, r1, r12, r1, r4, 0xffffffffffffffff, r1, r4], &(0x7f0000001e40)=[{0x2, 0x1, 0x4, 0x4}, {0x4, 0x5, 0xb, 0xa}, {0x3, 0x4, 0x2, 0x4}, {0x2, 0x5, 0x2, 0x3}, {0x3, 0x2, 0xb, 0x2}, {0x5, 0x1, 0xc, 0x15}], 0x10, 0x765}, 0x94) 2.443815895s ago: executing program 0 (id=771): getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240)) (async) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000900)={[{@nomblk_io_submit, 0x4a}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@jqfmt_vfsold}, {@commit={'commit', 0x3d, 0x5}}, {@bsdgroups}, {@usrjquota, 0x22}, {@dioread_lock}, {@debug}, {@resgid={'resgid', 0x3d, r0}}], [], 0x2c}, 0x85, 0x4ca, &(0x7f0000000280)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x161042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) futex(0xffffffffffffffff, 0x5, 0xffffeffc, 0x0, 0x0, 0x2000002) setxattr$system_posix_acl(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100050000000000040002000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="efffffff"], 0x34, 0x3) getxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@known='system.posix_acl_access\x00', &(0x7f0000000bc0)=""/47, 0x2f) (async) getxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@known='system.posix_acl_access\x00', &(0x7f0000000bc0)=""/47, 0x2f) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001480)=ANY=[], 0x2c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@private2, @in=@dev}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000f40)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000f40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4e23, 0x4, 0x4e22, 0xc91, 0x0, 0x20, 0x80, 0x0, 0x0, r4}, {0xfff, 0x100000001, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x3ff, 0x9}, {0xbf8, 0x1735, 0x4}, 0x81, 0x6e6bb7, 0x2, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x3506, 0x3, 0x2, 0x80, 0xfd73, 0x80009, 0x7}}, 0xe8) syz_open_procfs(0x0, &(0x7f0000000880)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000008c0)='.\x00', &(0x7f00000009c0), 0x0, &(0x7f0000001640)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000e00)='.\x00', &(0x7f0000000e40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000e00)='.\x00', &(0x7f0000000e40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000e80)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000c00)='./file0/../file0\x00', &(0x7f0000000f00)='./file0/file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000001140)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000001140)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000001000)='./file0/file0\x00', &(0x7f0000001040)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000001080)='.\x00', &(0x7f00000010c0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000001100)='./file0/file0\x00', 0x8) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000a00), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000c40)={0x4, &(0x7f0000000c80)=[{0x18, '\x00', @data=0xffffffff, 0x8c}, {0x31, '\x00', @st={0x4, [{0x3, @uvalue=0x3}, {0x3, @uvalue=0xfffffffffffffffd}, {0x3, @uvalue=0x6}, {0x2}]}, 0x121440}, {0x45, '\x00', @data=0x8, 0x800000d9}, {0x21, '\x00', @data=0x6, 0x8}]}) (async) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000c40)={0x4, &(0x7f0000000c80)=[{0x18, '\x00', @data=0xffffffff, 0x8c}, {0x31, '\x00', @st={0x4, [{0x3, @uvalue=0x3}, {0x3, @uvalue=0xfffffffffffffffd}, {0x3, @uvalue=0x6}, {0x2}]}, 0x121440}, {0x45, '\x00', @data=0x8, 0x800000d9}, {0x21, '\x00', @data=0x6, 0x8}]}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYBLOB="7184d95b8b76b5ed1f5c6717e4b3279663580b8920b82209018268661a5dd5d14192cb23b9b5", @ANYRES32, @ANYBLOB="1fabefb9070085e6ac6f7d5fc53577f8a79c512ec9484c151377521cc199e59b84019685818671a19c0dae86147a8144507a70b44d5b8990a9afa76d708fea118c159e9ac79b67f74340398c0ddf1055ed538ad3c212290bae7d4290c23ddaf0139c2ecbb492e4651f4029b3f587690b2ebcbad3f0050177b2d9b8ee9d48ee369a580b73f96da6fc24f8e6e5b3087bc7c10dd35538d2ef7f1119deff71980fadcf95f59cdb5cd3a9562ea1e4cdb59dad24058f"], 0x7c}}, 0x8090) mount(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x2290034, 0x0) 2.22760068s ago: executing program 0 (id=775): r0 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000a40)='asymmetric\x00', &(0x7f0000000a80)=@keyring={'key_or_keyring:', r0, 0x30}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) open(&(0x7f0000000ac0)='.\x00', 0x8c00, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40), 0x0, 0x3, r1}, 0x38) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x0, {0x8b33, 0x3, 0x4b, 0x5, 0x100, 0x1}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x25dedbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x55}, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x44080) (async) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'macvlan1\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x4, 0xc, 0x51, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x700, 0x7800, 0x3, 0x95b}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, r10, 0x10, 0x8, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffbff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40843}, 0x2000480d) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 2.007849855s ago: executing program 3 (id=780): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="c4354b6b", 0x4}], 0x1}, 0x8001) r6 = memfd_create(&(0x7f0000000700)='\x00', 0x1) pwritev(r6, &(0x7f0000000740)=[{&(0x7f0000000780)="db", 0x1}], 0x1, 0x3a, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r9, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./bus\x00', 0x3000129, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x200) chdir(&(0x7f00000005c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2000, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x421a2}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x0) 1.887039602s ago: executing program 1 (id=782): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000000e00), 0xffa3}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = inotify_init1(0x80000) r3 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = inotify_add_watch(r3, &(0x7f0000000e40)='.\x00', 0x400) inotify_rm_watch(r2, r4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) 1.834867542s ago: executing program 0 (id=783): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = fsopen(&(0x7f0000000140)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xe, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x8, 0x7, 0x9, 0x5, 0x2}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x7, 0x100, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r7, &(0x7f00000005c0)="5d91605df449783e297342558a031551c8eabbc7977749574bdcf203bcc3b4c47aedba91d3b55fc17bba9930cdefe01d66fa95be1530e93966f1941916c02e7a22254c443f1b85367f8adec024a6dd23"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x20000880) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x20000880) r8 = openat$rtc(0xffffff9c, &(0x7f0000000680), 0xa200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8855) readv(r8, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/191, 0x4}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r5) (async) r9 = dup(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000380)='./file0\x00', r9}, 0x18) r10 = fsmount(r4, 0x1, 0xa) fchdir(r10) (async) fchdir(r10) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000003c0)=0x7fffffff, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008780)=ANY=[@ANYBLOB="01000000", @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 1.784094708s ago: executing program 3 (id=784): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000280)={{0x0, 0x6, 0x8, 0x7, 0x2, 0x5, 0x7fffffff, 0x7, 0x1ff, 0x95, 0xfffffffb, 0x8, 0x6, 0x4, 0xf7e}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x4, 0x9448, 0x4, 0xfff, 0x800, 0xfffffffffffffff7, 0x100, 0x3000, 0x9, 0x6, 0x3, 0xff, 0x80, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000002e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.673159408s ago: executing program 39 (id=783): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = fsopen(&(0x7f0000000140)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xe, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x8, 0x7, 0x9, 0x5, 0x2}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x7, 0x100, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r7, &(0x7f00000005c0)="5d91605df449783e297342558a031551c8eabbc7977749574bdcf203bcc3b4c47aedba91d3b55fc17bba9930cdefe01d66fa95be1530e93966f1941916c02e7a22254c443f1b85367f8adec024a6dd23"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x20000880) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x20000880) r8 = openat$rtc(0xffffff9c, &(0x7f0000000680), 0xa200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8855) readv(r8, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/191, 0x4}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r5) (async) r9 = dup(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000380)='./file0\x00', r9}, 0x18) r10 = fsmount(r4, 0x1, 0xa) fchdir(r10) (async) fchdir(r10) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000003c0)=0x7fffffff, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008780)=ANY=[@ANYBLOB="01000000", @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 1.669067432s ago: executing program 1 (id=787): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000009c0)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='memory.stat\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000014c0), &(0x7f0000001500)=ANY=[], 0x401, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000740)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000780), 0x7ff, 0x181c03) ioctl$LOOP_SET_STATUS(r2, 0xc01070ce, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="6112bf00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d35f3ff000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x700}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000900)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000940), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000980)=0xcde, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x8001, 0x0) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000040)={0xa}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)=ANY=[], 0xb0}}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) 1.662682956s ago: executing program 3 (id=788): syz_open_dev$video(0x0, 0xa7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.661442154s ago: executing program 7 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x8000, 0x101101) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000740)=@fd={0x9, 0x8, 0x4, 0x10, 0x5, {}, {0x4, 0x2, 0xfe, 0x15, 0x1, 0x2, "455ca49c"}, 0x4, 0x4, {}, 0x1ff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000400)={0x1, @in={{0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x3, 0x8000, 0x4}, &(0x7f00000004c0)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x7, @empty, 0x7}}, 0x5, 0x7}, 0x90) r6 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x3, 0x1, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x8c5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x54, &(0x7f00000007c0)=0xa5a95, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@getchain={0x24, 0x11, 0x839, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x77) 1.528143147s ago: executing program 3 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/domain_policy\x00', 0x401, 0x28) write(r0, &(0x7f0000000140)='select pid=1\nu', 0xe) io_setup(0xee9, &(0x7f0000000040)=0x0) io_destroy(r1) io_setup(0xbd1, &(0x7f00000015c0)) socket$xdp(0x2c, 0x3, 0x0) 1.325951828s ago: executing program 1 (id=791): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) open_by_handle_at(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 1.223580823s ago: executing program 1 (id=793): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000007000a00bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000b80)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000c40)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0xf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000d80)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000dc0)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000e40)=ANY=[@ANYBLOB="0800000c033e54e36ca8d330bf601b4a2dee00000000001400000045e3001c0066000005eb8f78ac1414851180472bc869a7053d739e685b4d91f7c54600b345b233272124f3302efe01e65ea6f18a062ad7508b999159f947"], 0x2a) (async) socket$inet6_udp(0xa, 0x2, 0x0) 1.206340506s ago: executing program 3 (id=794): ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000080)={0xd, 0x6b3, 0x1, 0x1ff, 0x80, 0x3, 0x0, 0x10}) (async) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000080)={0xd, 0x6b3, 0x1, 0x1ff, 0x80, 0x3, 0x0, 0x10}) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, [0x0, 0xff], [0xff, 0xffffff, 0xff000000, 0xffffff00], 'veth1_to_bridge\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff, 0x10, 0x0, 0x20}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x2, 0x4e0, 0x3ff, 0x7, 0x262, 0x9, 0xffff, 0x1, 0x0, 0x7fff, 0x1ff, 0xffff, 0x7ff, 0x9, 0xf82e, 0x6], 0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x0, "4cc94548d61f23e86a73bdf902c74321d0f1373ff63209915a2fd56ca16d"}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, [0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xff], 'pim6reg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x32, 0x6, 0x1, 0x28}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xff, 0xffffff00], 'batadv0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x9e, 0x6, 0x3, 0x6039183264b8368d}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x5}, {0x1, 0x4}, 0x5bc8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$inet6(0xa, 0x4, 0x3ff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0x20000041) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xcf, &(0x7f0000000780), &(0x7f00000007c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000880)={0x129c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x304, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x4, 0x24, 0x24, 0x6, 0x0, 0x5, 0x16, 0xc, 0x4, 0x30, 0x2, 0x18, 0xc, 0xc, 0x4, 0x1b, 0x60, 0x30, 0x4, 0x3, 0x12, 0x12, 0x5, 0x5, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x5d, 0x7, 0x0, 0x15dc, 0x81, 0xe87, 0x1ff]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x9}, {0x2}, {0x4, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x3}, {0x6, 0x1}, {0x5, 0xa}, {0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x4, 0x1}, {0x5}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7dc, 0x1, 0x3, 0x25b3, 0x100, 0xb35, 0x73d7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3ff, 0x8, 0x401, 0xfffa, 0x3, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x7, 0x1, 0x3d6a, 0x800, 0x401, 0x22]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4, 0x5, 0x6, 0x1, 0xdab, 0x0, 0x8000]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x43a7, 0x8, 0x4, 0xfff, 0xbc, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x30, 0x5, 0x16, 0x16, 0x1b, 0xb, 0x36, 0x30, 0x4, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1194, 0x9, 0x1, 0x9, 0x3, 0x0, 0x1000, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x3, 0x24, 0x24, 0x6c, 0xb, 0x1b, 0x24, 0x6c, 0xc, 0x16, 0xc, 0x36, 0xc, 0x36, 0x2, 0xc, 0x60, 0x18, 0xc, 0x24, 0x18, 0x30, 0x6c, 0x18, 0x4, 0x1a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xfffc, 0x2, 0x4a, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x36, 0x36, 0x48, 0x30, 0x5, 0x60, 0x2, 0x30, 0x24, 0x12, 0x2, 0x2, 0xa, 0x1, 0x2, 0x36, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x161}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x68}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x79}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x6, 0x5, 0x4, 0x5, 0x18, 0x48, 0x1, 0x9, 0x26f85c11a43441c, 0x6, 0x1b, 0x12, 0x1b, 0x1b, 0x3, 0x3, 0x65, 0x1, 0x1b, 0x60, 0x3, 0x60, 0x9, 0x12, 0x2, 0x6, 0x30, 0x6, 0x16, 0x1, 0x60]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x6}, {}, {0x3, 0x5}, {}, {0x7, 0x2}, {0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {}, {0x3, 0x7}, {0x1, 0x2}, {}, {0x7, 0x6}, {0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2, 0x5, 0x9, 0x4, 0xc, 0x2, 0x6c, 0x4, 0x30, 0x1b, 0x20, 0x6c, 0x30, 0x6c, 0x15, 0x24, 0xb, 0x12, 0x4, 0x4, 0x18, 0x12, 0x36, 0x5, 0x3, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x9, 0x0, 0x3, 0x9, 0x200, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x591, 0x484, 0xaae, 0x1a8, 0x5, 0x2, 0xe0bd, 0x96]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x5d4, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x0, 0x1b, 0x18, 0x3, 0x3, 0x16, 0xb, 0x1, 0x76fd971a3527c527, 0x5, 0x1b, 0x2, 0x3, 0x6, 0x36, 0x1b, 0x30, 0x6c, 0x5, 0x1b, 0xb, 0x6, 0x3, 0x30, 0x1b, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x99, 0xfce, 0x0, 0x6, 0x2, 0x3, 0x9, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x3, 0x2, 0xc, 0x48, 0xc, 0x29, 0x13fec496c9a93bab, 0x18, 0x12, 0x4d, 0x3, 0x6, 0x2, 0x16, 0x5, 0x24, 0x5b, 0x3, 0x2, 0x60, 0x30, 0x60, 0x60, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xdb8, 0x5, 0x9, 0x33b7, 0xfff, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xec50, 0x9, 0x81, 0x72ee, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x3, 0x2e0, 0x0, 0x3, 0x9, 0x1, 0x31c9]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{}, {0x1, 0x7}, {0x3, 0x5}, {0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x7}, {0x6, 0x9}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x6}, {0x0, 0x9}, {0x7}, {0x1}, {0x5, 0xa}, {0x2, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x36, 0x1, 0x3, 0x2, 0x6, 0x30, 0x12, 0x2, 0x1, 0x30, 0x6, 0x36, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x53, 0x3, 0x4, 0x7, 0x1000, 0x0, 0xe7, 0x1]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x3, 0x6]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x6c, 0x30, 0x7b, 0x1a7cd16e94f90b2d, 0x24, 0x3, 0x60, 0x6c, 0xa, 0xc, 0x6, 0x2, 0x48, 0x16, 0xb, 0x18, 0x30, 0xb, 0x5, 0x16, 0x66, 0x0, 0x2, 0x1b]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0xe, 0xc, 0xb, 0x12, 0x9, 0x60, 0x16, 0x1, 0xb, 0xc, 0x48, 0xc319779efe3e3240, 0x5, 0x6c, 0xc, 0x16, 0x16, 0x30, 0x48, 0xc, 0x9, 0x4, 0x6c, 0x3, 0x1, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf24b, 0x6, 0x6, 0x800, 0x21a0, 0x80, 0x52]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1b, 0x202, 0x5, 0x3, 0x8, 0x7, 0xd]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x3}, {0x4, 0x8}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x5}, {0x3}, {}, {0x5}, {0x0, 0x3}, {0x3}, {0x6, 0x8}, {}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x1}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x63, 0xfad9, 0x9, 0x7ff, 0x5, 0x8, 0x77]}}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x4}, {0x2, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa3f, 0x7, 0x1, 0x0, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x8}, {0x2}, {0x7, 0x7}, {0x1, 0x5}, {0x2}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x1c}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x3}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x6}, {0x1}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x2, 0x6, 0x5, 0x5f, 0x7f, 0xe6ad]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x7, 0x4, 0x7, 0x5, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0xa}, {0x6, 0x1}, {0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x3}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x5}, {0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x0, 0x9, 0x3, 0x12, 0x36, 0x24, 0x16, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffc, 0xb, 0x6, 0x1, 0x5, 0xffff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x300, 0xf0, 0xf, 0x123, 0x2, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff0, 0x7, 0x3, 0x2, 0x959, 0x1, 0xa0e, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x9, 0x6c, 0x6c, 0xc, 0x48, 0x60, 0x12, 0x18, 0x5, 0x0, 0x60, 0x3, 0x3, 0xb, 0x55, 0x16, 0x3, 0x48, 0x2, 0x4, 0x1b, 0x36]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x7}, {0x5, 0x4}, {0x5, 0x3}, {0x6, 0x8}, {0x5, 0x12}, {0x5, 0x2}, {0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x10}, {0x7, 0x5}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x2, 0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0x2}, {0x1, 0xe}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x200, 0x7ff, 0x9, 0xb6, 0x6, 0xfffc, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x4}, {0x5}, {0x5, 0x9}, {0x2, 0x2}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x4}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff4, 0x500, 0xc, 0x5, 0x5, 0x6, 0x0, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x1, 0xb, 0x16, 0x1, 0x36, 0x36, 0x3, 0xf, 0x18, 0x12, 0x18, 0x60, 0x60]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x48, 0x2, 0x4, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x60, 0xfff8, 0x1ff, 0x3, 0x9, 0x1, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}]}]}, @NL80211_ATTR_TID_CONFIG={0x3e0, 0x11d, 0x0, 0x1, [{0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x122}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0xfff9, 0xe1, 0x4, 0x8, 0x9, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x9, 0xb, 0xb, 0xe, 0x4, 0xb, 0x6c]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x7a7, 0x8, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0xff, 0x7, 0x6, 0x3, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0xa, 0x5, 0x3, 0x569, 0xfc, 0x7869, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf, 0x2, 0x1, 0x0, 0x42bc, 0x8001, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x28, 0x2, 0x48, 0x6, 0x60, 0x16, 0x16, 0x9, 0x48, 0x4, 0x6, 0x6c, 0x18, 0x3, 0xc, 0x1, 0x73, 0x3, 0x60, 0x60, 0x24, 0x30, 0x12, 0x1, 0x48, 0x34, 0x9, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7, 0x0, 0xee, 0xa00, 0x7da4, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6c7, 0x80, 0x4, 0x2, 0x200, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x8, 0x2, 0xf9, 0x4, 0x7fff, 0x1000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x2, 0xb, 0x3, 0x12, 0x6, 0x9, 0x28, 0x48, 0x6c, 0x1, 0x12, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x881, 0xa, 0x5, 0xffff, 0x2, 0xf7b2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x1, 0x1, 0x8000, 0x9, 0x5, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x3, 0x30, 0x48, 0x9, 0x30, 0x2, 0x60, 0x24, 0x4, 0x5, 0x9, 0x6c, 0x3, 0x16, 0x60, 0xc, 0x12, 0x4, 0x9, 0x2, 0x12, 0x9, 0x36, 0x0, 0x48, 0x1, 0x24, 0xb, 0x2]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {}, {0x7, 0x5}, {0x7, 0x4}, {0x6}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x4}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x1}, {0x3, 0x9}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {}, {0x5, 0x4}, {0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x2, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x12, 0x48, 0x4, 0x48, 0x9, 0x12, 0x12, 0xb, 0x36, 0x2, 0x24, 0x3, 0x24, 0x6c, 0x36, 0x1, 0x18, 0x3, 0xb, 0x60, 0x36, 0xc, 0x30, 0x5, 0x12, 0x12, 0x12, 0x30, 0x18]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x6, 0x4, 0xd000, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x8}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x13}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x8}, {0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x14}, {0x6, 0x1}, {}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x9}, {0x1, 0x1}, {0x5, 0xb}, {0x5, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x8}, {}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x67, 0x5, 0x8, 0x8, 0x1, 0x3, 0x7fff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x86, 0x101, 0x2, 0xaee, 0x887, 0x1, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x4c, 0x4, 0x3]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x7}, {0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x3, 0x8}, {0x2}, {0x2, 0x5}, {0x4}, {0x4, 0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x7}, {0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x64e7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x61f9, 0xfffb, 0xfff, 0x4, 0x8, 0xf4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x6c, 0x6c, 0x6c, 0x9, 0x48, 0x2, 0x2, 0xb, 0x60, 0x12, 0x36, 0x36, 0x60, 0x48, 0x60, 0x16]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x9, 0x3]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x2, 0x3c, 0x1b, 0x4, 0x18]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0xf8a6, 0x44e9, 0x5, 0x2, 0x4, 0x3d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7f, 0x8, 0x5, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x36, 0x48, 0x0, 0x1b, 0x2, 0x30, 0x9, 0xd32ae97dae794e6f, 0x12, 0x1, 0x2, 0xb, 0x0, 0xb, 0x18, 0x1, 0x2, 0x36, 0x2, 0x60, 0x36, 0x18]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x5}]}]}]}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x24, 0x2, 0x16, 0x5, 0x2, 0x18, 0x1, 0xc]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x4}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0x4}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x4, 0x9, 0x0, 0x30, 0x4, 0x2, 0x2, 0xc, 0x24, 0x9, 0x4, 0x47, 0x3, 0x6, 0x18]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x9, 0x9, 0x900, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe325, 0xfffb, 0x46d, 0x2, 0x81, 0x3483, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x27, 0x6, 0x8, 0xd72, 0xa5, 0xfffe]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x5, 0x200, 0x2, 0x3, 0x1, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x18, 0x2, 0x60, 0x3, 0x30, 0x18, 0xb, 0x30, 0x16, 0xc, 0x1b, 0x30, 0x9, 0x48, 0x1b, 0xb, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x74f, 0x0, 0xc, 0x1, 0x8, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x2}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x3}, {0x1, 0x5}, {0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}]}]}]}, 0x129c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001bc0)) chroot(&(0x7f0000001c00)='./file0\x00') (async) chroot(&(0x7f0000001c00)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000001c40)={0x2, 0x2b3, 0x5, 0x40}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000001c40)={0x2, 0x2b3, 0x5, 0x40}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000001c80)={0x1, 0x2}, 0x2) recvmmsg(r2, &(0x7f0000002380)=[{{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/104, 0x68}], 0x1, &(0x7f0000001e00)=""/81, 0x51}, 0x10000}, {{&(0x7f0000001e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/35, 0x23}, {&(0x7f0000001f40)=""/33, 0x21}, {&(0x7f0000001f80)=""/43, 0x2b}, {&(0x7f0000001fc0)=""/164, 0xa4}, {&(0x7f0000002080)=""/33, 0x21}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/254, 0xfe}, {&(0x7f0000002200)=""/39, 0x27}], 0x8, &(0x7f00000022c0)=""/179, 0xb3}, 0x3}], 0x2, 0x2, &(0x7f0000002400)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002440)={'vxcan1\x00'}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000024c0), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x5c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x59}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdf6f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44801}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002600)={'vxcan0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002700)={r7, 0x58, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$xdp(r5, &(0x7f0000002740)={0x2c, 0x17, r8, 0x2, r5}, 0x10) (async) bind$xdp(r5, &(0x7f0000002740)={0x2c, 0x17, r8, 0x2, r5}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r7, 0x84, 0x25, &(0x7f0000002780)={0x2, @in={{0x2, 0x4e23, @multicast2}}, 0x657, 0x10, 0x6}, &(0x7f0000002840)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000002880)={r9, 0x3, 0x3}, 0x8) add_key$fscrypt_provisioning(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x3}, &(0x7f0000002940)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) (async) r10 = add_key$fscrypt_provisioning(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x3}, &(0x7f0000002940)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r7, 0x26) sendmsg$nl_generic(r7, &(0x7f0000002a40)={&(0x7f0000002980), 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x28, 0x100, 0x70bd29, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xee00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 962.604612ms ago: executing program 1 (id=797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0a00ff0000000071104400000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x80) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000001ac0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r2, &(0x7f0000001b00)={0xa, 0x0, 0x75f7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x2}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r4 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000300)="$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") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000840)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000880)=0x10) r8 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$HDIO_GETGEO(r8, 0x301, &(0x7f0000001b80)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f00000008c0)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000980)=0x84) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000001d40)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001dc0)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000001e00)={@local, r11}, 0x14) sendmmsg$inet_sctp(r4, &(0x7f0000001b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r4], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000a40)=""/4107, &(0x7f0000001a80)=0x100b) connect$l2tp6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x400, @local, 0x2, 0x1}, 0x20) sendto$inet6(r0, &(0x7f00000001c0)="fb8bc2d9", 0x4, 0x55, &(0x7f0000000080)={0xa, 0x5e23, 0x40000002, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 962.05643ms ago: executing program 9 (id=798): syz_mount_image$ext4(&(0x7f0000006a80)='ext4\x00', &(0x7f0000006ac0)='./file0\x00', 0x2810000, &(0x7f0000000500)={[{@nodiscard}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@errors_remount}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000006bc0)="$eJzs3d9rW1UcAPDvvW33U10HY6iIFPbgZC5dW39M8GE+ig4H+j5Dm5XRdBlNOtY62PbgXnyRIYg4EN/13cexf8C/YqCDIaPogy+Rm95kaZusWdet2fL5wG3PybnJud977jk5NzeXBDCwxrI/acRrEfFdEnGgrWw48sKx1fVWHlyZzpYk6vUv/k4iyR9rrp/k//fnmVcj4s43EcfSjfVWl5bniuVyaSHPj9fmL45Xl5aPn58vzpZmSxcmp6ZOvjc1+eEH729brG+f+ffHz29/cvLbIys//Hbv4M0kTsVLeVl7HLm0LaReXWvPjMVY/gIjcWrdihOPu/F9qrn/HndH0R+G8n4+EtkYcCCG8l4PvPiuRkQdGFCJ/g8DqjkPaJ7bdzgPfqHd/3j1BGhj/MOrn43Ensa50b6VZM2ZUXa+O7oN9Wd1/P7XrZvZEp0/h1gvWfcxA8CWXLseESeGhzeOf0k+/m3diR7WWV/HoL3/wE66nc1/3uk0/0lb85/oMP/Z36HvbsXm/T+9tw3VdJXN/z7qOP9tXbQaHcpzLzfmfCPJufPlUja2vRIRR2Nkd5Z/1PWckyt3693K2ud/2ZLV35wL5ttxb3j32ufMFGvFJ4m53f3rEa93nP8mrfZPOrR/tj/O9FjH4dKtN7uVbR7/01X/JeKtiLizazXfHn9T8ujrk+ON42G8eVRs9M+Nw3+0Mitry3Y6/qz993U8/lvxjybt12urj1/Hz3v+K0X9aseyrR7/u5IvG+m82eJysVZbmIjYlXy28fHJh89t5pvrZ/EfPfLo8a/T8b83Ir7qMf4bh359o1tZh/jTZ93+Mz21fzYKZu3fOhB6Ttz99OufutW/Jv5r0aX9322kjuaP9DL+9bqBT7LvAAAAAAAAoN+kjXs4k7TQSqdpobD6/Y5DsS8tV6q1Y+cqixdmVu/1HI2RtHml+0Db9yEm8u/DNvOT6/JTEXEwIr4f2tvIF6Yr5ZmdDh4AAAAAAAAAAAAAAAAAAAD6xP4u9/9n/hza6a0Dnjo/+Q2Da9P+vx2/9AT0Je//MLj0fxhc+j8MLv0fBpf+D4Mr7/8u98MA8v4Pg0v/BwAAAAAAAAAAAAAAAAAAAAAAAAAAgG115vTpbKmvPLgyneVnLi0tzlUuHZ8pVecK84vThenKwsXCbKUyWy4Vpivzm71euVK5ODEZi5fHa6Vqbby6tHx2vrJ4oXb2/HxxtnS2NPJMogIAAAAAAAAAAAAAAAAAAIDnS3Vpea5YLpcWJJ7jRBo7V/twv+wEiW1N7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/R8AAP//nI4y/w==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x3, r1}, 0x38) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1004, 0x1) 797.422819ms ago: executing program 9 (id=799): syz_open_dev$video(0x0, 0xa7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 724.525175ms ago: executing program 9 (id=800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000040)='3', 0x1, 0x2000c805, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x8905, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000000580)={[{@dioread_lock}, {@errors_remount}, {@data_err_ignore}, {@noload}, {@grpjquota}, {@nobh}]}, 0xfe, 0x467, &(0x7f00000009c0)="$eJzs3MtvVFUYAPDv3r5AwI4EHzzUKhqJj5YWRIxuNJq40MREF7isbSHIQA1TEyBEqzG4NCTuiUsT/wJXujHqysSt7g0JUTYgqzF35k47nc5MH3Y6lfn9koFz7jmXc76ee2bOvYdpAD1rJPsjidgZEb9HxHA1u7TCSPWv2zcvT/1z8/JUEuXyO38llXq3bl6eqlWtnNcfsaOWKUSknyexv0m7pYuXzkwWizPn8/zY3NkPx0oXLz13+uzkqZlTM+cmjh8/emT8hWMTz29InFlct/Z9PHtg7xvvXX1r6sTV93/+NqnF3xDHmqQtS0banfZkubyu5raqXXXppH8xucJp5eGO9YjV6KtO2RiozP/h6IvFwRuO1z/raueAjhpsXzxfBu5i2Wp+TeLvDvUE2Fy1D/rs/rf22oRlx5Zx45XqDVAW9+38VS3pX7i1H2i4v91IIxGxbf7OtRPzd65F3XOInR1qDwDg+2z982yz9V8aD9TVuzffQylExH0RsTsijkXEnoi4P6JS98GIeGiN7Tdukixff6bX1xXYKmXrv5fzva2l67+FjZ1CX57bVYl/IDl5ujhzOP+ZHIqBoSw/3qaNH1777ctWZVn8J/L1X/bK2q+tBfN+XO8fWnrO9OTc5H+Jud6NTyP29TeLP1nYCUgiYm9E7FtnG6ef/uZAq7KV4++s8tcRT1XHfz4a4q9J2u9Pjm2L4szhsdpVsdwvv155u1X73Y4/G/+IbU3HP1dI6vdrS2tv48ofX1T+zWZbpeu9/geTd5ccuzA5N3d+PGIwebPa6frjEw31JhbrZ/EfOth8/u+OxZ/E/ojILuKHI+KRiHg07/tjEfF4RBxsE/9Prz7xQauyrTD+0xFxp/xiafZCdmSl8V9MDEbjkeaJvjM/frek0cJa4s/G/2gldSg/spr3vxX79VK6zqsZAAAA/n/Syl5zko4upNN0dLT6f/j3xD1pcbY098zJ2Y/OTVf3pAsxkNaedA3XPQ8dz2/ra/mJhvyR/LnxV33bK/nRqdnidLeDhx63o8X8z/zZ1+3eAR2Xb/St5htp3hLgLtPf7Q4AXWP+Q+8y/6F3NZn/27vRD2DzVeZ/w69q+qRLfQE2V8Pnv2f80EPc/0PvMv+hd5n/0JNK26P9l/c7mRiKLjQqsTGJSJcV7YiI7nds9YmhrdGNrZno9jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxvg3AAD//2Hk3EA=") 685.290024ms ago: executing program 1 (id=801): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x7f) userfaultfd(0x1) (async) r0 = syz_open_dev$vcsn(&(0x7f00000007c0), 0x7, 0x4480) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000240)="c3"}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80000) ptrace$setregset(0x4205, r1, 0x403, &(0x7f0000000280)={0x0}) (async) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000800)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000840)={0x2, 0x4e21, @empty}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)="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", 0x17b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="8e", 0x1}], 0x1}}], 0x4, 0x40488c1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x183882, 0x12c) write(r3, &(0x7f0000000380)='270', 0x3) (async) syz_ublk_setup_io_uring(0x3a07, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$mtd(&(0x7f00000003c0), 0x0, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/kmsg\x00', 0x1, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) lseek(r5, 0x80000000000040, 0x4) (async) statx(r5, 0x0, 0x2000, 0x2, 0x0) (async) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000580)={0x1, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x10000, 0x1}}) 683.777365ms ago: executing program 7 (id=802): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0xe, {{0xa, 0x4e21, 0x73, @mcast1, 0x3}}}, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001e00), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000001e40)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x400000, 0x2d52c0], [0x7, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, 0x3f, 0x0, 0xd12, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x2, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000022c0)={'syz1\x00', {0x3, 0x7, 0x2, 0x3ff}, 0x2d, [0x1, 0x0, 0x9, 0xd23, 0xad, 0x4, 0x2b2, 0x0, 0x4, 0x0, 0x5, 0x7, 0x8, 0xb, 0x582f, 0xfff, 0x100, 0xb67, 0x1b7, 0x18, 0x7, 0x4, 0x0, 0x7, 0x5, 0x90, 0xca1, 0x6, 0x5, 0x6, 0x4, 0x2, 0x1, 0x8, 0x7, 0x8, 0xfffffffc, 0x9716, 0x1, 0x5, 0x0, 0xffffffff, 0xdce, 0x400, 0x1, 0x6, 0xf, 0x1, 0x8, 0x400, 0x3, 0x5, 0x2, 0xe, 0x1, 0x9, 0x10, 0x7f, 0x2, 0x101, 0x7, 0xfffffffe, 0xfff, 0x7f], [0xff, 0x8, 0x9, 0x200, 0x8, 0xcc, 0x0, 0xffffffff, 0x1ff, 0x80000001, 0xfffff5e6, 0xcc, 0xca19, 0x1000000e, 0x5, 0x9, 0x6, 0x3, 0x400006, 0x8000, 0x8, 0x1ff, 0xd, 0x0, 0x2e3, 0x890, 0xfffffffd, 0x80, 0x100, 0x3, 0x6, 0x100, 0xfffffffc, 0x7, 0x401, 0x80000000, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0x2, 0x330c, 0x2, 0x101, 0x81, 0x9, 0xfffffffc, 0x0, 0x80000000, 0x36fc2bc4, 0x200, 0x7, 0x3ff, 0x5, 0x7, 0x6, 0xd77a, 0x9, 0xfffffffe, 0x3, 0x7, 0xfefffc5b, 0x5], [0x4, 0x8, 0x3, 0xa, 0xfffffff2, 0x2, 0x3, 0x200, 0x6, 0x1, 0xac84, 0x6, 0x1, 0x6, 0x6, 0x1, 0xcb0c, 0x9, 0x9, 0x8, 0x40, 0x4, 0x4, 0x9, 0x5, 0x9, 0x9, 0x8, 0x315, 0x3, 0x200, 0x7, 0x7, 0xaf7, 0x8, 0xfffffffa, 0x80, 0x3, 0xffffffff, 0x3, 0x4, 0x5, 0x3800000, 0xfff, 0x10000, 0xfff, 0xdbc5, 0x48da, 0x10, 0x800, 0x8, 0xc426, 0x6a1b, 0x10, 0x8, 0x0, 0x8, 0x0, 0xfffffffb, 0xfff, 0x5, 0x5, 0x10001, 0x2], [0x7fffffff, 0x101, 0x2, 0x2, 0x1, 0x8, 0x2e811959, 0x449, 0x7fff, 0xf, 0xffff, 0xf2d, 0x2, 0x35, 0x1, 0x0, 0x4, 0x29, 0x35a, 0x80a6, 0x3, 0x5, 0x8000, 0x101, 0x8, 0x4, 0xa510, 0x8, 0x9, 0x9, 0x80002, 0x5, 0xffffffff, 0xda1, 0x7ff, 0x9, 0x800b8, 0x3, 0x1, 0xfffffff7, 0x100, 0xfffffff7, 0x5, 0x9, 0x8, 0x3, 0x6, 0x9, 0x6, 0x4, 0x400, 0x6, 0xfffffffa, 0xa73a, 0x5, 0x3, 0x5, 0x8, 0x80000001, 0x1f4, 0x1, 0x1ff, 0x3, 0xd]}, 0x45c) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x9, @private2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700009c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x2, 0x1, @stop_pts=0x5}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2200000, &(0x7f00000003c0)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x14, 0x15, 0x1, 0x0, 0x3, {0xa, 0xfc}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x80) unshare(0x26020480) mount$bind(&(0x7f0000000ac0)='./file0/../file0\x00', &(0x7f0000000b00)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000002740)=ANY=[@ANYBLOB="3c000000100001040000ffff0000000000000000487e55fcfa893fe297eb00424a4fd9dcc4ca84fa64859f3ece06edbf3cf96bf192ef793f551878", @ANYRES32=0x0, @ANYBLOB="421c000000000000140012800a00010069706f69620000000400028008002900bddb0000"], 0x3c}}, 0x0) pread64(r3, &(0x7f0000000c80)=""/4096, 0x1000, 0xd33) 496.108397ms ago: executing program 9 (id=803): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x6) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140), 0x10) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) read$char_usb(r3, &(0x7f0000000600)=""/109, 0x6d) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "00207420100020000000000000000000000000000000175a21ed00"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESOCT=r4, @ANYBLOB="b9f76bcd1ef33b6c217d7a62", @ANYBLOB="175b84a6a4d2858be0a5bf7bac51834201f3531d1d50e00d970c426659909f49e7b9c0446bc317837a1fd9753add850133d4231f41d8b12c1a92f26099a62902e79dc83e766eb722e23361ae7a4160dfcd30652e5809ff5da859ea2d55f9c06bd918", @ANYRES8=r4, @ANYBLOB="a7def82e115805663ec6a8fa61584cf42951383ae92631e769b1fd41b79db25a52b2ef8d5a4638d230b503db41074bd586b4ac0103d5603985b19e24263b4d6d8be418f439fb064f0f9d6d03f5ca88674c482b3b04792bd5bf2ba3be31cc892ac66fcf203c130f61841a4d93662b7be41d408f06037cef74a090c9b69cec32e0b1b6fccfd4972f58b1f2c083b3ffb3021a934351bfd1b08d7e04e0fbd508fc1ea431d8140af4a3b5ebaa24138321575764c15f032bf662fd3f48945d8f5341fa2ca4975a126fdbd051a376a6"], 0x68}}, 0x0) 333.925177ms ago: executing program 9 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100003f4ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100627269646765000024000280050017000000000005002c000100000005002400000000000500160000000000"], 0x54}}, 0x0) 329.753823ms ago: executing program 3 (id=805): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x4, r2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x4, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[0x2], &(0x7f0000000480)=[r3], &(0x7f00000004c0), 0x0, 0x2000}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0x5}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000890}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x0, 0x9}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0xffffffffffffff2c, "d58838000391"}]}}}}}}, 0xfd6c) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @str='),*\x00'}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @str='),*\x00'}]}, 0x18}], 0x1}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r5, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) 0s ago: executing program 9 (id=806): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x3}], {0x10, 0x3}}, 0x2c, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000240)='p', 0x1}], 0x1, 0x4) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) kernel console output (not intermixed with test programs): T40] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.700836][ T40] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.700853][ T40] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.700870][ T40] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.700883][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 62.700948][ T40] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.700966][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732188][ T40] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732242][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732262][ T40] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732279][ T40] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732296][ T40] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732312][ T40] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732328][ T40] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732343][ T40] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732359][ T40] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732375][ T40] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732390][ T40] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732406][ T40] netdevsim netdevsim2 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732421][ T40] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732436][ T40] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732451][ T40] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732466][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732481][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.789968][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.840689][ T6424] tipc: Started in network mode [ 62.840708][ T6424] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.841087][ T6424] tipc: New replicast peer: 172.20.20.187 [ 62.843949][ T6424] tipc: Enabled bearer , priority 10 [ 62.859545][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.879543][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.879557][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.941247][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.5.271'. [ 62.991629][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.991652][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.030235][ T6436] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 63.095775][ T6442] vfat: Unknown parameter 'shortna}e' [ 63.151353][ T6446] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.275'. [ 63.151383][ T6446] netlink: zone id is out of range [ 63.151486][ T6446] netlink: zone id is out of range [ 63.151531][ T6446] netlink: get zone limit has 8 unknown bytes [ 63.152012][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.275'. [ 63.155720][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.9.228'. [ 63.157290][ T6447] vfat: Unknown parameter '' [ 63.274347][ T6461] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 63.274366][ T6461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.276466][ T6461] vhci_hcd vhci_hcd.0: Device attached [ 63.284489][ T6461] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 63.284747][ T6461] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.309102][ T6462] vhci_hcd: connection closed [ 63.313580][ T40] vhci_hcd vhci_hcd.5: stop threads [ 63.313855][ T40] vhci_hcd vhci_hcd.5: release socket [ 63.313878][ T40] vhci_hcd vhci_hcd.5: disconnect device [ 63.384339][ T6455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.401175][ T6455] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.277: corrupted inode contents [ 63.402835][ T6455] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #15: comm syz.7.277: mark_inode_dirty error [ 63.403147][ T6455] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.277: corrupted inode contents [ 63.403616][ T6455] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.277: mark_inode_dirty error [ 63.403758][ T6455] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.277: corrupted inode contents [ 63.403893][ T6455] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.277: mark_inode_dirty error [ 63.474726][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.282'. [ 63.477650][ T4743] Bluetooth: hci4: command tx timeout [ 63.539964][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.9.284'. [ 63.557672][ T4743] Bluetooth: hci3: command tx timeout [ 63.838786][ T6371] tipc: Node number set to 2886997162 [ 63.900775][ T6491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.904257][ T6491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.059786][ T5767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.194620][ T3864] smc: removing ib device rxe0 [ 64.201732][ T6371] infiniband rxe0: ib_query_port failed (-19) [ 64.262712][ T4430] 8021q: adding VLAN 0 to HW filter on device eth14 [ 64.521219][ T875] cfg80211: failed to load regulatory.db [ 64.522027][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.522057][ T1613] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.775326][ T6558] netlink: 'syz.5.302': attribute type 26 has an invalid length. [ 64.776224][ T30] audit: type=1326 audit(64.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.776441][ T30] audit: type=1326 audit(64.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.776501][ T30] audit: type=1326 audit(64.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.776747][ T30] audit: type=1326 audit(64.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.776782][ T30] audit: type=1326 audit(64.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.776926][ T30] audit: type=1326 audit(64.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.782216][ T30] audit: type=1326 audit(64.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.782419][ T30] audit: type=1326 audit(64.740:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.784180][ T30] audit: type=1326 audit(64.740:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.784258][ T30] audit: type=1326 audit(64.740:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.5.302" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f7a228 code=0x7ffc0000 [ 64.807041][ T6558] binder: 6556:6558 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.807059][ T6558] binder: 6558 RLIMIT_NICE not set [ 64.807156][ T6558] binder: 6556:6558 ioctl c0306201 20000140 returned -14 [ 64.889541][ T6554] __nla_validate_parse: 4 callbacks suppressed [ 64.889557][ T6554] netlink: 260 bytes leftover after parsing attributes in process `syz.1.301'. [ 64.949803][ T6566] ip_tables: iptables: counters copy to user failed while replacing table [ 65.004022][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.307'. [ 65.032794][ T6590] bridge0: port 3(syz_tun) entered blocking state [ 65.032872][ T6590] bridge0: port 3(syz_tun) entered disabled state [ 65.033042][ T6590] syz_tun: entered allmulticast mode [ 65.034486][ T6590] syz_tun: entered promiscuous mode [ 65.034900][ T6590] bridge0: port 3(syz_tun) entered blocking state [ 65.034934][ T6590] bridge0: port 3(syz_tun) entered forwarding state [ 65.046177][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 65.048798][ T6590] binder: 6589:6590 BC_ACQUIRE_DONE u0000000000000000 no match [ 65.049024][ T6590] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.050833][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 65.060832][ T6590] team0: Port device team_slave_0 removed [ 65.103997][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.306'. [ 65.104490][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.306'. [ 65.104661][ T6598] fuse: Unknown parameter 'gr' [ 65.105620][ T6583] fuse: Unknown parameter 'gr' [ 65.143883][ T4430] 8021q: adding VLAN 0 to HW filter on device eth15 [ 65.187787][ T6607] netlink: 'syz.7.309': attribute type 3 has an invalid length. [ 65.187804][ T6607] netlink: 132 bytes leftover after parsing attributes in process `syz.7.309'. [ 65.188357][ T6607] fuse: Bad value for 'fd' [ 65.301636][ T6621] ip_tables: iptables: counters copy to user failed while replacing table [ 65.302721][ T4430] 8021q: adding VLAN 0 to HW filter on device eth16 [ 65.433395][ T4430] 8021q: adding VLAN 0 to HW filter on device eth17 [ 65.557492][ T4743] Bluetooth: hci4: command tx timeout [ 65.567850][ T4430] 8021q: adding VLAN 0 to HW filter on device eth18 [ 65.675471][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 65.726086][ T4430] 8021q: adding VLAN 0 to HW filter on device eth19 [ 65.772020][ T6679] netlink: 'syz.8.313': attribute type 1 has an invalid length. [ 65.783320][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.791645][ T6679] veth0_virt_wifi: entered promiscuous mode [ 65.800892][ T6679] bond1: (slave veth0_virt_wifi): making interface the new active one [ 65.802367][ T6679] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 65.809950][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.8.313'. [ 65.810477][ T6679] bond1: entered promiscuous mode [ 65.810585][ T6679] bond1: entered allmulticast mode [ 65.810591][ T6679] veth0_virt_wifi: entered allmulticast mode [ 65.819207][ T6679] bond1: (slave veth0_virt_wifi): Releasing active interface [ 65.819281][ T6679] veth0_virt_wifi: left allmulticast mode [ 65.931833][ T6707] syzkaller0: entered promiscuous mode [ 65.931849][ T6707] syzkaller0: entered allmulticast mode [ 66.027545][ T6715] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 66.224242][ T6719] netlink: 36 bytes leftover after parsing attributes in process `syz.7.318'. [ 66.255652][ T6724] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.334780][ T6736] set_capacity_and_notify: 17 callbacks suppressed [ 66.334793][ T6736] loop8: detected capacity change from 0 to 128 [ 66.386291][ T6736] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.678676][ T5881] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.755343][ T6755] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 66.755540][ T6755] Memory failure: 0x216a31: Sending SIGBUS to syz.8.322:6755 due to hardware memory corruption [ 66.757282][ T6755] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 66.871005][ T6774] loop1: detected capacity change from 0 to 512 [ 66.928636][ T6775] nfs: Unknown parameter 'po ¯N¾lvÄ4rt' [ 67.222661][ T6774] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.323: bg 0: block 5: invalid block bitmap [ 67.222685][ T6774] loop1: lost filesystem error report for type 5 error -117 [ 67.224109][ T6774] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 67.224143][ T6774] loop1: lost filesystem error report for type 5 error -117 [ 67.225137][ T6774] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.323: invalid indirect mapped block 3 (level 2) [ 67.225175][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.226849][ T6774] EXT4-fs (loop1): 1 orphan inode deleted [ 67.226860][ T6774] EXT4-fs (loop1): 1 truncate cleaned up [ 67.230887][ T6774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.283731][ T6774] veth0_macvtap: left promiscuous mode [ 67.652808][ T4743] Bluetooth: hci4: command tx timeout [ 67.676373][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.781547][ T6807] fuse: Bad value for 'fd' [ 68.261522][ T6864] syzkaller0: entered promiscuous mode [ 68.261539][ T6864] syzkaller0: entered allmulticast mode [ 68.270715][ T6864] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 69.704959][ T6755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.771682][ T7033] netlink: 'syz.5.334': attribute type 12 has an invalid length. [ 69.785872][ T7040] netlink: 'syz.8.337': attribute type 10 has an invalid length. [ 69.864938][ T7043] syz.8.339 (7043): /proc/7042/oom_adj is deprecated, please use /proc/7042/oom_score_adj instead. [ 69.962261][ T5384] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.981985][ T7069] loop1: detected capacity change from 0 to 1024 [ 69.994585][ T7069] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.996852][ T7069] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.003964][ T7069] JBD2: no valid journal superblock found [ 70.004632][ T7069] EXT4-fs (loop1): Could not load journal inode [ 70.060682][ T7080] overlay: filesystem on ./file0 not supported as upperdir [ 70.139530][ T7098] sctp: [Deprecated]: syz.5.350 (pid 7098) Use of int in max_burst socket option. [ 70.139530][ T7098] Use struct sctp_assoc_value instead [ 70.555065][ T7137] loop9: detected capacity change from 0 to 32768 [ 70.621795][ T7137] loop9: p1 p2 p3 [ 70.661814][ T6163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.662029][ T4744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.664344][ T4744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.665059][ T4744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.667298][ T4744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.674639][ T4744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.769453][ T7173] __nla_validate_parse: 5 callbacks suppressed [ 70.769470][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.361'. [ 70.771835][ T6163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.781804][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.785522][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.785740][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.864454][ T6163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.961998][ T7159] infiniband rxe0: set active [ 70.962031][ T6090] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.962723][ T7159] infiniband rxe0: added rxe_eth0 [ 70.981210][ T7159] RDS/IB: rxe0: added [ 70.981232][ T7159] smc: adding ib device rxe0 with port count 1 [ 70.981243][ T7159] smc: ib device rxe0 port 1 has no pnetid [ 70.993884][ T7192] loop8: detected capacity change from 0 to 256 [ 70.998379][ T6163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.001906][ T6268] udevd[6268]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 71.007839][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.009209][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.011204][ T4730] udevd[4730]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 71.012734][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 71.030262][ T51] Bluetooth: Unexpected start frame (len 18) [ 71.030290][ T51] Bluetooth: Frame is too long (len 18, expected len 4) [ 71.032565][ T7192] FAULT_INJECTION: forcing a failure. [ 71.032565][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 71.032581][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.8.365 Not tainted syzkaller #0 PREEMPT [ 71.032592][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.032597][ T7192] Call trace: [ 71.032600][ T7192] show_stack+0x2c/0x3c (C) [ 71.032614][ T7192] __dump_stack+0x30/0x40 [ 71.032623][ T7192] dump_stack_lvl+0xd8/0x12c [ 71.032631][ T7192] dump_stack+0x1c/0x28 [ 71.032639][ T7192] should_fail_ex+0x418/0x58c [ 71.032650][ T7192] should_failslab+0xc4/0x120 [ 71.032659][ T7192] kmem_cache_alloc_noprof+0x94/0x5d4 [ 71.032670][ T7192] alloc_vfsmnt+0x38/0x48c [ 71.032682][ T7192] vfs_create_mount+0x68/0x140 [ 71.032693][ T7192] __arm64_sys_fsmount+0x4f0/0xb48 [ 71.032701][ T7192] invoke_syscall+0x98/0x244 [ 71.032710][ T7192] el0_svc_common+0xec/0x23c [ 71.032719][ T7192] do_el0_svc+0x4c/0x5c [ 71.032726][ T7192] el0_svc+0x60/0x1d8 [ 71.032735][ T7192] el0t_64_sync_handler+0x44/0x104 [ 71.032743][ T7192] el0t_64_sync+0x198/0x19c [ 71.055072][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.8.365'. [ 71.068301][ T7195] loop9: detected capacity change from 0 to 512 [ 71.079442][ T7195] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 71.079550][ T7195] EXT4-fs (loop9): orphan cleanup on readonly fs [ 71.094173][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.096782][ T7195] __quota_error: 60 callbacks suppressed [ 71.096792][ T7195] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 71.096832][ T7195] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 71.096841][ T7195] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.366: Failed to acquire dquot type 1 [ 71.096852][ T7195] loop9: lost filesystem error report for type 5 error -5 [ 71.097468][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 71.097482][ C1] EXT4-fs (loop9): initial error at time 71: ext4_acquire_dquot:7070 [ 71.097496][ C1] EXT4-fs (loop9): last error at time 71: ext4_acquire_dquot:7070 [ 71.115306][ T7195] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.366: bg 0: block 40: padding at end of block bitmap is not set [ 71.115332][ T7195] loop9: lost filesystem error report for type 5 error -117 [ 71.117596][ T7195] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 71.117616][ T7195] loop9: lost filesystem error report for type 5 error -117 [ 71.118166][ T7195] EXT4-fs warning (device loop9): ext4_evict_inode:196: inode #16: comm syz.9.366: data will be lost [ 71.118240][ T7195] EXT4-fs (loop9): 1 truncate cleaned up [ 71.142462][ T7195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.182994][ T3864] netdevsim netdevsim5 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.183150][ T3864] netdevsim netdevsim5 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.183166][ T3864] netdevsim netdevsim5 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188879][ T3864] netdevsim netdevsim5 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.206337][ T6163] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.229141][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.289136][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.345627][ T7159] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.349412][ T7216] loop7: detected capacity change from 0 to 128 [ 71.358583][ T5384] netdevsim netdevsim10 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.369470][ T7216] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.382343][ T6163] bridge_slave_1: left allmulticast mode [ 71.382361][ T6163] bridge_slave_1: left promiscuous mode [ 71.382456][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.396807][ T6163] bridge_slave_0: left allmulticast mode [ 71.396823][ T6163] bridge_slave_0: left promiscuous mode [ 71.396909][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.499429][ T7216] fscrypt (loop7, inode 12): Unsupported encryption flags (0x46) [ 71.591520][ T6163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.628944][ T6163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.642193][ T6163] bond0 (unregistering): Released all slaves [ 71.646912][ T6163] bond1 (unregistering): Released all slaves [ 71.654047][ T6163] bond2 (unregistering): Released all slaves [ 71.662117][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.681116][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.727344][ T7244] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 71.727369][ T7244] Memory failure: 0x216a31: Sending SIGBUS to syz.9.371:7244 due to hardware memory corruption [ 71.727388][ T7244] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 71.730953][ T7243] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 71.730982][ T7243] Memory failure: 0x216a31: Sending SIGBUS to syz.9.371:7243 due to hardware memory corruption [ 71.731001][ T7243] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 71.758917][ T7249] openvswitch: netlink: Message has 198 unknown bytes. [ 71.812176][ T7259] netlink: 'syz.9.374': attribute type 3 has an invalid length. [ 71.816513][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.816584][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.816638][ T7159] bridge_slave_0: entered allmulticast mode [ 71.817060][ T7159] bridge_slave_0: entered promiscuous mode [ 71.818832][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.818879][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.818929][ T7159] bridge_slave_1: entered allmulticast mode [ 71.819348][ T7159] bridge_slave_1: entered promiscuous mode [ 71.875668][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.876619][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.883827][ T7159] team0: Port device team_slave_0 added [ 71.884743][ T7159] team0: Port device team_slave_1 added [ 71.908756][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.908769][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.908781][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.909272][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.909279][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.909290][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.919996][ T7159] hsr_slave_0: entered promiscuous mode [ 71.920279][ T7159] hsr_slave_1: entered promiscuous mode [ 71.920449][ T7159] debugfs: 'hsr0' already exists in 'hsr' [ 71.920459][ T7159] Cannot create hsr debugfs directory [ 71.996948][ T7159] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.037566][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 72.037691][ T4743] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 72.082975][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.083341][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.083513][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.083679][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.083845][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.084162][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.084336][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.084512][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.084668][ T7286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.087353][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 72.212077][ T5767] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.356746][ T7304] loop8: detected capacity change from 0 to 128 [ 72.369206][ T30] audit: type=1326 audit(72.330:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.369229][ T30] audit: type=1326 audit(72.330:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.369804][ T30] audit: type=1326 audit(72.330:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.369830][ T30] audit: type=1326 audit(72.330:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.369847][ T30] audit: type=1326 audit(72.330:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.370224][ T30] audit: type=1326 audit(72.330:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.370301][ T30] audit: type=1326 audit(72.330:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.370380][ T30] audit: type=1326 audit(72.330:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.8.378" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f7a228 code=0x7ffc0000 [ 72.427254][ T7318] loop7: detected capacity change from 0 to 512 [ 72.453617][ T7318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.485007][ T7333] 9p: Bad value for 'rfdno' [ 72.535177][ T7346] Bluetooth: MGMT ver 1.23 [ 72.758316][ T4743] Bluetooth: hci2: command tx timeout [ 72.934302][ T6163] hsr_slave_0: left promiscuous mode [ 72.934550][ T6163] hsr_slave_1: left promiscuous mode [ 72.934794][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.934805][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.935231][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.935239][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.950590][ T6163] veth1_macvtap: left promiscuous mode [ 72.950619][ T6163] veth0_macvtap: left promiscuous mode [ 72.950663][ T6163] veth1_vlan: left promiscuous mode [ 72.950699][ T6163] veth0_vlan: left promiscuous mode [ 73.056945][ T6163] team0 (unregistering): Port device team_slave_1 removed [ 73.069056][ T6163] team0 (unregistering): Port device team_slave_0 removed [ 73.130107][ T7354] batadv_slave_1: entered promiscuous mode [ 73.157063][ T5767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.219812][ T7371] FAULT_INJECTION: forcing a failure. [ 73.219812][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 73.219834][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.8.392 Not tainted syzkaller #0 PREEMPT [ 73.219845][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.219851][ T7371] Call trace: [ 73.219854][ T7371] show_stack+0x2c/0x3c (C) [ 73.219870][ T7371] __dump_stack+0x30/0x40 [ 73.219879][ T7371] dump_stack_lvl+0xd8/0x12c [ 73.219887][ T7371] dump_stack+0x1c/0x28 [ 73.219895][ T7371] should_fail_ex+0x418/0x58c [ 73.219906][ T7371] should_failslab+0xc4/0x120 [ 73.219917][ T7371] kmem_cache_alloc_noprof+0x94/0x5d4 [ 73.219927][ T7371] alloc_empty_file+0x6c/0x1cc [ 73.219938][ T7371] alloc_file+0x58/0x98 [ 73.219948][ T7371] alloc_file_pseudo+0xe0/0x198 [ 73.219958][ T7371] sock_alloc_file+0xb4/0x1ac [ 73.219970][ T7371] __sys_socket+0x90/0xec [ 73.219990][ T7371] __arm64_sys_socket+0x84/0x9c [ 73.220001][ T7371] invoke_syscall+0x98/0x244 [ 73.220010][ T7371] el0_svc_common+0xec/0x23c [ 73.220018][ T7371] do_el0_svc+0x4c/0x5c [ 73.220026][ T7371] el0_svc+0x60/0x1d8 [ 73.220035][ T7371] el0t_64_sync_handler+0x44/0x104 [ 73.220044][ T7371] el0t_64_sync+0x198/0x19c [ 73.235721][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.7.390'. [ 73.356815][ T7410] loop1: detected capacity change from 0 to 512 [ 73.360621][ T7396] loop7: detected capacity change from 0 to 8 [ 73.379181][ T7396] Major/Minor mismatch, trying to mount newer 8192.0 filesystem [ 73.379200][ T7396] Please update your kernel [ 73.397246][ T7422] netlink: 'syz.9.399': attribute type 1 has an invalid length. [ 73.403824][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.9.399'. [ 73.426608][ T7422] veth3: entered allmulticast mode [ 73.468066][ T7424] FAULT_INJECTION: forcing a failure. [ 73.468066][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.468094][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.7.401 Not tainted syzkaller #0 PREEMPT [ 73.468108][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.468115][ T7424] Call trace: [ 73.468118][ T7424] show_stack+0x2c/0x3c (C) [ 73.468135][ T7424] __dump_stack+0x30/0x40 [ 73.468144][ T7424] dump_stack_lvl+0xd8/0x12c [ 73.468152][ T7424] dump_stack+0x1c/0x28 [ 73.468160][ T7424] should_fail_ex+0x418/0x58c [ 73.468171][ T7424] should_fail+0x14/0x24 [ 73.468180][ T7424] should_fail_usercopy+0x20/0x30 [ 73.468190][ T7424] _inline_copy_from_user+0x3c/0x174 [ 73.468202][ T7424] __sys_bpf+0x1b4/0x82c [ 73.468213][ T7424] __arm64_sys_bpf+0xd0/0xec [ 73.468224][ T7424] invoke_syscall+0x98/0x244 [ 73.468232][ T7424] el0_svc_common+0xec/0x23c [ 73.468241][ T7424] do_el0_svc+0x4c/0x5c [ 73.468249][ T7424] el0_svc+0x60/0x1d8 [ 73.468258][ T7424] el0t_64_sync_handler+0x44/0x104 [ 73.468266][ T7424] el0t_64_sync+0x198/0x19c [ 73.477006][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.9.399'. [ 73.577667][ T4743] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 73.624946][ T7451] netlink: 'syz.8.407': attribute type 62 has an invalid length. [ 73.627015][ T7451] netlink: 'syz.8.407': attribute type 1 has an invalid length. [ 73.690139][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'. [ 73.879869][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.883821][ T7463] bond2: (slave geneve2): making interface the new active one [ 73.884481][ T7463] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 73.907280][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.8.410'. [ 73.916627][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.410'. [ 74.052886][ T7493] loop8: detected capacity change from 0 to 2048 [ 74.089738][ T7493] loop8: p1 p2 p3 p4 [ 74.089738][ T7493] p1: [ 74.089832][ T7493] loop8: p1 size 67110656 extends beyond EOD, truncated [ 74.094502][ T7493] loop8: p3 size 134217728 extends beyond EOD, truncated [ 74.096133][ T7493] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 74.096797][ T7493] loop8: p5 size 67110656 extends beyond EOD, truncated [ 74.111841][ T7493] loop8: p6 size 134217728 extends beyond EOD, truncated [ 74.112383][ T7482] Bluetooth: hci0: unsupported parameter 5161 [ 74.112397][ T7482] Bluetooth: hci0: unsupported parameter 8192 [ 74.112405][ T7482] Bluetooth: hci0: unsupported parameter 5161 [ 74.112414][ T7482] Bluetooth: hci0: unsupported parameter 8192 [ 74.132914][ T7508] netlink: 'syz.7.416': attribute type 5 has an invalid length. [ 74.273876][ T7515] loop8: detected capacity change from 0 to 512 [ 74.378886][ T7517] loop7: detected capacity change from 0 to 8 [ 74.436761][ T7517] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 74.436952][ T7517] unable to read xattr id index table [ 74.443544][ T7517] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.443614][ T7517] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.443644][ T7517] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.443673][ T7517] SQUASHFS error: Unable to read inode 0x104 [ 74.538969][ T7515] EXT4-fs (loop8): unsupported inode size: 3456 [ 74.538990][ T7515] EXT4-fs (loop8): blocksize: 4096 [ 74.634110][ T7528] loop1: detected capacity change from 0 to 256 [ 74.726560][ T7535] bond3: option ad_select: invalid value (34) [ 74.751075][ T7535] bond3 (unregistering): Released all slaves [ 74.838911][ T4743] Bluetooth: hci2: command tx timeout [ 74.937939][ T7566] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 74.937970][ T7566] Memory failure: 0x216a31: Sending SIGBUS to syz.9.424:7566 due to hardware memory corruption [ 74.937999][ T7566] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 75.129658][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.428'. [ 76.917541][ T4743] Bluetooth: hci2: command tx timeout [ 77.010959][ T7159] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.085428][ T7159] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.146651][ T7159] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.913235][ T7566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.916327][ T7159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.948010][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.948367][ T7159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.972082][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.972420][ T7159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.978598][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.979122][ T7159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.985607][ T7909] netlink: 'syz.1.429': attribute type 27 has an invalid length. [ 77.995588][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.998636][ T7910] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 77.998663][ T7910] Memory failure: 0x216a31: Sending SIGBUS to syz.7.431:7910 due to hardware memory corruption [ 77.998689][ T7910] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 78.038331][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.041265][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.044242][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.044274][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.044772][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.044791][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.054443][ T7159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.054457][ T7159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.099075][ T7930] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 78.110153][ T7930] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.110190][ T7930] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 78.114703][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.138734][ T7953] loop9: detected capacity change from 0 to 512 [ 78.141935][ T7953] ext4: Unknown parameter 'func' [ 78.163976][ T7159] veth0_vlan: entered promiscuous mode [ 78.180345][ T7159] veth1_vlan: entered promiscuous mode [ 78.228117][ T7159] veth0_macvtap: entered promiscuous mode [ 78.234880][ T7159] veth1_macvtap: entered promiscuous mode [ 78.260774][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.263494][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.301388][ T3864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.302862][ T3864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.302890][ T3864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.302908][ T3864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.328365][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 78.369693][ T7974] syzkaller0: entered promiscuous mode [ 78.369711][ T7974] syzkaller0: entered allmulticast mode [ 78.391723][ T7980] loop1: detected capacity change from 0 to 1024 [ 78.393599][ T7980] EXT4-fs: Ignoring removed oldalloc option [ 78.393609][ T7980] EXT4-fs: Ignoring removed orlov option [ 78.409374][ T7987] loop8: detected capacity change from 0 to 512 [ 78.413517][ T7987] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.414229][ T7987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 78.414758][ T7987] EXT4-fs (loop8): orphan cleanup on readonly fs [ 78.414770][ T7987] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.443: bad orphan inode 267 [ 78.414786][ T7987] loop8: lost filesystem error report for type 5 error -117 [ 78.415476][ T7987] EXT4-fs (loop8): Remounting filesystem read-only [ 78.416869][ T7987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.431020][ T7980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.432354][ T7980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.461289][ T5881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.511195][ T7998] loop8: detected capacity change from 0 to 1024 [ 78.515340][ T7998] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 78.572718][ T8007] net_ratelimit: 24 callbacks suppressed [ 78.572732][ T8007] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 78.580490][ T8001] FAULT_INJECTION: forcing a failure. [ 78.580490][ T8001] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.580508][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.9.446 Not tainted syzkaller #0 PREEMPT [ 78.580519][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.580524][ T8001] Call trace: [ 78.580527][ T8001] show_stack+0x2c/0x3c (C) [ 78.580541][ T8001] __dump_stack+0x30/0x40 [ 78.580550][ T8001] dump_stack_lvl+0xd8/0x12c [ 78.580558][ T8001] dump_stack+0x1c/0x28 [ 78.580566][ T8001] should_fail_ex+0x418/0x58c [ 78.580577][ T8001] should_fail_alloc_page+0xec/0x10c [ 78.580587][ T8001] prepare_alloc_pages+0x194/0x484 [ 78.580598][ T8001] __alloc_frozen_pages_noprof+0x180/0x578 [ 78.580609][ T8001] alloc_pages_mpol+0x1fc/0x3d0 [ 78.580620][ T8001] folio_alloc_mpol_noprof+0x4c/0x248 [ 78.580631][ T8001] vma_alloc_folio_noprof+0x100/0x1dc [ 78.580643][ T8001] folio_prealloc+0x5c/0x1b0 [ 78.580652][ T8001] copy_pmd_range+0x4ee8/0x58b8 [ 78.580661][ T8001] copy_page_range+0x740/0xe68 [ 78.580674][ T8001] dup_mmap+0xd30/0x19a8 [ 78.580685][ T8001] copy_mm+0xe8/0x328 [ 78.580695][ T8001] copy_process+0x1658/0x34c4 [ 78.580705][ T8001] kernel_clone+0x234/0x8e8 [ 78.580715][ T8001] __arm64_sys_clone+0x168/0x1d4 [ 78.580726][ T8001] invoke_syscall+0x98/0x244 [ 78.580735][ T8001] el0_svc_common+0xec/0x23c [ 78.580743][ T8001] do_el0_svc+0x4c/0x5c [ 78.580751][ T8001] el0_svc+0x60/0x1d8 [ 78.580760][ T8001] el0t_64_sync_handler+0x44/0x104 [ 78.580768][ T8001] el0t_64_sync+0x198/0x19c [ 78.633054][ T8019] netlink: 'syz.9.449': attribute type 1 has an invalid length. [ 78.633532][ T8019] veth0_virt_wifi: entered promiscuous mode [ 78.708853][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.9.449'. [ 78.709934][ T8029] lapb22: entered promiscuous mode [ 78.709948][ T8029] lapb22: entered allmulticast mode [ 78.997612][ T4743] Bluetooth: hci2: command tx timeout [ 80.984818][ T7910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.030331][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.030348][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.030451][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.030458][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.054056][ T8059] netlink: 'syz.9.452': attribute type 4 has an invalid length. [ 81.054072][ T8059] netlink: 'syz.9.452': attribute type 17 has an invalid length. [ 81.116357][ T8070] loop8: detected capacity change from 0 to 8 [ 81.129285][ T8070] SQUASHFS error: Failed to read block 0x633: -5 [ 81.129299][ T8070] SQUASHFS error: Unable to read metadata cache entry [631] [ 81.129305][ T8070] SQUASHFS error: Unable to read inode 0x127 [ 81.180375][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.180490][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.180554][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.180617][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.180678][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181350][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181441][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181513][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181572][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181641][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181711][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181775][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181838][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181899][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.181958][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182031][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182093][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182152][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182212][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182272][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182330][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182392][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182451][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182510][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182568][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182626][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182684][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182741][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182801][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182860][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.182926][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183001][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183067][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183128][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183188][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183246][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183306][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183364][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183422][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.183482][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184096][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184162][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184220][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184288][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184375][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184441][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184499][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184558][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184616][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184673][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184732][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184789][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184847][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184909][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.184967][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185046][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185108][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185169][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185226][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185286][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185343][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185401][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185458][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185516][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.185589][ T8078] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 81.203360][ T8075] netlink: 'syz.7.457': attribute type 7 has an invalid length. [ 81.291206][ T8086] binder: 8084:8086 tried to acquire reference to desc 0, got 1 instead [ 81.311301][ T8086] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4739] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8086] [ 81.483488][ T8094] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 81.483516][ T8094] Memory failure: 0x216a31: Sending SIGBUS to syz.7.462:8094 due to hardware memory corruption [ 81.483537][ T8094] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 81.496466][ T24] binder: undelivered transaction 19, process died. [ 81.508182][ T24] binder: undelivered TRANSACTION_COMPLETE [ 81.513831][ T8101] loop0: detected capacity change from 0 to 512 [ 81.536875][ T8101] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #11: comm syz.0.464: iget: bad extra_isize 544 (inode size 256) [ 81.536904][ T8101] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.537384][ T8101] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.464: couldn't read orphan inode 11 (err -117) [ 81.537448][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 81.537460][ C1] EXT4-fs (loop0): initial error at time 81: ext4_orphan_get:1403: inode 11 [ 81.537476][ C1] EXT4-fs (loop0): last error at time 81: ext4_orphan_get:1403: inode 11 [ 81.556074][ T8101] loop0: lost filesystem error report for type 5 error -117 [ 81.558796][ T8101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.585019][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.515469][ T8132] loop0: detected capacity change from 0 to 2048 [ 82.523207][ T8132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.707748][ T8137] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.376656][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.402299][ T8141] usb usb8: usbfs: process 8141 (syz.0.472) did not claim interface 0 before use [ 83.423504][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 83.428832][ T8145] syzkaller1: entered promiscuous mode [ 83.428844][ T8145] syzkaller1: entered allmulticast mode [ 84.433873][ T8094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.477205][ T8154] loop7: detected capacity change from 0 to 128 [ 84.491268][ T8154] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.496745][ T8154] EXT4-fs warning (device loop7): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 84.501945][ T8160] loop9: detected capacity change from 0 to 256 [ 84.555103][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555193][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555266][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555333][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555402][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555467][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555536][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555601][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555677][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555743][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555814][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555878][ T8165] fuse: Unknown parameter '’ser_id' [ 84.555949][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556019][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556088][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556152][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556222][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556293][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556363][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556427][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556502][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556567][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556636][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556701][ T8165] fuse: Unknown parameter '’ser_id' [ 84.556840][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.481'. [ 84.557227][ T8165] fuse: Unknown parameter '’ser_id' [ 84.557293][ T8165] fuse: Unknown parameter '’ser_id' [ 84.557360][ T8165] fuse: Unknown parameter '’ser_id' [ 84.560561][ T8165] fuse: Unknown parameter '’ser_id' [ 84.560662][ T8165] fuse: Unknown parameter '’ser_id' [ 84.560736][ T8165] fuse: Unknown parameter '’ser_id' [ 84.561060][ T8165] fuse: Unknown parameter '’ser_id' [ 84.561138][ T8165] fuse: Unknown parameter '’ser_id' [ 84.561213][ T8165] fuse: Unknown parameter '’ser_id' [ 84.645685][ T8183] FAULT_INJECTION: forcing a failure. [ 84.645685][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 84.645708][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.1.482 Not tainted syzkaller #0 PREEMPT [ 84.645719][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.645725][ T8183] Call trace: [ 84.645728][ T8183] show_stack+0x2c/0x3c (C) [ 84.645747][ T8183] __dump_stack+0x30/0x40 [ 84.645756][ T8183] dump_stack_lvl+0xd8/0x12c [ 84.645765][ T8183] dump_stack+0x1c/0x28 [ 84.645774][ T8183] should_fail_ex+0x418/0x58c [ 84.645785][ T8183] should_failslab+0xc4/0x120 [ 84.645796][ T8183] kmem_cache_alloc_noprof+0x94/0x5d4 [ 84.645807][ T8183] anon_vma_fork+0x84/0x4d4 [ 84.645816][ T8183] dup_mmap+0x7d4/0x19a8 [ 84.645827][ T8183] copy_mm+0xe8/0x328 [ 84.645838][ T8183] copy_process+0x1658/0x34c4 [ 84.645848][ T8183] kernel_clone+0x234/0x8e8 [ 84.645858][ T8183] __arm64_sys_clone+0x168/0x1d4 [ 84.645869][ T8183] invoke_syscall+0x98/0x244 [ 84.645878][ T8183] el0_svc_common+0xec/0x23c [ 84.645886][ T8183] do_el0_svc+0x4c/0x5c [ 84.645894][ T8183] el0_svc+0x60/0x1d8 [ 84.645903][ T8183] el0t_64_sync_handler+0x44/0x104 [ 84.645911][ T8183] el0t_64_sync+0x198/0x19c [ 84.679792][ T8184] printk: console [ttyS0] disabled [ 84.727175][ T8187] EXT4-fs warning (device loop7): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 85.427578][ T8185] netlink: 48 bytes leftover after parsing attributes in process `syz.8.478'. [ 85.459441][ T8196] netlink: 'syz.0.484': attribute type 39 has an invalid length. [ 85.469361][ T8198] loop9: detected capacity change from 0 to 512 [ 85.475860][ T8198] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.476626][ T8198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 85.476710][ T8198] EXT4-fs (loop9): orphan cleanup on readonly fs [ 85.480806][ T8198] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.483: Allocating blocks 42-43 which overlap fs metadata [ 85.480826][ T8198] loop9: lost filesystem error report for type 5 error -117 [ 85.481003][ T8198] EXT4-fs (loop9): Remounting filesystem read-only [ 85.481033][ T8198] __quota_error: 110 callbacks suppressed [ 85.481041][ T8198] Quota error (device loop9): write_blk: dquota write failed [ 85.481088][ T8198] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 85.481156][ T8198] EXT4-fs (loop9): 1 truncate cleaned up [ 85.487987][ T8198] EXT4-fs (loop9): pa 000000002ae1092d: logic 1, phys. 41, len 23 [ 85.488526][ T8198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.510015][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.523259][ T8204] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 85.545831][ T8210] mmap: syz.9.486 (8210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.551744][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.552580][ T8204] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.564508][ T8205] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 85.564532][ T8205] Memory failure: 0x216a31: Sending SIGBUS to syz.8.487:8205 due to hardware memory corruption [ 85.564553][ T8205] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 85.579791][ T5767] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.592837][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 85.673446][ T8223] Driver unsupported XDP return value 0 on prog (id 185) dev N/A, expect packet loss! [ 85.705467][ T8226] loop1: detected capacity change from 0 to 512 [ 85.736633][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.762027][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.776044][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.836563][ T8242] loop1: detected capacity change from 0 to 256 [ 85.892982][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.501'. [ 85.893899][ T8242] netlink: 100 bytes leftover after parsing attributes in process `syz.1.499'. [ 85.896508][ T8246] n: the hash_elasticity option has been deprecated and is always 16 [ 85.896518][ T8246] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.910025][ T8246] bond0: (slave erspan0): Error: Device can not be enslaved while up [ 85.941143][ T8256] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.049127][ T8261] bcache: register_bcache() error : failed to open device [ 86.317279][ T8298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.376491][ T8298] bond1: (slave geneve2): making interface the new active one [ 86.386489][ T8298] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 86.401028][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.512'. [ 86.401045][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.512'. [ 86.430582][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.442008][ T8298] bond1: (slave bond0): making interface the new active one [ 86.446021][ T8298] bond1: (slave bond0): Enslaving as an active interface with an up link [ 86.465350][ T8298] bond1 (unregistering): (slave geneve2): Releasing active interface [ 86.465373][ T8298] bond0: entered promiscuous mode [ 86.465382][ T8298] bond_slave_0: entered promiscuous mode [ 86.465448][ T8298] bond_slave_1: entered promiscuous mode [ 86.509034][ T8298] bond1 (unregistering): (slave bond0): Releasing active interface [ 86.509061][ T8298] bond0: left promiscuous mode [ 86.509069][ T8298] bond_slave_0: left promiscuous mode [ 86.509159][ T8298] bond_slave_1: left promiscuous mode [ 86.538458][ T8298] bond1 (unregistering): Released all slaves [ 86.689138][ T8346] syzkaller0: entered promiscuous mode [ 86.689155][ T8346] syzkaller0: entered allmulticast mode [ 86.829086][ T8372] loop8: detected capacity change from 0 to 512 [ 86.835379][ T8372] EXT4-fs: Ignoring removed nobh option [ 86.842173][ T8372] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 86.842186][ T8372] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 86.843785][ T8372] EXT4-fs (loop8): 1 truncate cleaned up [ 86.845939][ T8372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.881627][ T8377] loop7: detected capacity change from 0 to 2048 [ 86.924341][ T8377] loop7: p1 p2 p3 [ 86.924341][ T8377] p1: [ 86.924358][ T8377] loop7: partition table partially beyond EOD, truncated [ 86.924451][ T8377] loop7: p1 size 16777216 extends beyond EOD, truncated [ 86.936347][ T8377] loop7: p2 size 458752 extends beyond EOD, truncated [ 86.940309][ T8377] loop7: p3 start 3036741376 is beyond EOD, truncated [ 86.940325][ T8377] loop7: p5 size 8257536 extends beyond EOD, truncated [ 86.982199][ T6268] udevd[6268]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 86.982473][ T4730] udevd[4730]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 86.983332][ T5881] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 86.983751][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 86.984289][ T5881] EXT4-fs (loop8): Remounting filesystem read-only [ 87.336726][ T5881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.388862][ T6163] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.394563][ T8426] loop0: detected capacity change from 0 to 512 [ 87.431395][ T8426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.457348][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.464157][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.473754][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.475193][ T6163] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.477234][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.483457][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.511242][ T8433] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.545699][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.621657][ T6163] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.664814][ T8449] binder: 8447:8449 tried to acquire reference to desc 0, got 1 instead [ 87.664910][ T8449] binder: 8447:8449 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 87.664918][ T8449] binder: 8447:8449 ioctl c0306201 20001840 returned -22 [ 87.665451][ T8449] binder_alloc: 8447: binder_alloc_buf, no vma [ 87.665460][ T8449] binder: cannot allocate buffer: vma cleared, target dead or dying [ 87.665481][ T8449] binder: 8447:8449 transaction async to 8447:0 failed 26/29189/-3, code 0 size 0-0 line 3409 [ 87.665602][ T8449] binder: 8447:8449 BC_FREE_BUFFER no match for buffer at offset 0 [ 87.672878][ T6371] binder: undelivered TRANSACTION_ERROR: 29189 [ 87.699178][ T6163] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.743190][ T8474] loop0: detected capacity change from 0 to 1024 [ 87.864469][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.864498][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.864639][ T8433] bridge_slave_0: entered allmulticast mode [ 87.865390][ T8433] bridge_slave_0: entered promiscuous mode [ 87.872186][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.872311][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.872365][ T8433] bridge_slave_1: entered allmulticast mode [ 87.873038][ T8433] bridge_slave_1: entered promiscuous mode [ 87.883446][ T8474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.131719][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.155580][ T8295] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158519][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.158966][ T8295] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.163524][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.186156][ T8433] team0: Port device team_slave_0 added [ 88.190739][ T8502] FAULT_INJECTION: forcing a failure. [ 88.190739][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 88.190756][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT [ 88.190766][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.190772][ T8502] Call trace: [ 88.190775][ T8502] show_stack+0x2c/0x3c (C) [ 88.190790][ T8502] __dump_stack+0x30/0x40 [ 88.190799][ T8502] dump_stack_lvl+0xd8/0x12c [ 88.190808][ T8502] dump_stack+0x1c/0x28 [ 88.190815][ T8502] should_fail_ex+0x418/0x58c [ 88.190826][ T8502] should_failslab+0xc4/0x120 [ 88.190836][ T8502] kmem_cache_alloc_noprof+0x94/0x5d4 [ 88.190847][ T8502] sctp_chunkify+0x64/0x244 [ 88.190860][ T8502] _sctp_make_chunk+0x130/0x240 [ 88.190871][ T8502] sctp_make_control+0x48/0x21c [ 88.190882][ T8502] sctp_make_init+0x46c/0x9b8 [ 88.190893][ T8502] sctp_sf_do_prm_asoc+0xb8/0x308 [ 88.190906][ T8502] sctp_do_sm+0x1dc/0x45dc [ 88.190913][ T8502] sctp_primitive_ASSOCIATE+0x98/0xcc [ 88.190927][ T8502] sctp_sendmsg_to_asoc+0xf94/0x13f4 [ 88.190939][ T8502] sctp_sendmsg+0xc70/0x17bc [ 88.190948][ T8502] inet_sendmsg+0xb4/0xd8 [ 88.190960][ T8502] __sock_sendmsg+0xc8/0x17c [ 88.190971][ T8502] __sys_sendto+0x250/0x328 [ 88.190989][ T8502] __arm64_sys_sendto+0xec/0x10c [ 88.191000][ T8502] invoke_syscall+0x98/0x244 [ 88.191010][ T8502] el0_svc_common+0xec/0x23c [ 88.191018][ T8502] do_el0_svc+0x4c/0x5c [ 88.191026][ T8502] el0_svc+0x60/0x1d8 [ 88.191034][ T8502] el0t_64_sync_handler+0x44/0x104 [ 88.191042][ T8502] el0t_64_sync+0x198/0x19c [ 88.203046][ T6163] bridge_slave_1: left allmulticast mode [ 88.203065][ T6163] bridge_slave_1: left promiscuous mode [ 88.203166][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.206081][ T6163] bridge_slave_0: left allmulticast mode [ 88.206096][ T6163] bridge_slave_0: left promiscuous mode [ 88.206172][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.258689][ T8508] loop0: detected capacity change from 0 to 256 [ 88.377644][ T6163] bond2 (unregistering): (slave geneve2): Releasing active interface [ 88.423495][ T6163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.449346][ T6163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.463004][ T6163] bond0 (unregistering): Released all slaves [ 88.465532][ T6163] bond1 (unregistering): Released all slaves [ 88.469690][ T6163] bond2 (unregistering): Released all slaves [ 88.474320][ T8433] team0: Port device team_slave_1 added [ 88.485967][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.485976][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.485993][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.486892][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.486899][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.486913][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.527692][ T8433] hsr_slave_0: entered promiscuous mode [ 88.528051][ T8433] hsr_slave_1: entered promiscuous mode [ 88.528235][ T8433] debugfs: 'hsr0' already exists in 'hsr' [ 88.528244][ T8433] Cannot create hsr debugfs directory [ 88.596525][ T8304] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.605231][ T8293] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.651299][ T8433] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.903118][ T6163] hsr_slave_0: left promiscuous mode [ 88.903372][ T6163] hsr_slave_1: left promiscuous mode [ 88.903633][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.903645][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.903966][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.903975][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.906955][ T6163] veth1_macvtap: left promiscuous mode [ 88.906980][ T6163] veth0_macvtap: left promiscuous mode [ 88.907035][ T6163] veth1_vlan: left promiscuous mode [ 88.907071][ T6163] veth0_vlan: left promiscuous mode [ 89.024121][ T6163] team0 (unregistering): Port device team_slave_1 removed [ 89.036453][ T6163] team0 (unregistering): Port device team_slave_0 removed [ 89.558253][ T4743] Bluetooth: hci3: command tx timeout [ 90.015086][ T8385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.016541][ T8513] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 90.016560][ T8513] netlink: 228 bytes leftover after parsing attributes in process `syz.0.538'. [ 90.098225][ T8601] Bluetooth: MGMT ver 1.23 [ 90.104453][ T8601] set_capacity_and_notify: 1 callbacks suppressed [ 90.104465][ T8601] loop7: detected capacity change from 0 to 512 [ 90.115478][ T8612] capability: warning: `syz.0.544' uses 32-bit capabilities (legacy support in use) [ 90.115670][ T8612] FAULT_INJECTION: forcing a failure. [ 90.115670][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 90.115683][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.0.544 Not tainted syzkaller #0 PREEMPT [ 90.115693][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.115699][ T8612] Call trace: [ 90.115702][ T8612] show_stack+0x2c/0x3c (C) [ 90.115717][ T8612] __dump_stack+0x30/0x40 [ 90.115725][ T8612] dump_stack_lvl+0xd8/0x12c [ 90.115734][ T8612] dump_stack+0x1c/0x28 [ 90.115741][ T8612] should_fail_ex+0x418/0x58c [ 90.115752][ T8612] should_failslab+0xc4/0x120 [ 90.115762][ T8612] __kmalloc_cache_noprof+0x94/0x5fc [ 90.115773][ T8612] pkcs8_key_preparse+0x110/0x364 [ 90.115782][ T8612] asymmetric_key_preparse+0xcc/0x1c0 [ 90.115794][ T8612] __key_create_or_update+0x264/0x7fc [ 90.115806][ T8612] key_create_or_update+0x60/0x7c [ 90.115816][ T8612] __arm64_sys_add_key+0x384/0x43c [ 90.115828][ T8612] invoke_syscall+0x98/0x244 [ 90.115837][ T8612] el0_svc_common+0xec/0x23c [ 90.115846][ T8612] do_el0_svc+0x4c/0x5c [ 90.115853][ T8612] el0_svc+0x60/0x1d8 [ 90.115862][ T8612] el0t_64_sync_handler+0x44/0x104 [ 90.115870][ T8612] el0t_64_sync+0x198/0x19c [ 90.116376][ T8612] netlink: 'syz.0.544': attribute type 75 has an invalid length. [ 90.122110][ T8601] EXT4-fs (loop7): orphan cleanup on readonly fs [ 90.133862][ T8601] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.543: ea_inode with extended attributes [ 90.133887][ T8601] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.137583][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 90.137599][ C0] EXT4-fs (loop7): initial error at time 90: ext4_xattr_inode_iget:437: inode 11 [ 90.137619][ C0] EXT4-fs (loop7): last error at time 90: ext4_xattr_inode_iget:437: inode 11 [ 90.176520][ T8601] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.543: error while reading EA inode 11 err=-117 [ 90.176544][ T8601] loop7: lost filesystem error report for type 5 error -117 [ 90.186197][ T8601] EXT4-fs (loop7): 1 orphan inode deleted [ 90.186643][ T8601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.214099][ T8616] only policy match revision 0 supported [ 90.214110][ T8616] unable to load match [ 90.228377][ T5767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.292808][ T8630] tipc: Enabled bearer , priority 0 [ 90.293036][ T8630] syzkaller0: entered promiscuous mode [ 90.293125][ T8630] syzkaller0: entered allmulticast mode [ 90.312332][ T8630] tipc: Resetting bearer [ 90.362028][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.554'. [ 90.362834][ T8647] loop5: detected capacity change from 0 to 7 [ 90.376283][ T8647] loop5: [ 90.376301][ T8647] loop5: partition table partially beyond EOD, truncated [ 90.587392][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.560'. [ 90.662582][ T8687] loop7: detected capacity change from 0 to 256 [ 90.840836][ T8709] bridge_slave_1: left allmulticast mode [ 90.840857][ T8709] bridge_slave_1: left promiscuous mode [ 90.840958][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.850525][ T8709] bridge_slave_0: left allmulticast mode [ 90.850543][ T8709] bridge_slave_0: left promiscuous mode [ 90.850617][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.967596][ T8712] Soft offlining pfn 0x120600 at process virtual address 0x20000000 [ 90.971915][ T8712] Soft offlining pfn 0x113a00 at process virtual address 0x20200000 [ 90.972321][ T8712] Soft offlining pfn 0x122a00 at process virtual address 0x20400000 [ 91.208161][ T8723] loop1: detected capacity change from 0 to 1024 [ 91.208533][ T8723] EXT4-fs: Ignoring removed oldalloc option [ 91.208542][ T8723] EXT4-fs: Ignoring removed orlov option [ 91.232003][ T8723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.243775][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.271972][ T8730] loop1: detected capacity change from 0 to 512 [ 91.304360][ T8730] EXT4-fs (loop1): 1 truncate cleaned up [ 91.304773][ T8730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.309406][ T8733] loop0: detected capacity change from 0 to 512 [ 91.319809][ T8733] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 91.319829][ T8733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.322663][ T8733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 91.322698][ T8733] System zones: 1-12 [ 91.323056][ T8733] EXT4-fs (loop0): 1 truncate cleaned up [ 91.323710][ T8733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.351538][ T8730] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.567: bg 0: block 465: padding at end of block bitmap is not set [ 91.353527][ T8730] EXT4-fs (loop1): Remounting filesystem read-only [ 91.353681][ T8730] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 91.354683][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.379083][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.399997][ T8740] loop0: detected capacity change from 0 to 256 [ 91.572330][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 91.637856][ T4743] Bluetooth: hci3: command tx timeout [ 91.677769][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 92.337260][ T8755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 93.035460][ T8747] netlink: 'syz.1.570': attribute type 11 has an invalid length. [ 93.043328][ T8749] veth3: entered allmulticast mode [ 93.089193][ T8763] loop0: detected capacity change from 0 to 512 [ 93.109000][ T8763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.132312][ T8763] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #12: comm syz.0.574: directory missing '.' [ 93.134371][ T8763] EXT4-fs (loop0): Remounting filesystem read-only [ 93.141651][ T8760] loop9: detected capacity change from 0 to 524287997 [ 93.162381][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.213200][ T8781] loop1: detected capacity change from 0 to 1024 [ 93.231659][ T8781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.236611][ T8781] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.578: bg 0: block 112: padding at end of block bitmap is not set [ 93.257999][ T8784] EXT4-fs (loop9): Test dummy encryption mode enabled [ 93.258022][ T8784] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 93.258028][ T8784] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 93.281522][ T8784] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.579: invalid indirect mapped block 4294967295 (level 0) [ 93.281544][ T8784] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.284002][ T8784] EXT4-fs (loop9): Remounting filesystem read-only [ 93.284155][ T8784] EXT4-fs (loop9): 1 orphan inode deleted [ 93.284163][ T8784] EXT4-fs (loop9): 1 truncate cleaned up [ 93.284568][ T8784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.286275][ T8781] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.578: lblock 3 mapped to illegal pblock 3 (length 1) [ 93.304038][ T8784] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.329416][ T8781] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.578: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.330207][ T8790] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 93.330217][ T8790] unable to read xattr id index table [ 93.717531][ T4743] Bluetooth: hci3: command tx timeout [ 94.231952][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.294679][ T8433] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.601335][ T8830] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 94.601353][ T8830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.601364][ T8830] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 94.669270][ T8433] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.724982][ T8838] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 94.758466][ T8433] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.760024][ T8838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.815962][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.901666][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.941876][ T8848] input: syz0 as /devices/virtual/input/input3 [ 94.985791][ T8433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.054784][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.055363][ T8433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.060434][ T8860] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.063766][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.064098][ T8433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.065830][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.069313][ T8433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.072264][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.121621][ T8860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e066e02d, mo2=0002] [ 95.121683][ T8860] System zones: 1-12 [ 95.122223][ T8860] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.155148][ T8860] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.590: Directory hole found for htree leaf block 0 [ 95.157183][ T8860] EXT4-fs (loop0): Remounting filesystem read-only [ 95.189901][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.194637][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.199095][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.199120][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.211427][ T8860] nvme_fabrics: missing parameter 'traddr=%s' [ 95.211972][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.212012][ T8309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.229433][ T7159] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 95.276921][ T8883] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.277482][ T8883] sch_fq: defrate 7 ignored. [ 95.285686][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.297826][ T8433] veth0_vlan: entered promiscuous mode [ 95.299524][ T8433] veth1_vlan: entered promiscuous mode [ 95.315355][ T8433] veth0_macvtap: entered promiscuous mode [ 95.316851][ T8433] veth1_macvtap: entered promiscuous mode [ 95.323757][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.324865][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.328070][ T117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328150][ T117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.363075][ T8309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.363087][ T8309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.375857][ T8295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.375930][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.375939][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.389836][ T8295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.426617][ T8899] input: syz1 as /devices/virtual/input/input4 [ 95.431199][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.431213][ T8899] netlink: 348 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.431222][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.431229][ T8899] netlink: 348 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.431277][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.453871][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.741081][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.779390][ T30] audit: type=1326 audit(95.740:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.7.594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 95.779413][ T30] audit: type=1326 audit(95.740:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.7.594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 95.779546][ T8921] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 95.780685][ T30] audit: type=1326 audit(95.740:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.7.594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 95.780704][ T30] audit: type=1326 audit(95.740:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.7.594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 95.780719][ T30] audit: type=1326 audit(95.740:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8910 comm="syz.7.594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 95.925713][ T8946] set_capacity_and_notify: 6 callbacks suppressed [ 95.925728][ T8946] loop0: detected capacity change from 0 to 2048 [ 95.964715][ T8946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.033163][ T8957] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.601: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 96.143919][ T8987] loop9: detected capacity change from 0 to 512 [ 96.146056][ T8987] EXT4-fs: Ignoring removed bh option [ 96.146071][ T8987] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.157313][ T8987] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 96.164301][ T8987] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 96.164401][ T8987] EXT4-fs (loop9): orphan cleanup on readonly fs [ 96.166768][ T8987] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 96.166799][ T8987] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 96.166828][ T8987] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.606: Failed to acquire dquot type 1 [ 96.166839][ T8987] loop9: lost filesystem error report for type 5 error -5 [ 96.167575][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 96.167588][ C1] EXT4-fs (loop9): last error at time 96: ext4_acquire_dquot:7070 [ 96.178881][ T8987] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.606: Invalid block bitmap block 0 in block_group 0 [ 96.178896][ T8987] loop9: lost filesystem error report for type 5 error -117 [ 96.201686][ T8987] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.606: Invalid block bitmap block 0 in block_group 0 [ 96.201706][ T8987] loop9: lost filesystem error report for type 5 error -117 [ 96.203776][ T8987] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.606: Invalid block bitmap block 0 in block_group 0 [ 96.203793][ T8987] loop9: lost filesystem error report for type 5 error -117 [ 96.204072][ T8987] Quota error (device loop9): write_blk: dquota write failed [ 96.204125][ T8987] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 96.204140][ T8987] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.606: Failed to acquire dquot type 1 [ 96.204149][ T8987] loop9: lost filesystem error report for type 5 error -28 [ 96.229458][ T8987] Quota error (device loop9): write_blk: dquota write failed [ 96.229506][ T8987] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.606: Failed to acquire dquot type 1 [ 96.229517][ T8987] loop9: lost filesystem error report for type 5 error -28 [ 96.231699][ T8987] EXT4-fs (loop9): 1 orphan inode deleted [ 96.249703][ T8987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.476864][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.546392][ T9029] IPVS: length: 236 != 24 [ 96.566403][ T9029] loop9: detected capacity change from 0 to 2048 [ 96.611634][ T9029] loop9: p1 p2 p3 p4 [ 96.611634][ T9029] p1: [ 96.611724][ T9029] loop9: p1 size 67110656 extends beyond EOD, truncated [ 96.613217][ T9029] loop9: p3 size 134217728 extends beyond EOD, truncated [ 96.613758][ T9029] loop9: p4 size 4278190080 extends beyond EOD, truncated [ 96.614524][ T9029] loop9: p5 size 67110656 extends beyond EOD, truncated [ 96.615490][ T9029] loop9: p6 size 134217728 extends beyond EOD, truncated [ 96.787266][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.070585][ T9063] loop9: detected capacity change from 0 to 1024 [ 97.089197][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.615'. [ 97.139289][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.615'. [ 97.154971][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.615'. [ 97.302473][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.615'. [ 97.452490][ T9100] loop7: detected capacity change from 0 to 1024 [ 97.486989][ T9100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.595935][ T9085] Cannot find add_set index 3 as target [ 98.060197][ T9132] loop0: detected capacity change from 0 to 256 [ 98.330097][ T5767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.386802][ T9151] netlink: 'syz.7.626': attribute type 142 has an invalid length. [ 98.416248][ T9153] loop7: detected capacity change from 0 to 256 [ 98.552665][ T9165] geneve2: entered promiscuous mode [ 98.984719][ T9189] loop3: detected capacity change from 0 to 2048 [ 99.020907][ T9189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.022239][ T9189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.022850][ T9193] 9p: Bad value for 'wfdno' [ 99.134854][ T9214] loop0: detected capacity change from 0 to 1024 [ 99.142011][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.423927][ T9229] fuse: Bad value for 'group_id' [ 99.423942][ T9229] fuse: Bad value for 'group_id' [ 99.480961][ T9233] FAULT_INJECTION: forcing a failure. [ 99.480961][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 99.480980][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.1.636 Not tainted syzkaller #0 PREEMPT [ 99.480995][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.481001][ T9233] Call trace: [ 99.481004][ T9233] show_stack+0x2c/0x3c (C) [ 99.481020][ T9233] __dump_stack+0x30/0x40 [ 99.481029][ T9233] dump_stack_lvl+0xd8/0x12c [ 99.481037][ T9233] dump_stack+0x1c/0x28 [ 99.481045][ T9233] should_fail_ex+0x418/0x58c [ 99.481054][ T9233] should_failslab+0xc4/0x120 [ 99.481064][ T9233] kmem_cache_alloc_noprof+0x94/0x5d4 [ 99.481073][ T9233] __kernfs_new_node+0xf0/0x7d8 [ 99.481080][ T9233] kernfs_new_node+0xe8/0x130 [ 99.481087][ T9233] __kernfs_create_file+0x60/0x2e0 [ 99.481095][ T9233] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 99.481103][ T9233] internal_create_group+0x550/0xb30 [ 99.481112][ T9233] internal_create_groups+0x64/0x138 [ 99.481120][ T9233] sysfs_create_groups+0x2c/0x3c [ 99.481129][ T9233] device_add_attrs+0xdc/0x4e4 [ 99.481137][ T9233] device_add+0x420/0x9e0 [ 99.481145][ T9233] netdev_register_kobject+0x184/0x328 [ 99.481157][ T9233] register_netdevice+0xd74/0x14c0 [ 99.481164][ T9233] wg_newlink+0x330/0x59c [ 99.481175][ T9233] rtnl_newlink_create+0x294/0x6b8 [ 99.481185][ T9233] rtnl_newlink+0xfe4/0x138c [ 99.481193][ T9233] rtnetlink_rcv_msg+0x66c/0x9bc [ 99.481202][ T9233] netlink_rcv_skb+0x238/0x414 [ 99.481212][ T9233] rtnetlink_rcv+0x28/0x38 [ 99.481220][ T9233] netlink_unicast+0x600/0x7f8 [ 99.481229][ T9233] netlink_sendmsg+0x648/0x948 [ 99.481238][ T9233] __sock_sendmsg+0xc8/0x17c [ 99.481248][ T9233] ____sys_sendmsg+0x3d0/0x6c8 [ 99.481257][ T9233] ___sys_sendmsg+0x198/0x224 [ 99.481267][ T9233] __sys_sendmsg+0x158/0x204 [ 99.481276][ T9233] __arm64_sys_sendmsg+0x88/0x9c [ 99.481286][ T9233] invoke_syscall+0x98/0x244 [ 99.481294][ T9233] el0_svc_common+0xec/0x23c [ 99.481301][ T9233] do_el0_svc+0x4c/0x5c [ 99.481308][ T9233] el0_svc+0x60/0x1d8 [ 99.481316][ T9233] el0t_64_sync_handler+0x44/0x104 [ 99.481323][ T9233] el0t_64_sync+0x198/0x19c [ 99.626105][ T9240] loop1: detected capacity change from 0 to 128 [ 99.635683][ T9240] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.647051][ T9240] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.729630][ T9246] evm: overlay not supported [ 99.845936][ T9254] bridge0: port 3(syz_tun) entered disabled state [ 99.846070][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.846361][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.846864][ T9254] bridge0: entered allmulticast mode [ 99.969127][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.145329][ T9279] fuse: Bad value for 'fd' [ 101.126878][ T9286] 9p: Bad value for 'wfdno' [ 101.174327][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 101.174340][ T30] audit: type=1326 audit(101.130:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.7.643" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 101.176223][ T30] audit: type=1326 audit(101.130:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.7.643" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 101.176250][ T30] audit: type=1326 audit(101.130:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.7.643" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f17a228 code=0x7ffc0000 [ 101.322331][ T9304] netlink: 'syz.7.651': attribute type 1 has an invalid length. [ 101.324278][ T9304] loop7: detected capacity change from 0 to 512 [ 101.583744][ T9320] batadv0: entered promiscuous mode [ 101.584436][ T9320] macvtap1: entered promiscuous mode [ 101.584528][ T9320] macvtap1: entered allmulticast mode [ 101.584535][ T9320] batadv0: entered allmulticast mode [ 101.585014][ T9320] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.585553][ T9320] batadv0: left allmulticast mode [ 101.585610][ T9320] batadv0: left promiscuous mode [ 101.632121][ T9324] loop1: detected capacity change from 0 to 1024 [ 101.636332][ T9324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.676012][ T9324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.686797][ T9324] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.653: bg 0: block 112: padding at end of block bitmap is not set [ 101.698453][ T9324] EXT4-fs (loop1): Remounting filesystem read-only [ 101.724086][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.848469][ T9352] loop7: detected capacity change from 0 to 256 [ 101.962417][ T9374] __nla_validate_parse: 9 callbacks suppressed [ 101.962433][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.662'. [ 102.023516][ T30] audit: type=1326 audit(101.980:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.1.661" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a228 code=0x7ffc0000 [ 102.023851][ T30] audit: type=1326 audit(101.980:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.1.661" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a228 code=0x7ffc0000 [ 102.024009][ T30] audit: type=1326 audit(101.980:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.1.661" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa497a228 code=0x7ffc0000 [ 102.024161][ T30] audit: type=1326 audit(101.980:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.1.661" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a228 code=0x7ffc0000 [ 102.124535][ T9390] loop3: detected capacity change from 0 to 512 [ 102.130865][ T9390] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.162377][ T9390] EXT4-fs (loop3): 1 truncate cleaned up [ 102.169548][ T9390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.267625][ T9405] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20001000 [ 102.267658][ T9405] Memory failure: 0x216a31: Sending SIGBUS to syz.7.668:9405 due to hardware memory corruption [ 102.267739][ T9405] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 102.407994][ T9418] GUP no longer grows the stack in syz.3.664 (9418): 20004000-2000a000 (20002000) [ 102.408016][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.3.664 Not tainted syzkaller #0 PREEMPT [ 102.408028][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.408034][ T9418] Call trace: [ 102.408037][ T9418] show_stack+0x2c/0x3c (C) [ 102.408052][ T9418] __dump_stack+0x30/0x40 [ 102.408061][ T9418] dump_stack_lvl+0xd8/0x12c [ 102.408069][ T9418] dump_stack+0x1c/0x28 [ 102.408077][ T9418] gup_vma_lookup+0x1ac/0x1cc [ 102.408089][ T9418] __get_user_pages+0x2b4/0x13b0 [ 102.408100][ T9418] get_user_pages_remote+0x278/0x83c [ 102.408111][ T9418] __access_remote_vm+0x1d8/0x68c [ 102.408120][ T9418] access_remote_vm+0x48/0x60 [ 102.408129][ T9418] proc_pid_cmdline_read+0x4cc/0xa14 [ 102.408142][ T9418] do_loop_readv_writev+0x24c/0x3dc [ 102.408154][ T9418] vfs_readv+0x258/0x520 [ 102.408163][ T9418] do_preadv+0x11c/0x224 [ 102.408173][ T9418] __arm64_sys_preadv+0xac/0xc4 [ 102.408183][ T9418] invoke_syscall+0x98/0x244 [ 102.408191][ T9418] el0_svc_common+0xec/0x23c [ 102.408200][ T9418] do_el0_svc+0x4c/0x5c [ 102.408208][ T9418] el0_svc+0x60/0x1d8 [ 102.408217][ T9418] el0t_64_sync_handler+0x44/0x104 [ 102.408225][ T9418] el0t_64_sync+0x198/0x19c [ 105.243296][ T9405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.315213][ T9712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.344351][ T8433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.554530][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.9.680'. [ 105.554556][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.9.680'. [ 105.574087][ T9729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.679'. [ 105.600766][ T9735] netlink: 64 bytes leftover after parsing attributes in process `syz.1.679'. [ 105.788448][ T9748] can0: slcan on ttyS3. [ 105.909413][ T9734] can0 (unregistered): slcan off ttyS3. [ 105.917355][ T9751] loop9: detected capacity change from 0 to 512 [ 105.966985][ T9751] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 105.967013][ T9751] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 105.967053][ T9751] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #13: comm syz.9.681: iget: bad i_size value: 12154757448730 [ 105.967070][ T9751] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.967449][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 105.967464][ C0] EXT4-fs (loop9): initial error at time 105: ext4_orphan_get:1403: inode 13 [ 105.967482][ C0] EXT4-fs (loop9): last error at time 105: ext4_orphan_get:1403: inode 13 [ 105.981446][ T9751] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.681: couldn't read orphan inode 13 (err -117) [ 105.981463][ T9751] loop9: lost filesystem error report for type 5 error -117 [ 105.982468][ T9751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.993382][ T9755] loop1: detected capacity change from 0 to 512 [ 106.007150][ T10] sony 0005:054C:03D5.0001: UNIQ does not contain a MAC address; duplicate check skipped [ 106.013228][ T9755] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.683: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 106.013253][ T9755] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.013405][ T9755] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.683: couldn't read orphan inode 11 (err -117) [ 106.013418][ T9755] loop1: lost filesystem error report for type 5 error -117 [ 106.013528][ T9755] EXT4-fs (loop1): 1 truncate cleaned up [ 106.014516][ T9755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.054262][ T10] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0001/input/input5 [ 106.102756][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.123335][ T10] sony 0005:054C:03D5.0001: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 106.241117][ T9770] fido_id[9770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.469835][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.640682][ T9787] loop7: detected capacity change from 0 to 512 [ 106.641890][ T9787] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.664124][ T9787] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 106.825254][ T9794] i2c i2c-0: new_device: Missing parameters [ 106.826155][ T9800] 9p: Bad value for 'wfdno' [ 106.836096][ T9798] loop9: detected capacity change from 0 to 512 [ 106.848460][ T9798] vfat: Bad value for 'shortname' [ 106.946009][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.692'. [ 106.996202][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.692'. [ 107.001773][ T9812] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.143774][ T9829] loop9: detected capacity change from 0 to 512 [ 107.182281][ T9829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.204783][ T9829] device-mapper: table: 248:4: flakey: Interval overflow (-EINVAL) [ 107.204798][ T9829] device-mapper: ioctl: error adding target to table [ 107.225858][ T9830] bond1 (unregistering): Released all slaves [ 107.288034][ T9834] loop1: detected capacity change from 0 to 8192 [ 107.373399][ T9812] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.456732][ T9846] loop7: detected capacity change from 0 to 1024 [ 107.505717][ T9846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.553308][ T9834] loop1: detected capacity change from 0 to 4096 [ 107.563148][ T9834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.563169][ T9834] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.566788][ T9834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.616774][ T5767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.623770][ T9834] fscrypt: AES-256-XTS using blk-crypto-fallback [ 107.661899][ T9812] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.695592][ T9834] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 107.790407][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.857190][ T9866] 9p: Bad value for 'rfdno' [ 107.961717][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.072287][ T9878] netlink: 'syz.9.705': attribute type 8 has an invalid length. [ 108.339351][ T9888] loop1: detected capacity change from 0 to 512 [ 108.375391][ T9888] EXT4-fs: Ignoring removed oldalloc option [ 108.385729][ T9888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.385741][ T9888] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.397122][ T9888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.453767][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.486509][ T9906] netlink: 312 bytes leftover after parsing attributes in process `syz.9.711'. [ 108.559077][ T9916] loop9: detected capacity change from 0 to 512 [ 108.567292][ T9916] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 108.567304][ T9916] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 108.574780][ T9915] fuse: Bad value for 'fd' [ 108.640704][ T9916] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.713: invalid indirect mapped block 4294967295 (level 0) [ 108.640733][ T9916] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.640894][ T9916] EXT4-fs (loop9): Remounting filesystem read-only [ 108.641044][ T9916] EXT4-fs (loop9): 1 orphan inode deleted [ 108.641053][ T9916] EXT4-fs (loop9): 1 truncate cleaned up [ 108.641849][ T9916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.674205][ T9916] EXT4-fs (loop9): shut down requested (2) [ 108.684660][ T9921] 9p: Bad value for 'rfdno' [ 109.522944][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.701725][ T9944] lo: entered allmulticast mode [ 109.946240][ T30] audit: type=1807 audit(109.900:211): func=FILE_CHECK res=0 [ 109.948195][ T30] audit: type=1802 audit(109.910:212): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.718" res=0 errno=0 [ 109.996012][ T9953] FAULT_INJECTION: forcing a failure. [ 109.996012][ T9953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.996040][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.1.720 Not tainted syzkaller #0 PREEMPT [ 109.996055][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.996062][ T9953] Call trace: [ 109.996065][ T9953] show_stack+0x2c/0x3c (C) [ 109.996081][ T9953] __dump_stack+0x30/0x40 [ 109.996091][ T9953] dump_stack_lvl+0xd8/0x12c [ 109.996099][ T9953] dump_stack+0x1c/0x28 [ 109.996107][ T9953] should_fail_ex+0x418/0x58c [ 109.996118][ T9953] should_fail+0x14/0x24 [ 109.996127][ T9953] should_fail_usercopy+0x20/0x30 [ 109.996138][ T9953] inotify_read+0x29c/0x9a4 [ 109.996151][ T9953] do_loop_readv_writev+0x24c/0x3dc [ 109.996162][ T9953] vfs_readv+0x258/0x520 [ 109.996172][ T9953] do_readv+0x134/0x2a8 [ 109.996182][ T9953] __arm64_sys_readv+0x88/0x9c [ 109.996191][ T9953] invoke_syscall+0x98/0x244 [ 109.996200][ T9953] el0_svc_common+0xec/0x23c [ 109.996209][ T9953] do_el0_svc+0x4c/0x5c [ 109.996217][ T9953] el0_svc+0x60/0x1d8 [ 109.996226][ T9953] el0t_64_sync_handler+0x44/0x104 [ 109.996234][ T9953] el0t_64_sync+0x198/0x19c [ 110.055312][ T30] audit: type=1807 audit(110.010:213): func=FILE_CHECK res=0 [ 110.055336][ T30] audit: type=1802 audit(110.010:214): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.718" res=0 errno=0 [ 110.136835][ T9943] ima: policy update failed [ 110.138056][ T30] audit: type=1802 audit(110.100:215): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.718" res=0 errno=0 [ 110.235241][ T9986] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.235261][ T9986] overlayfs: failed to set xattr on upper [ 110.235265][ T9986] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.235269][ T9986] overlayfs: ...falling back to metacopy=off. [ 110.235273][ T9986] overlayfs: ...falling back to index=off. [ 110.235277][ T9986] overlayfs: ...falling back to uuid=null. [ 110.243144][ T9960] loop7: detected capacity change from 0 to 256 [ 110.264225][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.370543][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.391222][ T9943] lo: left allmulticast mode [ 110.402414][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.414672][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.430868][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.490129][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.490297][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.491914][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.502449][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.519507][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.523918][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.535475][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.586099][ T9992] loop3: detected capacity change from 0 to 4096 [ 110.590380][ T9992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.590398][ T9992] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.602677][ T9992] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 110.602721][ T9992] System zones: 0-5 [ 110.604365][ T9992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.616929][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.633151][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.643283][ T9992] overlayfs: failed to resolve './sys/module/usb_storage/parameters/delay_use': -2 [ 110.643631][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.794435][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.803302][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.811971][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.821631][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.822705][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.835874][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.842776][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.844091][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.9.725'. [ 110.854183][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.861144][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.869956][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.875078][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.884745][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.891114][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.893474][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.904764][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.928781][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.932858][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.933099][T10007] 9p: Bad value for 'rfdno' [ 110.935305][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.935784][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.948947][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 110.964039][ T9959] overlay: filesystem on ./file0 not supported as upperdir [ 111.022785][T10010] EXT4-fs: Ignoring removed bh option [ 111.041138][T10010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 111.273086][T10026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.728'. [ 111.414698][ T7159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 111.467100][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 112.741214][T10081] 9p: Bad value for 'rfdno' [ 112.752512][ T8433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.877134][T10093] tunl0: entered promiscuous mode [ 112.886006][T10093] netlink: 'syz.1.744': attribute type 4 has an invalid length. [ 112.886020][T10093] netlink: 9 bytes leftover after parsing attributes in process `syz.1.744'. [ 112.968700][ T4430] 8021q: adding VLAN 0 to HW filter on device eth20 [ 113.051955][T10101] set_capacity_and_notify: 1 callbacks suppressed [ 113.051968][T10101] loop1: detected capacity change from 0 to 512 [ 113.067511][ T30] audit: type=1326 audit(113.020:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10085 comm="syz.0.742" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8897a228 code=0x7ffc0000 [ 113.067540][ T30] audit: type=1326 audit(113.020:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10085 comm="syz.0.742" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8897a228 code=0x7ffc0000 [ 113.151960][T10106] loop3: detected capacity change from 0 to 512 [ 113.156125][T10101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.213268][T10106] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.213285][T10106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 113.213311][T10106] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.213420][T10106] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.213450][T10106] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 113.213489][T10106] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.213501][T10106] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 113.235560][T10106] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.748: bad orphan inode 16 [ 113.235584][T10106] loop3: lost filesystem error report for type 5 error -117 [ 113.237438][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.237452][ C0] EXT4-fs (loop3): initial error at time 113: ext4_orphan_get:1429 [ 113.237464][ C0] EXT4-fs (loop3): last error at time 113: ext4_orphan_get:1429 [ 113.248370][T10106] ext4_test_bit(bit=15, block=18) = 1 [ 113.248388][T10106] is_bad_inode(inode)=0 [ 113.248393][T10106] NEXT_ORPHAN(inode)=0 [ 113.248397][T10106] max_ino=32 [ 113.248401][T10106] i_nlink=2 [ 113.249774][T10106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.251763][T10106] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 113.285471][ T8433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.355387][T10126] 9p: Bad value for 'rfdno' [ 113.706816][ T4430] 8021q: adding VLAN 0 to HW filter on device eth21 [ 113.880693][ T4827] atkbd serio0: keyboard reset failed on [ 114.082949][ T4430] 8021q: adding VLAN 0 to HW filter on device eth22 [ 114.221402][T10275] x_tables: duplicate underflow at hook 3 [ 114.245229][ T30] audit: type=1326 audit(114.200:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10270 comm="syz.3.761" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa77a228 code=0x7ffc0000 [ 114.245270][ T30] audit: type=1326 audit(114.200:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10270 comm="syz.3.761" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa77a228 code=0x7ffc0000 [ 114.314457][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.409844][T10290] 9p: Bad value for 'rfdno' [ 114.460432][ T4430] 8021q: adding VLAN 0 to HW filter on device eth23 [ 114.608807][T10308] Injecting memory failure for pfn 0x1450eb at process virtual address 0x20001000 [ 114.627828][T10299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.636789][T10308] Memory failure: 0x1450eb: keeping poisoned page in swap cache [ 114.636934][T10308] Memory failure: 0x1450eb: Sending SIGBUS to syz.9.768:10308 due to hardware memory corruption [ 114.637032][T10308] Memory failure: 0x1450eb: recovery action for dirty swapcache page: Delayed [ 114.637056][T10308] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20002000 [ 114.637076][T10308] Memory failure: 0x216a31: Sending SIGBUS to syz.9.768:10308 due to hardware memory corruption [ 114.637085][T10308] Memory failure: 0x216a31: recovery action for already poisoned page: Failed [ 114.832710][T10325] loop0: detected capacity change from 0 to 512 [ 114.833109][T10325] ext4: Unknown parameter 'nomblk_io_submitJgrpjquota' [ 114.872755][T10326] 9p: Bad value for 'wfdno' [ 114.957390][T10326] netlink: 92 bytes leftover after parsing attributes in process `syz.0.771'. [ 114.971444][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.772'. [ 114.972060][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.772'. [ 115.063382][ T30] audit: type=1326 audit(115.020:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8257a228 code=0x7ffc0000 [ 115.063408][ T30] audit: type=1326 audit(115.020:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8257a228 code=0x7ffc0000 [ 115.065798][ T30] audit: type=1326 audit(115.020:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8257a228 code=0x7ffc0000 [ 115.065921][ T30] audit: type=1326 audit(115.020:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8257a228 code=0x7ffc0000 [ 115.066156][ T30] audit: type=1326 audit(115.020:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10340 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8257a228 code=0x7ffc0000 [ 115.149101][T10347] 9p: Bad value for 'rfdno' [ 115.172843][ T4430] 8021q: adding VLAN 0 to HW filter on device eth24 [ 115.214204][T10350] loop9: detected capacity change from 0 to 4096 [ 115.215397][T10350] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.235802][T10350] EXT4-fs (loop9): Test dummy encryption mode enabled [ 115.259285][T10350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.340301][ T6177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.404504][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.781'. [ 115.404532][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.781'. [ 115.670574][T10381] loop1: detected capacity change from 0 to 512 [ 115.671359][ T8296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.679920][T10381] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.679939][T10381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.682432][T10379] 9p: Bad value for 'rfdno' [ 115.714832][T10381] EXT4-fs (loop1): 1 truncate cleaned up [ 115.722960][T10381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.748852][T10373] loop9: detected capacity change from 0 to 1024 [ 115.814824][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.821636][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.822745][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.822946][T10366] bond3: entered allmulticast mode [ 115.823709][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.823908][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.841581][T10366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.862871][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.789'. [ 115.922514][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.000460][ T8296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.014625][T10402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 116.015508][T10402] netlink: 'syz.1.791': attribute type 11 has an invalid length. [ 116.015520][T10402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 116.035486][T10391] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.148682][ T8296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.196758][T10426] loop9: detected capacity change from 0 to 256 [ 116.368572][ T8296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.396027][T10434] loop9: detected capacity change from 0 to 1024 [ 116.402290][T10434] EXT4-fs: quotafile must be on filesystem root [ 116.419826][T10432] loop1: detected capacity change from 0 to 512 [ 116.423594][T10432] EXT4-fs: Ignoring removed i_version option [ 116.433385][T10432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.446236][T10432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.512275][T10441] 9p: Bad value for 'rfdno' [ 116.593595][ T4739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.620793][T10448] loop9: detected capacity change from 0 to 512 [ 116.641880][T10448] EXT4-fs: Ignoring removed nobh option [ 116.644689][T10448] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 116.644704][T10448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 116.660149][T10448] EXT4-fs (loop9): orphan file too big: 8590458880 [ 116.664441][T10448] EXT4-fs (loop9): mount failed [ 116.700587][T10451] input: syz0 as /devices/virtual/input/input8 [ 116.735159][ T5384] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.753545][ T8296] bridge_slave_1: left allmulticast mode [ 116.753568][ T8296] bridge_slave_1: left promiscuous mode [ 116.753650][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.790469][ T8296] bridge_slave_0: left allmulticast mode [ 116.790488][ T8296] bridge_slave_0: left promiscuous mode [ 116.790572][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.827383][T10451] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 116.854811][T10451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.856731][T10473] 0x000000000000-0x000000010000 : "" [ 116.883997][T10473] ftl_cs: FTL header not found. [ 116.884888][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.7.802'. [ 117.078858][ T8296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.101794][ T8296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.164382][ T8296] bond0 (unregistering): Released all slaves [ 117.178314][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.178336][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.178638][T10391] bridge_slave_0: entered allmulticast mode [ 117.179076][T10391] bridge_slave_0: entered promiscuous mode [ 117.188525][T10455] lo speed is unknown, defaulting to 1000 [ 117.189559][T10455] lo speed is unknown, defaulting to 1000 [ 117.189861][T10455] lo speed is unknown, defaulting to 1000 [ 117.191334][T10455] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.203863][ T3072] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.203896][ T3072] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.203916][ T3072] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.275968][T10482] syzkaller1: entered promiscuous mode [ 117.275993][T10482] syzkaller1: entered allmulticast mode [ 117.305876][T10487] ------------[ cut here ]------------ [ 117.305888][T10487] WARNING: fs/dcache.c:1049 at d_make_discardable+0xa0/0xf8, CPU#0: syz.3.805/10487 [ 117.309390][T10487] Modules linked in: [ 117.310242][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.3.805 Not tainted syzkaller #0 PREEMPT [ 117.312155][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.314342][T10487] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 117.316043][T10487] pc : d_make_discardable+0xa0/0xf8 [ 117.317166][T10487] lr : d_make_discardable+0xa0/0xf8 [ 117.318291][T10487] sp : ffff80009d6f6670 [ 117.319173][T10487] x29: ffff80009d6f6670 x28: ffff0000fd5a05e0 x27: dfff800000000000 [ 117.320864][T10487] x26: ffff0000cb90c6a0 x25: 0000000000000200 x24: ffff0000f3659300 [ 117.322523][T10487] x23: ffff0000db32a5e0 x22: 0000000000240044 x21: 1fffe0001b6654bc [ 117.324212][T10487] x20: dfff800000000000 x19: ffff0000db32a5e0 x18: 00000000ffffffff [ 117.325921][T10487] x17: 0000000000000003 x16: ffff8000897f7000 x15: ffff80008b4c2000 [ 117.327643][T10487] x14: 0000000000706204 x13: 0000000000000001 x12: 0000000000000004 [ 117.329347][T10487] x11: ffff700013adecb4 x10: ffff700013adecb4 x9 : 0000000000000000 [ 117.331073][T10487] x8 : 0000000000000000 x7 : ffff800080cf4dd8 x6 : 0000000000000000 [ 117.332764][T10487] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080cf4df4 [ 117.334473][T10487] x2 : 0000000000000000 x1 : ffff0000d6acd880 x0 : 0000000000000000 [ 117.336169][T10487] Call trace: [ 117.336852][T10487] d_make_discardable+0xa0/0xf8 (P) [ 117.337929][T10487] __simple_recursive_removal+0x2b8/0x430 [ 117.339163][T10487] simple_recursive_removal+0x2c/0x3c [ 117.340304][T10487] debugfs_remove+0x60/0x88 [ 117.341265][T10487] ieee80211_sta_debugfs_remove+0x44/0x6c [ 117.342465][T10487] __sta_info_destroy_part2+0x2fc/0x3e0 [ 117.343633][T10487] __sta_info_flush+0x4c0/0x5f0 [ 117.344649][T10487] ieee80211_ibss_disconnect+0x250/0x6c8 [ 117.345847][T10487] ieee80211_ibss_leave+0x4c/0x114 [ 117.346892][T10487] ieee80211_leave_ibss+0x20/0x30 [ 117.347938][T10487] cfg80211_leave_ibss+0x1c8/0x454 [ 117.348996][T10487] cfg80211_leave_locked+0x11c/0x338 [ 117.350112][T10487] cfg80211_leave+0x68/0xc8 [ 117.351062][T10487] cfg80211_netdev_notifier_call+0x16c/0xe90 [ 117.352327][T10487] notifier_call_chain+0x1a4/0x4cc [ 117.353375][T10487] raw_notifier_call_chain+0x3c/0x50 [ 117.354476][T10487] call_netdevice_notifiers_info+0xb8/0x120 [ 117.355724][T10487] __dev_close_many+0xf8/0x648 [ 117.356702][T10487] netif_close_many+0x1d8/0x51c [ 117.357735][T10487] netif_close+0x150/0x208 [ 117.358668][T10487] dev_close+0xf8/0x1dc [ 117.359549][T10487] nl80211_del_interface+0xcc/0x130 [ 117.360658][T10487] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 117.361824][T10487] genl_rcv_msg+0x43c/0x620 [ 117.362774][T10487] netlink_rcv_skb+0x238/0x414 [ 117.363781][T10487] genl_rcv+0x38/0x50 [ 117.364584][T10487] netlink_unicast+0x600/0x7f8 [ 117.365541][T10487] netlink_sendmsg+0x648/0x948 [ 117.366518][T10487] __sock_sendmsg+0xc8/0x17c [ 117.367447][T10487] ____sys_sendmsg+0x3d0/0x6c8 [ 117.368440][T10487] ___sys_sendmsg+0x198/0x224 [ 117.369394][T10487] __sys_sendmsg+0x158/0x204 [ 117.370320][T10487] __arm64_sys_sendmsg+0x88/0x9c [ 117.371334][T10487] invoke_syscall+0x98/0x244 [ 117.372273][T10487] el0_svc_common+0xec/0x23c [ 117.373194][T10487] do_el0_svc+0x4c/0x5c [ 117.374045][T10487] el0_svc+0x60/0x1d8 [ 117.374850][T10487] el0t_64_sync_handler+0x44/0x104 [ 117.375907][T10487] el0t_64_sync+0x198/0x19c [ 117.376856][T10487] irq event stamp: 650 [ 117.377669][T10487] hardirqs last enabled at (649): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 117.379822][T10487] hardirqs last disabled at (650): [] el1_brk64+0x20/0x54 [ 117.381605][T10487] softirqs last enabled at (610): [] __alloc_skb+0x1c0/0x610 [ 117.383433][T10487] softirqs last disabled at (608): [] __alloc_skb+0x1a8/0x610 [ 117.385288][T10487] ---[ end trace 0000000000000000 ]--- [ 117.533471][T10487] ------------[ cut here ]------------ [ 117.533483][T10487] WARNING: fs/dcache.c:949 at fast_dput+0x628/0x630, CPU#0: syz.3.805/10487 [ 117.536820][T10487] Modules linked in: [ 117.537741][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.3.805 Tainted: G W syzkaller #0 PREEMPT [ 117.540017][T10487] Tainted: [W]=WARN [ 117.540934][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.543187][T10487] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 117.544870][T10487] pc : fast_dput+0x628/0x630 [ 117.545847][T10487] lr : fast_dput+0x620/0x630 [ 117.546785][T10487] sp : ffff80009d6f6640 [ 117.547636][T10487] x29: ffff80009d6f6640 x28: ffff0000fd5a05e0 x27: dfff800000000000 [ 117.549330][T10487] x26: ffff0000cb90c6a0 x25: 0000000000000200 x24: ffff0000fd7b3974 [ 117.551065][T10487] x23: 1fffe0001b6654db x22: dfff800000000000 x21: ffff0000db32a6d8 [ 117.552765][T10487] x20: 00000000ffffff80 x19: ffff0000db32a5e0 x18: 00000000ffffffff [ 117.554450][T10487] x17: 0000000000000003 x16: ffff8000897f7000 x15: ffff80008b4c2000 [ 117.556100][T10487] x14: 00000000000000d2 x13: 0000000000000079 x12: 0000000000000079 [ 117.557768][T10487] x11: 00000000d4f936eb x10: 000000000000003f x9 : 0000000000000000 [ 117.559408][T10487] x8 : 0000000000000000 x7 : ffff800080cf4850 x6 : 0000000000000000 [ 117.561068][T10487] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080cf4878 [ 117.562700][T10487] x2 : 00000000ffffff80 x1 : ffff0000d6acd880 x0 : 0000000000000000 [ 117.564365][T10487] Call trace: [ 117.565018][T10487] fast_dput+0x628/0x630 (P) [ 117.565960][T10487] dput+0x34/0x64 [ 117.566709][T10487] __simple_recursive_removal+0x3d8/0x430 [ 117.567883][T10487] simple_recursive_removal+0x2c/0x3c [ 117.569124][T10487] debugfs_remove+0x60/0x88 [ 117.570145][T10487] ieee80211_sta_debugfs_remove+0x44/0x6c [ 117.571405][T10487] __sta_info_destroy_part2+0x2fc/0x3e0 [ 117.572648][T10487] __sta_info_flush+0x4c0/0x5f0 [ 117.573726][T10487] ieee80211_ibss_disconnect+0x250/0x6c8 [ 117.574982][T10487] ieee80211_ibss_leave+0x4c/0x114 [ 117.576099][T10487] ieee80211_leave_ibss+0x20/0x30 [ 117.577198][T10487] cfg80211_leave_ibss+0x1c8/0x454 [ 117.578290][T10487] cfg80211_leave_locked+0x11c/0x338 [ 117.579403][T10487] cfg80211_leave+0x68/0xc8 [ 117.580365][T10487] cfg80211_netdev_notifier_call+0x16c/0xe90 [ 117.581658][T10487] notifier_call_chain+0x1a4/0x4cc [ 117.582782][T10487] raw_notifier_call_chain+0x3c/0x50 [ 117.583914][T10487] call_netdevice_notifiers_info+0xb8/0x120 [ 117.585173][T10487] __dev_close_many+0xf8/0x648 [ 117.586148][T10487] netif_close_many+0x1d8/0x51c [ 117.587137][T10487] netif_close+0x150/0x208 [ 117.588059][T10487] dev_close+0xf8/0x1dc [ 117.588878][T10487] nl80211_del_interface+0xcc/0x130 [ 117.589932][T10487] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 117.591042][T10487] genl_rcv_msg+0x43c/0x620 [ 117.591943][T10487] netlink_rcv_skb+0x238/0x414 [ 117.592916][T10487] genl_rcv+0x38/0x50 [ 117.593755][T10487] netlink_unicast+0x600/0x7f8 [ 117.594720][T10487] netlink_sendmsg+0x648/0x948 [ 117.595703][T10487] __sock_sendmsg+0xc8/0x17c [ 117.596675][T10487] ____sys_sendmsg+0x3d0/0x6c8 [ 117.597659][T10487] ___sys_sendmsg+0x198/0x224 [ 117.598627][T10487] __sys_sendmsg+0x158/0x204 [ 117.599606][T10487] __arm64_sys_sendmsg+0x88/0x9c [ 117.600668][T10487] invoke_syscall+0x98/0x244 [ 117.601661][T10487] el0_svc_common+0xec/0x23c [ 117.602634][T10487] do_el0_svc+0x4c/0x5c [ 117.603509][T10487] el0_svc+0x60/0x1d8 [ 117.604336][T10487] el0t_64_sync_handler+0x44/0x104 [ 117.605415][T10487] el0t_64_sync+0x198/0x19c [ 117.606358][T10487] irq event stamp: 940 [ 117.607187][T10487] hardirqs last enabled at (939): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 117.609379][T10487] hardirqs last disabled at (940): [] el1_brk64+0x20/0x54 [ 117.611167][T10487] softirqs last enabled at (876): [] handle_softirqs+0xb2c/0xcbc [ 117.613145][T10487] softirqs last disabled at (653): [] __do_softirq+0x14/0x20 [ 117.615047][T10487] ---[ end trace 0000000000000000 ]--- [ 117.641786][ T6518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.784970][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.785059][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.785324][T10391] bridge_slave_1: entered allmulticast mode [ 117.785818][T10391] bridge_slave_1: entered promiscuous mode [ 117.807281][T10455] lo speed is unknown, defaulting to 1000 [ 117.891533][ T51] Bluetooth: hci2: command tx timeout [ 117.909988][T10391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.910283][T10455] lo speed is unknown, defaulting to 1000 [ 117.911522][T10391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.981455][T10455] lo speed is unknown, defaulting to 1000 [ 117.991652][T10391] team0: Port device team_slave_0 added [ 117.991674][T10455] lo speed is unknown, defaulting to 1000 [ 117.991991][T10455] lo speed is unknown, defaulting to 1000 [ 118.008484][T10391] team0: Port device team_slave_1 added [ 118.103867][T10391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.103881][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.103893][T10391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.104438][T10391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.104444][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.104458][T10391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.329716][T10391] hsr_slave_0: entered promiscuous mode [ 118.342107][T10391] hsr_slave_1: entered promiscuous mode [ 118.373904][T10391] debugfs: 'hsr0' already exists in 'hsr' [ 118.373921][T10391] Cannot create hsr debugfs directory [ 118.587789][ T8296] hsr_slave_0: left promiscuous mode [ 118.599364][ T8296] hsr_slave_1: left promiscuous mode [ 118.599705][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.599716][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.622992][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.623010][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.660297][ T8296] veth1_macvtap: left promiscuous mode [ 118.660330][ T8296] veth0_macvtap: left promiscuous mode [ 118.660378][ T8296] veth1_vlan: left promiscuous mode [ 118.660415][ T8296] veth0_vlan: left promiscuous mode [ 119.140390][ T8296] team0 (unregistering): Port device team_slave_1 removed [ 119.164272][ T8296] team0 (unregistering): Port device team_slave_0 removed [ 119.659763][T10391] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.958444][ T51] Bluetooth: hci2: command tx timeout [ 122.038478][ T51] Bluetooth: hci2: command tx timeout [ 122.791096][T10391] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.921928][T10391] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.055805][T10391] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.272897][T10391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.296304][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.296752][T10391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.317266][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.318597][T10391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.320897][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.321224][T10391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.322100][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.458058][T10391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.465336][T10391] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.467291][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.467329][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.484289][T10391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.484304][T10391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.542264][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.542295][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.569122][T10391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.590655][T10391] veth0_vlan: entered promiscuous mode [ 123.593822][T10391] veth1_vlan: entered promiscuous mode [ 123.611338][T10391] veth0_macvtap: entered promiscuous mode [ 123.615258][T10391] veth1_macvtap: entered promiscuous mode [ 123.629965][T10391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.630971][T10391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.710525][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.710535][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.721835][ T8309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.722017][ T8309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.722035][ T8309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.722051][ T8309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.745003][ T8296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.745019][ T8296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.119987][ T51] Bluetooth: hci2: command tx timeout [ 125.977805][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.977845][ T1613] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.979660][ T1613] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 125.979684][ T1613] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len