last executing test programs: 1m1.401097059s ago: executing program 3 (id=44): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1200000, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESOCT, @ANYRES64]) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz8FpAkEUBuB/spuQIZd0kG0ipYg1WIQs3jxZyGKB4mVll0FsQET4vsPw/sfwwwsvVUvyt2vhck5K269vl+/Pmo/s7/+/hrHmpz40HE9J5v63xWFK+m2S/+sSW928jOM6HkpblnSb6dn3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7uAUAAP//+gYLHg==") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES8=r4], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000094}, 0xc800) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[], 0xfdd9) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000000c0)={0x1, 0x7}, 0x2) close(r2) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x62, 0x7ff, 0x1, 0xc, 0x8, 0x81}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/sync_on_suspend', 0x0, 0x7) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000200)=0x4, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0xd, @remote, 0x7fff}, {0xa, 0x4e21, 0x3ff, @mcast1, 0x9}, 0x71, {[0x693, 0x4000003, 0xffff8000, 0x1, 0x101, 0x8, 0x4, 0x5]}}, 0x5c) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x80004507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="61124c00000000006113500000000000bfa000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e200084cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960f6fa6c1c90f4007c43f5fa38749d8955824bf45843d2e52128c5f49f8df776c482f5cd50fac47a75cc39d44c4a02500e95fa0558550d5012759bb42c72eb43269b467f85b26d352733bd37e242230b6e8a310e92fd1c774f139c7de3df7c1decff235b9d1c900f1204fbcb98f7c9d558c604ad5b857fecf008ad872f4eb9c55349d05089d47bca7ebd84a43d8d56684805661f269c30be7812321db71322c763c3ed74eb6d112ceb1c0be7c9edc5"], &(0x7f0000000100)='GPL\x00', 0x0, 0xff32, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23}, 0x94) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r7}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x2, 0x462781) r9 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x0, 0x4a02}, 0x30, 0x7) close(r9) 1m1.0811277s ago: executing program 3 (id=51): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mount$overlay(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), 0x2004054, &(0x7f0000000140)={[{@index_on}, {@uuid_on}, {@default_permissions}, {@index_off}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'memory.events\x00'}}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x40008, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {0x4, 0xfffffffffffffffd, 0x40000000007fff}, 0x4, 0x0, 0x2, 0x0, 0x2}, {{@in6=@dev, 0x1, 0x30}, 0x0, @in6=@private0, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe, 0x100}}, 0xab) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x6e, 0x2) 1m0.988200541s ago: executing program 3 (id=57): r0 = gettid() (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x130, 0x2, 0xa, 0xc01, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xfc, 0x6, "b3749de352914aa118e1c2792da82f250b308d41137a6199b812b9b1a9cf4a3c862884832b183d1d198bb9b262a87b1c05bca5a836c598586d5ea43c5b716d1b94924168de39c64ff43a37e8b63010c303f8536f32f88e5a95476e25c5071023eac86e2364b19464e87eb7af64c149f39c813b061905407edcb89fea0b4a3145e734f2d9c6c90ac6d5cacf0cafdc8cb1ce0deb71b8a2eaf677d3ea9939e271f17ac22c32999d18214f2506efc8e7a73f36974fda894cadb7e5515546d4c3669d5b35a60ff11a1b453506c33e27d6697766c4a76a49cd2a0f346fb7a25470ab8e2bacfc866fbdc42480233ee5877927bd42c5e469abe459a5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x5, 0x0, 0x0, {0x10, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xab, 0x6, "3d7794c8def98b9237049c22a620a84a435f39fd20b585a408b793bffbe4ab184b2fac84f0288b140c7dc5a5c132eaf3806773272cef78357d24c760712cf794bc8afcf742a04b773d0e984cc3b5f30ff9a71f94f98e502d255760545f6464acc15a687af91a36f37721f537e9c53d5057f9f831971c10b89a37353a4f2a34cc48fa8b95c5ea4671ece9e0c9bd087d2c32c88208c994cc8a3c43561d66b874a9388aab6dfc058b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x36, 0x6, "ee0367a13d9f4f7e341fc8c64f7186a169292895dbf29acbebc71692ad10be2e95f574ce50f056bb39b1bfa263e59d478e6c"}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "af9d07b9615dfd10e3cd6bf10ccd8d3abed73801c5a404e10f2d6b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "0cc7be8da699377ceccef373b32753634f6f907eca445210885768cce59c09b13bf6937bc406f3c84c2b780acd3c430dd274b3270f3d2a441a08f6e3037cc862f8ed8c10fb045af1099717073b71519b157fd85a996ba8"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c8}, 0x1, 0x0, 0x0, 0x4040010}, 0xc001) (async) r2 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000004c0)="0502cf3ba36a6b03589feada917be48b1415d6df7896461b8aa3df0c73d5fe8b7539adbbf495a8ce9dec01e79497562b29e1b3b6e03d622beefc4ed67b1e304920302567a5aa3260f8cabd232898449a81ca63edf334d2c3365a3613406f792b75c5") (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000700)={0x0, 0xffff, 0x0, 0x0, r2}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, 0xffffffffffffffff, r4, r5, 0x80, 0xd}, 0x7, 0x3, 0x0, 0x8, r0, r6, 0x5}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r8, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x48}}, 0x4000) (async, rerun: 32) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000980)) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:syslog_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c019}, 0x20000000) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x216608b0}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe7}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xb6}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff81}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x960}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) (rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r9, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x400d5) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e00)={0x270, r11, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41a9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4cb3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8d1c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x35a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x11a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb270}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9b1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40}, 0x8088) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001140), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r12, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000001) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000001780)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001300)={0x438, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca0ca6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x140c8b88}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bfec4c800ef9a8456798ea000b248d9feba33026"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3f6e29f59562f504b48d8a3cd5a4ec7d016d41062ccb4ef4dbb3e3c9b1a9d0"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a4c66767c6aa87385e9e50a4b40c1ce2749217abcdc3d9bf8e1f4c1d36ecbe"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x89, 0x3, "de8909211f9d3a5da57f743c78f9c330091c90bea1ddf6cccaba02140e262ca04d64f85bfaafd4eecb35f13fd72863f9b77d7dadd0e831c95b462bd89d8519ac794718df7064bcc26fc5310f9992f8ca973a1c7553b2d74eb3e2668823bba3c8c925c44d6335700370fbcf4495458fe8c66e3ccd15bd9d378717827cb7deb24f5285e66248"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}}, 0x4000800) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x10, 0x24, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xcd5}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x1, 0x2, 0x3, 0x3, 0x5, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='GPL\x00', 0x7, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41000, 0x60, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000002cc0)={0x0, 0x0, 0x8, 0xffff6137}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000002e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002e80)=[{0x4, 0x3, 0x2, 0xa}], 0x10, 0x3}, 0x94) 1m0.879983218s ago: executing program 3 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000001c0)='./file0\x00', 0x204987, &(0x7f0000000400)=ANY=[@ANYBLOB="756e695f786c6174653d302c64656275672c756e695f786c6174653d312c757365667265652c756e695f786c6174653d302c636865636b3d6e6f726d616c2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030343332342c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c7379735f696d6d757461626c652c00c4614c8b4cf2c20a70d08876eb459fcd2cb4e55eb9d372787be7066b35c0e2a7743a60886c9dadcd7857ee54c9be597e8f14f73b4fdd56356660bc81be70a9e8def4d6"], 0x0, 0x2a3, &(0x7f0000002b40)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',dflt', @ANYRESHEX=0xee01, @ANYBLOB, @ANYBLOB]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r5, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001480)={r7}, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8) vmsplice(r8, &(0x7f0000001400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="9e529de21a422f4d97577440a6e5c8226622d2cd39082b95b5998af1a6f149838d01", 0x22}, {&(0x7f0000001200)="f00df2dfce77ecae968028335b4ece3c4d455f8bfe035cf7c4d28acce046f6707853e21cc57e6dc87259cc2e1a8edd513503332775c7209b9f47a7637fcb0cacecfba89d2b878f9ae63f7c84666712ad42665b9e70b4aff6323c88823663123eca882d588d1034630966cf682c25c4b73fbb608823e26b71962ab2b0d48220b2d7381c1d7b9302b3da2cb7d58328dc7ca0e6e7307763eddc8c52fc7184f7920c96c424e6c470b49422717329c25c79c5095484bf46c4783c22501e33da7770cd1d3252faff8a6e9a05ccd1f3a5174ccaca772c5721ba52a4dfd7b007312f91ca39057dbeaac7d56b43144f5aee3b150c14380846ff25cb56", 0xf8}, {&(0x7f0000001300)="3cb11dc8fba3843696c344fc39da79e6d697fa377c349374fbda543b8523876b673819b1fc188ae778cc5b56fe2a81f9915604ef7b949bd52ddb01329c3654c312064c591cc196bc30c76acd3f1ef673ae1e3e10e24eef8bdbbad6d6e339122afd6d96424378ca31d72de06f133ae2", 0x6f}, {&(0x7f0000001380)="a232219841c60aa7d398e39b08da1056a8a5809be72a2a322eeb20dbaff1123b0d5c7dd725d7566e5227f5d13ffc96b4a411720c745be0e7bb5013f67fd966e1ad2f6ded843a6141496e0108c0ced40598718644e0ed35d70fa1b2f7ef635a86c70f3e2d30a8411f0c52154f92fb19819cd8f22ab0", 0x75}], 0x5, 0x15012db679178db1) 1m0.773717907s ago: executing program 3 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x144, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x6, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x114, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x108, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x837}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4c}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd06}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x2f, 0x4, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb}]}]}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000040)="6dc9996717bb30d5686aff4d6ed6a4d0652a1abc04d81ce69aef90d952da618c478f8895f4a8a60b22a5c41436def8b596db1abecf2ede896f3aab1c3fd0f38add4c301d687a9204e58ea30a", 0x4c) r6 = socket(0x1, 0x3, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x448401) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) (async) bind$unix(r6, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4) 59.624812213s ago: executing program 3 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0xf0106b2f9946af23, 0x70bd24, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xddb6, 0x300, 0x4004, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f00000001c0), 0x1, 0x48}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000600)={0x3, {{0xa, 0x4e24, 0x1675, @loopback, 0x6}}}, 0x88) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740)}], 0x4, &(0x7f00000006c0)=[@ip_retopts={{0x100, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x5b, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4e, 0x1, 0xa, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x1000}, {@loopback, 0x1}]}, @rr={0x7, 0xb, 0xec, [@multicast1, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x41, [@broadcast]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x2, 0x5, 'zfC'}, {0x0, 0x11, "afeae1e8efea0b5ccd177bba6bf480"}, {0x6, 0x8, "590900000001"}, {0x7, 0x6, "21cb6483"}, {0x0, 0xd, "8eaf7c25f071e39d041c30"}, {0x7, 0x4, "43f1"}, {0x7, 0xc, "572788276a40f4710217"}, {0x3, 0xa, "fcda5058fd1b15d0"}, {0x6, 0x6, "a1e3c706"}]}, @timestamp_prespec={0x44, 0x24, 0xd7, 0x3, 0x2, [{@private=0xa010102, 0x7}, {@loopback, 0xf5b}, {@local, 0x1b29}, {@local, 0xfffffffe}]}, @lsrr={0x83, 0xf, 0xc6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, @end, @cipso={0x86, 0x28, 0x3, [{0x3, 0xb, "62377b62ef64aa2088"}, {0x5, 0x11, "560ae019b1ad7cb7a9b47c77d09c5f"}, {0x5, 0x6, "072a53fc"}]}]}}}], 0x100}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x10}, 0x1, 0x0, 0x0, 0x240000c0}, 0x2000014) 59.545356829s ago: executing program 32 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0xf0106b2f9946af23, 0x70bd24, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xddb6, 0x300, 0x4004, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f00000001c0), 0x1, 0x48}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000600)={0x3, {{0xa, 0x4e24, 0x1675, @loopback, 0x6}}}, 0x88) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740)}], 0x4, &(0x7f00000006c0)=[@ip_retopts={{0x100, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x5b, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4e, 0x1, 0xa, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x1000}, {@loopback, 0x1}]}, @rr={0x7, 0xb, 0xec, [@multicast1, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x41, [@broadcast]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x2, 0x5, 'zfC'}, {0x0, 0x11, "afeae1e8efea0b5ccd177bba6bf480"}, {0x6, 0x8, "590900000001"}, {0x7, 0x6, "21cb6483"}, {0x0, 0xd, "8eaf7c25f071e39d041c30"}, {0x7, 0x4, "43f1"}, {0x7, 0xc, "572788276a40f4710217"}, {0x3, 0xa, "fcda5058fd1b15d0"}, {0x6, 0x6, "a1e3c706"}]}, @timestamp_prespec={0x44, 0x24, 0xd7, 0x3, 0x2, [{@private=0xa010102, 0x7}, {@loopback, 0xf5b}, {@local, 0x1b29}, {@local, 0xfffffffe}]}, @lsrr={0x83, 0xf, 0xc6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, @end, @cipso={0x86, 0x28, 0x3, [{0x3, 0xb, "62377b62ef64aa2088"}, {0x5, 0x11, "560ae019b1ad7cb7a9b47c77d09c5f"}, {0x5, 0x6, "072a53fc"}]}]}}}], 0x100}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x10}, 0x1, 0x0, 0x0, 0x240000c0}, 0x2000014) 53.818427541s ago: executing program 4 (id=182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000d00)={0x40, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}]}, 0x40}}, 0x8040) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 53.576179656s ago: executing program 4 (id=190): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@i_version}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x5, 0x4c0, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x5, 0x2}], 0xee00}, 0x18, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r4, 0x0, 0xb0) sendmsg$AUDIT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x200, 0x70bd28, 0x25dfdbfd, {0x6, 0x1, 0x0, r0, 0x4, 0x54, 0x8, 0x7, 0x0, 0x6b18, 0x6}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008045) 52.712177188s ago: executing program 4 (id=196): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d700000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d700000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa080, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa080, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x10800, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x10800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x454402, 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000001000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000022000056089c432d5e8a8c0000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$inet(0x2, 0x6, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000400)={0x2, 'veth0_to_bridge\x00', 0x4}, 0x18) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='GPL\x00', &(0x7f00000002c0)='@&((\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='GPL\x00', &(0x7f00000002c0)='@&((\x00', 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000380)='veth0_to_bridge\x00', &(0x7f0000000440)="11d42543ef", 0x5) (async) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000380)='veth0_to_bridge\x00', &(0x7f0000000440)="11d42543ef", 0x5) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) r7 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0xffffffffffffffff) (async) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) fsmount(r7, 0x1, 0x991503ed3cc9066d) (async) fsmount(r7, 0x1, 0x991503ed3cc9066d) 52.33902675s ago: executing program 4 (id=205): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0xfffffe8b, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248a}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x44000001) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pwrite64(r1, &(0x7f0000000000)='10001\x00', 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x3, 0x3a, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x13, 0xb, &(0x7f00000007c0)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0xf, 0xfffffffffffffe88, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYRES32=r2, @ANYRES32=r6]) recvmsg$unix(r7, &(0x7f0000000780)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000540)=""/166, 0xa6}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x44) 51.442809977s ago: executing program 4 (id=210): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae8003e07f3a2a23f203b659238d"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_ublk_setup_io_uring(0x1873, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x2, 0x1db, 0x0, r7}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x4008010) r8 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r8, 0x80088a02, 0x0) 49.548342504s ago: executing program 4 (id=221): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x8, "ecd40ad187df96a23114c388531a5cf8811dc00eabc4fcb12fba137eb91853dc", 0x6}) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e23, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd1, 0xfeff}}}}}}, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000600), 0x4, 0x141080) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000000)={0xf010000, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x20, 0x0, 0x1}, &(0x7f0000000300)=0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x79}, {0x6, 0x7, 0x0, 0xfffffffe}]}, 0x10) (async) r7 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 49.372165909s ago: executing program 33 (id=221): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x8, "ecd40ad187df96a23114c388531a5cf8811dc00eabc4fcb12fba137eb91853dc", 0x6}) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e23, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd1, 0xfeff}}}}}}, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000600), 0x4, 0x141080) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000000)={0xf010000, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x20, 0x0, 0x1}, &(0x7f0000000300)=0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x79}, {0x6, 0x7, 0x0, 0xfffffffe}]}, 0x10) (async) r7 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 48.552234913s ago: executing program 0 (id=235): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)={0x9, {{0xa, 0x4e21, 0x3, @local, 0x5}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x9, @mcast2, 0x1}}, {{0xa, 0x4e22, 0x2, @mcast2, 0x5}}, {{0xa, 0x4e22, 0xc1, @local, 0x8}}, {{0xa, 0x4e20, 0xfd, @mcast1, 0x6}}, {{0xa, 0x4e24, 0x6, @loopback, 0xe8f}}, {{0xa, 0x4e23, 0xcb1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}}, {{0xa, 0x4e24, 0x1b3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x6}}]}, 0x490) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 48.34462669s ago: executing program 0 (id=238): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0xc138fd00, &(0x7f0000000200)="04") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x0, 0xa, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0x5, 0xf}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r4, 0x1, 0x6, @local}, 0x10) socket(0x29, 0x80000, 0x1) r5 = shmget(0x3, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e23, 0x3, 0x4e24, 0xfffb, 0xa, 0x20, 0xa0, 0x5c, r4}, {0x8b5, 0xfffffffffffffffc, 0x8, 0x9, 0x5, 0x2, 0x800, 0x7f}, {0x1, 0x2, 0x10000, 0x3}, 0x6, 0x6e6bbd, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in=@empty, 0x34ff, 0x2, 0x1, 0x0, 0xb, 0x0, 0xfff}}, 0xe8) r6 = syz_open_procfs(r2, &(0x7f0000000000)='net/udp\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9e000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x900c08, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='udf\x00', &(0x7f0000000080)=',+#/\\/.$*---\\\x0f\x00', 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x2000)=nil) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3}}, 0x10) preadv(r6, &(0x7f0000000040), 0x0, 0x300, 0x4) 48.204081976s ago: executing program 0 (id=239): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r1 = syz_pidfd_open(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) getpid() process_madvise(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1, 0x18, 0x0) setns(r1, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 47.280420857s ago: executing program 0 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000) capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) (async) capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000004600)=""/134, &(0x7f00000046c0)=0x86) (async) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000004600)=""/134, &(0x7f00000046c0)=0x86) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000005ac0)={&(0x7f0000005900)=[&(0x7f0000000000)=@blocksize={{0x4f32494e, 0x2, 0x10}}, 0x0, &(0x7f0000000400)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x9}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10}}, 0x0, &(0x7f0000000700)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000000740)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000002}, {}, 0x1}, &(0x7f0000000880)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f00000008c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000900)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000000940)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000980)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000009c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, 0x0, &(0x7f0000000a40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000000a80)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000b00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xa0000000}, [{0x8, 0x8}, {0x1, 0x47}, {0xe, 0x84}, {0x8, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0xb01e, 0x8000000000000001}, {0x2, 0x192}, {0x100000000, 0x9}, {0x8, 0xb7c1}, {0xc, 0x6}, {0xfffffffffffffff9, 0xf}, {0xa4, 0x115}, {0x8, 0xd}, {0x0, 0x7fff}, {0x8dc, 0x8001}, {0x9f00, 0x1000000000000}, {0x7, 0x9}, {0x9ea, 0x8}, {0x9}, {0x9, 0x9}, {0x2, 0xc}, {0x6, 0x7fffffffffffffff}, {0x5, 0xaf3}, {0x6}, {0x8001, 0x3}, {0xffffffffffff8010, 0x6}, {0x3, 0x193a}, {0x31b, 0xc}, {0x3, 0x4}, {0x6e6, 0x41}, {0x6, 0xb}, {0x8}, {0x6, 0xffffffffffffffff}, {0x1, 0xffffffffffffff01}, {0x4, 0xfffffffffffffffd}, {0xffffffffffffff78, 0x6}, {0x3, 0x1}, {0x8, 0xfffffffffffffff8}, {0x6, 0x6f}, {0x7, 0xd4}, {0x3, 0xfffffffffffff587}, {0x1, 0x1}, {0x100000000, 0x400000000000000}, {0x1, 0x10000}, {0xffffffffffffffff, 0x6}, {0x3f9a, 0x1}, {0x7, 0xfff}, {0x2, 0x6}, {0x10001, 0x295}, {0x1ff, 0x97}, {0x3, 0x7}, {0xfffffffffffffff8, 0xf4}, {0x0, 0x1}, {0x2, 0xc}, {0xf3b8f95, 0x562}, {0x100000000000000, 0x8}, {0x4000000000000000, 0x9}, {0x3, 0xc8}, {0x1, 0x9}, {0x8, 0x8}, {0x76c4e104, 0xa9f}, {0x80000000, 0x200}, {0x40, 0x80}, {0x6, 0x4}, {0x6, 0x40}, {0x7, 0x80000000}, {0xfffffffffffffff2, 0x8000000000000001}, {0x17b6, 0x9e5}, {0x1000, 0x18}, {0x10, 0x1}, {0x939e, 0xad}, {0x2}, {0x6d1, 0x1}, {0xffff, 0x5}, {0xffffffffffffffff, 0x7fff}, {0x7d, 0x4}, {0x965, 0x800000000000000}, {0x6000000000, 0x400}, {0x4, 0xb}, {0x7, 0x7f}, {0x460, 0x6}, {0x8, 0x6}, {0x8000000000000000, 0xa0a}, {0x5, 0x100000000}, {0x3c0}, {0x100000001, 0x4}, {0x94b, 0x80}, {0x8, 0x4}, {0x40, 0x5}, {0xfffffffffffffff9, 0x80000001}, {0x6, 0x401}, {0x4, 0x6}, {0x8000, 0xc3}, {0x0, 0x100}, {0x9, 0x6e8}, {0xdde7, 0x8}, {0x100000001, 0x3}, {0x6, 0x200}, {0x18, 0x40}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0x3}, {0x0, 0x4e2ac117}, {0x5, 0x6}, {0x9, 0x200}, {0x26, 0x1}, {0x5, 0x362c}, {0x1, 0xfffffffffffffffa}, {0x7, 0x7}, {0x7, 0x8}, {0xf}, {0x100c000000, 0x401}, {0x1}, {0x5401, 0x7}, {0x8000000000000001}, {0xd, 0x3}, {0x8, 0x7}, {0x180000000, 0x8000000000000000}, {0x3ff, 0x99}, {0x6, 0x7}, {0xd9, 0x6}, {0x2, 0x3be}, {0x5, 0x1}, {0xb21, 0x1}, {0x6, 0x4}, {0x18b, 0x4}, {0x1, 0x81}, {0x7, 0x1d4780000000000}, {0x0, 0xffffffffffff0001}, {0x2, 0x4}, {0xbc7a, 0x48c6}, {0x6, 0x6}, {0x8, 0x7}, {0x7, 0x4}, {0x5fd, 0xffffffffffffff96}, {0xfffffffffffffffb, 0x6}, {0x1, 0x2}, {0x5, 0x10a}, {0x80, 0xcd}, {0x4, 0xd2}, {0x46b7, 0x9ad}, {0x12af, 0x7}, {0xfffffffffffffff8, 0x10001}, {0x1, 0xb}, {0x1, 0x4d1}, {0x4, 0x10001}, {0x1, 0x9}, {0x1, 0x100000000}, {0x0, 0x40}, {0x7fffffffffffffff, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x4, 0xfff}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x9, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x46d7, 0x9}, {0xcff, 0x6}, {0x0, 0x3}, {0x2, 0x1e0}, {0x0, 0x8000}, {0x3, 0x6}, {0xe, 0x4c}, {0x800, 0x581}, {0x7fff, 0x6}, {0x3, 0x7}, {0x3, 0x1}, {0x8, 0x7}, {0xd, 0x9}, {0x5, 0x7}, {0xb, 0x2}, {0x8000000000000000, 0xdc80}, {0xcf, 0x4}, {0x6, 0x1ff}, {0xffffffff, 0x7}, {0x6, 0x101}, {}, {0x10001, 0x8}, {0x7, 0x9}, {0xffff, 0x5}, {0x43c, 0x1}, {0x3, 0x6}, {0x883c, 0x6}, {0xfff, 0xcf3}, {0x10001, 0x60f65796}, {0x3, 0x7}, {0x3, 0xfffffffffffffff9}, {0x1}, {0x0, 0x3}, {0x6, 0x7b}, {0x1, 0x6}, {0x4, 0x8}, {0x8, 0x20}, {0x180000, 0x101}, {0x0, 0xffffffffffffff77}, {0xff, 0x8}, {0x5}, {0x8, 0x7}, {0x40}, {0x7, 0xc}, {0x8, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0xc}, {0x3}, {0x2, 0x9}, {0x9c4, 0x2}, {0x7, 0x1}, {0x9, 0x8}, {0x9, 0x4}, {0x9, 0x957}, {0xfff, 0xfff}, {0x8000}, {0x0, 0x9}, {0x7, 0x5}, {0x9, 0x1}, {0x5, 0xeaa}, {0x3, 0x5}, {0x6, 0x401}, {0x7, 0x13d8}, {0x200, 0x7}, {0x8e, 0x2}, {0x2800000, 0xd}, {0x9000000000000, 0x3}, {0x0, 0xd6a3}, {0x0, 0x9}, {0xfffffffffffffffe, 0x2}, {0xa13}, {0x300000000000, 0x9}, {0xbb}, {0x3ff}, {0xffff, 0x9}, {0x2}, {0x4, 0x1}, {0x2, 0x8}, {0x3, 0x376}, {0x9713, 0x8}, {0xb016, 0x3}, {0x5, 0xb4}, {0x5, 0xd}, {0x3, 0x4}, {0xffffffffffffffff, 0x70f}, {0x9, 0x8}, {0x3}, {0xd, 0x9}, {0x5, 0x5}, {0x2793, 0xfb}, {0x3, 0x4}, {0xffffffff, 0x51e}, {0xf, 0x1}, {0x1, 0x81}]}, &(0x7f0000001b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001b80)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000001bc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, 0x0, &(0x7f0000001c40)=@features={{0x4f32494e, 0x6, 0x10, 0x20000000}}, &(0x7f0000001c80)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001d00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xa4}, &(0x7f0000001e40)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000001ec0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000001f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000001f40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000001fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x4, 0x7}, {0x2, 0x4}, {0xfffffffffffffffe, 0x80000000}, {0x81, 0x7d}, {0xfffffffffffffff3, 0x2}, {0x7, 0x3}, {0x8, 0x5}, {0x5, 0x6}, {0xb, 0x4}, {0x6, 0x7}, {0xb57, 0x29e}, {0x7ed, 0x8}, {0xd8d}, {0x0, 0x5}, {0x6, 0x4d96}, {0x5, 0xff}, {0x4, 0x2}, {0x80, 0x1}, {0xbf2}, {0x3e2, 0x7}, {0x962, 0x5}, {0x1, 0x9}, {0x0, 0x1ce}, {0x9000000000000, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x7ff, 0x8}, {0xde, 0x8}, {0x4, 0x75}, {0x3, 0x8}, {0x0, 0x9}, {0x9, 0x722b}, {0x8000000000000000, 0x8000000000000000}, {0x7ff, 0x8000000000000000}, {0xffffffffffffffff, 0x9}, {0x400, 0x1}, {0x24a0, 0x2}, {0x4, 0x8000000000000000}, {0x9, 0xc000000000000}, {0x7, 0x5a}, {0x7fff80, 0x6}, {0xffffffff, 0x1}, {0x1, 0x2}, {0x3b86}, {0x80, 0x4c1f}, {0x2, 0xfffffffffffffffd}, {0x9, 0x80}, {0x1d2a}, {0xaf3e, 0x5}, {0xffffffffffff6a84, 0x5}, {0xffff, 0xf7}, {0xc, 0x6}, {0x2, 0x1}, {0x8000000000000000, 0x6}, {0x400000000}, {0xd, 0x47ff}, {0x137, 0x4}, {0x81, 0x3}, {0x2, 0x80}, {0x2, 0x100}, {0x7ff, 0x8}, {0xffffffffffff8001, 0x6}, {0x6}, {0x7, 0x9}, {0xb6a1, 0xffffffff}, {0x3, 0xac}, {0x5, 0x3}, {0x0, 0xdd}, {0x4, 0x400}, {0x0, 0x2}, {0x1, 0x3}, {0x8, 0x81}, {0xbedf, 0x8af}, {0x1000, 0x10001}, {0x4, 0x4}, {0x1ff, 0x59f83bd5}, {0x9, 0x68}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x100000000}, {0x3, 0x45}, {0x10, 0x3}, {0x1, 0x2}, {0x2, 0x78c0}, {0x4, 0x2}, {0x1, 0x1}, {0x1a6, 0x8}, {0x1, 0x6}, {0x1ff, 0xff}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0xf487}, {0x9, 0x1}, {0x10000, 0xffffffffffffffff}, {0x0, 0x7}, {0x2, 0x8001}, {0xb, 0x24000}, {0x0, 0x6}, {0x5, 0x5}, {0x3ff, 0x3ff}, {0x1, 0xe6}, {0x74, 0x2}, {0x1, 0xa31}, {0x8, 0x5}, {0xfffffffffffffff8, 0x100000001}, {0x4, 0xf}, {0x23, 0x7}, {0x40000}, {0xffffffffffffffff, 0x1}, {0x13, 0x7}, {0x8000}, {0x100000001, 0x8000000000000000}, {0x8, 0x7}, {0x8}, {0x7, 0x7}, {0x2, 0x8}, {0xf30, 0xffffffff}, {0x0, 0x401}, {0x400, 0x7fffffffffffffff}, {0x8, 0xff}, {0x80}, {0x3038, 0x1}, {0x1, 0x189}, {0xf4, 0x80000001}, {0x3, 0x10}, {0x7fffffffffffffff, 0xfffffffffffffffe}, {0x8, 0x5}, {0xa179, 0xfff}, {0xf927, 0x6000}, {0x8}, {0x5, 0xfffffffffffffedf}, {0xf2a8, 0x8}, {0x3}, {0x400, 0x7}, {0x5, 0x2}, {0xffffffff80000000, 0x1000}, {0x7ff, 0x5}, {0xfffffffffffffffb, 0x2}, {0xffff, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x9, 0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x8}, {0x5, 0x31}, {0x0, 0x7ff}, {0x8, 0x5}, {0xff, 0x7}, {0x3, 0x7}, {0x3, 0x3}, {0x400, 0x35336528}, {0x1, 0x40}, {0x6, 0x9}, {0x0, 0x7}, {0x6, 0xfffffffffffffffa}, {0x3, 0x5}, {0x7, 0x1b}, {0x81, 0x8}, {0x1caa, 0x3}, {0x485a, 0x5d3}, {0x80, 0x9}, {0x0, 0x6}, {0x7}, {}, {0x741d, 0xffffffffffffffff}, {0x2, 0xfff00}, {0x9, 0xfffffffffffffff7}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x63d}, {0x7, 0x5}, {0x5, 0xcfb}, {0x401, 0x5}, {0x6, 0x71c6}, {0x0, 0x7}, {0x5a, 0x7fff}, {0x40}, {0xffffffffffff9add, 0x80}, {0x4, 0x1}, {0x7, 0x354}, {0x3, 0xa}, {0x808000, 0x800}, {0xc0ef, 0x79cb}, {0x4, 0xdc}, {0x6, 0xee40}, {0xc91, 0x3}, {0x2, 0xb3e8}, {0x74dedf7b}, {0x6, 0xe6a}, {0x9, 0x6}, {0x200, 0x2}, {0x8, 0x8}, {0x2, 0xa}, {0x0, 0x100}, {0x8, 0x6}, {0x4, 0x800}, {0x1000, 0x5}, {0xf7, 0x7fffffff}, {0x0, 0x2}, {0x10000, 0x8}, {0x9, 0xfffffffffffff001}, {0x1, 0x7}, {}, {0x1, 0x6e54}, {0xff, 0x6}, {0x3}, {0x7fff, 0x99e}, {0x1000, 0x7fffffffffffffff}, {0x8, 0x4f}, {0x4, 0x8}, {0x9, 0x102}, {0x0, 0x3}, {0xfffffffffffffff9, 0x7}, {0x94, 0x7fff}, {0x80000001, 0x6}, {0x4, 0xd}, {0x9, 0x2}, {0x4}, {0x1, 0xfff}, {0x3f96}, {0x400, 0x100}, {0x9, 0xffffffff}, {0x4, 0xd9c}, {0x100000001, 0x6}, {0x61}, {0x2, 0xd0fd}, {0xc000000000, 0x8000000000000001}, {0x101, 0xa4}, {0x8a56, 0x3}, {0x100000000, 0x5}, {0x3}, {0x3, 0x8}, {0x8, 0x1ff}, {0xe0000000000, 0x8}, {0x6160, 0x874}, {0xfffffffffffffff1, 0x5}, {0x2, 0x8}, {0x8, 0x1}, {0x62, 0x100000000}, {0x426, 0x2000000000000}, {0x1, 0x100000001}, {0xe28, 0x3}, {0xffff, 0x5}, {0xfffffffffffffff9, 0xfffffffffffffff9}, {0x8, 0x8}, {0x3, 0x6}, {0x7, 0x9}, {0x5e, 0x7ff}, {0x200000000000000}, {0x335, 0xffffffff}, {0x800, 0x7f}, {0x5, 0x9}, {0x4, 0x4}]}, &(0x7f0000003000)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, 0x0, &(0x7f00000030c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x4}, &(0x7f0000003200)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000003280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f00000032c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000003380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000033c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003400)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000003440)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003480)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x81}, &(0x7f00000035c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x5, 0xc}, {0x2, 0x200}, {0x401, 0x7}, {0xfffffffeffffffff, 0x2}, {0x24000000000, 0x2f}, {0x8, 0x401}, {0x101}, {0x7, 0x8}, {0x2, 0x8}, {0x6, 0xb60}, {0x9, 0x1}, {0x7fffffff, 0x3}, {0x4, 0x4}, {0xffffffffffffffff, 0x7}, {0x2, 0xbf}, {0x8, 0x8000000000000000}, {0xfffffffffffffffe, 0x6}, {0x5, 0x9}, {0x5, 0x4}, {0x5, 0x307}, {0x8, 0x8}, {0x6}, {0x2, 0x3}, {0x2, 0x79}, {0x8000000000000001, 0x1}, {0x1ff, 0x5e}, {0x7ff, 0xf}, {0x8, 0x8000}, {0xe}, {0x131, 0x4}, {0x1, 0x2}, {0x7c6, 0x3}, {0x5ff, 0xff}, {0x1, 0x80}, {0x8, 0x1}, {0x0, 0xe}, {0x3, 0x5e71}, {0x1000, 0x9}, {0x0, 0x5}, {0x21a16357, 0x10000}, {0xc46d, 0x8}, {0x7, 0xfff}, {0x1, 0x5a4}, {0x73, 0xef4}, {0xfb4, 0xb4b}, {0x1, 0x3}, {0xffffffffffffff80, 0x5}, {0x7, 0x5}, {0x9}, {0x2, 0x401}, {0x2}, {0x100, 0x1000}, {0x5, 0x8000}, {0x8, 0x6}, {0x7, 0x7}, {}, {0x1cf6ef48, 0xa0000}, {0x6}, {0x3, 0x1741}, {0x6, 0x4}, {0x8, 0xcd}, {0x7, 0xffffffffffff12c9}, {0x8, 0x2}, {0x2, 0x7}, {0x1, 0x8000}, {0x8001, 0x1}, {0x9, 0x341}, {0x9, 0x2}, {0x0, 0x4}, {0xb1, 0x3}, {0x8, 0x3}, {0x5}, {0x0, 0x10000}, {0x8000000000000000, 0x2}, {0xb, 0xedff}, {0x3, 0x3}, {0x65bf0fa9}, {0x9, 0x2}, {0x4}, {0x400, 0xfffffffffffffffe}, {0x5, 0xb34c}, {0x6, 0x9}, {0x98, 0x2}, {0x6, 0x8f}, {0x6, 0xc9}, {0xfffffffffffff801, 0x5}, {0x8}, {0x3, 0x3}, {0x3, 0xf8}, {0x2219, 0x7a}, {0x1, 0x9}, {0x7fff, 0x1}, {0x6, 0x8}, {0x9, 0xfffffffffffffff8}, {0x4, 0xa216}, {0x9, 0x1}, {0xfff, 0xfff}, {0x1, 0x1ff}, {0x42, 0x7}, {0x5, 0x8}, {0x0, 0xfffffffffffffff1}, {0x5, 0xfffffffffffffff7}, {0x52a4, 0x1}, {0x4, 0xf3}, {0x401, 0x50000000000}, {0x6, 0x1}, {0x1ff, 0x5}, {0x6, 0xf16}, {0x1ff, 0x9}, {0x6, 0xfff}, {0x5, 0x7f}, {0xb, 0x8000}, {0x3, 0x5}, {0xfffffffffffffffc, 0x8}, {0x0, 0xab}, {0x53, 0x2}, {0x2, 0x7fff}, {0x100000000, 0x5}, {0x0, 0x5}, {0x59, 0x2}, {0xfffffffffffffffc, 0x5}, {0x8, 0x1}, {0x8000, 0x16}, {0x1, 0xe}, {0x4, 0x8}, {0xfffffffffffffffe, 0xffffffffffff59e3}, {0x7, 0x1}, {0x100000001, 0x7}, {0x0, 0x5}, {0x6, 0xdd8d}, {0x0, 0x80000001}, {0xc, 0x5}, {0x2, 0x2}, {0xfe30, 0xb946}, {0x5, 0x8000}, {0x2, 0x4}, {0xffffffffffffffff, 0x200}, {0x246c4f19, 0xcfd}, {0x9, 0xffffffff80000001}, {0x81, 0x2}, {0x6, 0x5}, {0x6, 0x7ff}, {0x2, 0x2}, {0xff, 0x9}, {0x9, 0x9}, {0x1, 0x800}, {0xffffffffffff514e, 0x1}, {0x9, 0x40000}, {0xfffffffffffffff8, 0x1ff}, {0x9, 0x9e}, {0xff, 0x5}, {0xbc, 0x80000000}, {0xffffffffffffff80, 0x3}, {0x3, 0xb}, {0xcabd, 0x899}, {0x6698, 0x2}, {0x1, 0x401}, {0xffffffffffffffff, 0x4}, {0x4, 0xff}, {0x0, 0xee}, {0x2, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x3ff, 0x4}, {0x5, 0x1c0000000}, {0x2, 0x5}, {0x5, 0xfffffffffffffffe}, {0x8, 0x4}, {0xfffffffffffffca9, 0xfffffffffffffff5}, {0x6, 0x9}, {0x3, 0x7}, {0x9, 0xfd}, {0x5f7, 0x7ff}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0xaf36, 0x3}, {0x401, 0x5f}, {0x2, 0x8}, {0x8000000000000001, 0x7}, {0x229, 0x1}, {0x4f, 0x1}, {0x80000000, 0x2}, {0x2, 0x5}, {0xfffffffffffff000, 0x8}, {0x4b14, 0x8}, {0x8, 0xfffffffffffffffa}, {0xbd5}, {0x2, 0x8}, {0x7fff, 0x4}, {0x7fffffffffffffff, 0x39}, {0x0, 0xf2}, {0xfffffffffffffb1b, 0x6}, {0x80000000, 0x1}, {0x1, 0x9}, {0x1, 0xb}, {0x9, 0x7}, {0x7, 0x8001}, {0x4, 0x7c01b379}, {0x3, 0x3}, {0x6, 0x6}, {0x8000000000000000}, {0x37cd, 0x401}, {0x8, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x80000000, 0x4a8c}, {0x100, 0xd15}, {0x442, 0x106}, {0x1, 0x6}, {0x0, 0x80000000}, {0x5, 0xd}, {0x7f1865f3, 0x50}, {0x5, 0xffffffffffffffff}, {0xa, 0x5}, {0x10000, 0xef4}, {0x9, 0x10000}, {0x4, 0x6}, {0x9, 0x3ff}, {0x1ff, 0x6}, {0x14, 0xb8}, {0x2, 0x3}, {0xf, 0x7}, {0x0, 0x8}, {0x2e5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0xcc4d, 0x81}, {0x5, 0x8}, {0x7fff, 0xfad}, {0x6, 0x5}, {0x7, 0x70000}, {0x82f0, 0x7fffffffffffffff}, {0x1000, 0x7}, {0xd, 0x4}, {0x8, 0x7}, {0x4, 0x3e8}, {0x2, 0x7ff}, {0x9, 0x2}, {0x7fff}, {0xfffe00000000, 0x3}, {0x0, 0x115}, {0x5, 0x9}, {0x10001, 0x4}, {0x2, 0x7f}, {0x8, 0xffffffff}, {0xffffffffffffffff, 0x594f}, {0x9, 0x2}, {0x7, 0x7fffffff}, {0x4, 0x1ff}, {0x0, 0x3}, {0x498, 0x9}, {0x9, 0x1000}, {0x2, 0xffffffffffff8000}]}, 0x0, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xb}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f00000057c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000005800)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005840)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005880)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f00000058c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}], 0x32}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000d90000003f00000008000300cfb7f175ff00b4e20a40e50056f411fe52c7cc158472e40d534cac0da095ce8638cb8feab2000d4e728da3d4930378b2411bd60a6f9278d1326464059d82570280529b7b6f255e27e4d3cf3bfbda0f808fa116543803382e09b316e808dbfed89b8f49c1fbffc71800c781c66550305fc4a0b65ca7b27fce19193fd1fa754ae8", @ANYRES32=r5, @ANYBLOB="18005e800c000100ffffffff000000000800020000000000"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000d90000003f00000008000300cfb7f175ff00b4e20a40e50056f411fe52c7cc158472e40d534cac0da095ce8638cb8feab2000d4e728da3d4930378b2411bd60a6f9278d1326464059d82570280529b7b6f255e27e4d3cf3bfbda0f808fa116543803382e09b316e808dbfed89b8f49c1fbffc71800c781c66550305fc4a0b65ca7b27fce19193fd1fa754ae8", @ANYRES32=r5, @ANYBLOB="18005e800c000100ffffffff000000000800020000000000"], 0x34}}, 0x0) 46.608146683s ago: executing program 0 (id=256): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)="c3"}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010103}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040054}, 0x24000001) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='dvmrp0\x00') setpgid(r2, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x64, 0x4}, {0x6}]}) 46.544600291s ago: executing program 0 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') (rerun: 64) exit(0x80000000) (async) lseek(r1, 0xffffffff, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES8=r4, @ANYRES32], 0x15) 41.976133407s ago: executing program 5 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x26, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x3, 0x2, 0x80, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ee}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x8f330cb8a044756a, 0xa, 0xa, 0xffffffffffffffe0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x27, &(0x7f00000003c0)=""/39, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x4, 0xe, 0x2}, {0x0, 0x2, 0x7}, {0x5, 0x1, 0x8, 0x1}, {0x4, 0x3, 0x10}]}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0d07d9097000fbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000580)=0x4) semop(0x0, &(0x7f0000000180)=[{0x1, 0x203}, {}], 0x2) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653a322d4e3a4e00b88bf3a923bc5975b8baec0af370227efab1fd9e24d52d5f4d62c36d625d951c4e37a730597521d96d6646a89bb23ba4fe5d6cf28549295ad05dfed2b67aeab4438c72a44aed091c0640061ce32856c79ca715810efbfd93796972a695a80882579529d76ea5fa1043829ed28382e8840c3f8af72e218712bf462ed5eaff04e92d4221e0fc838f253f5f742b3cb21bc53c6c7e5629612b3dfa05681e564887fbef2a9754c96dd2aa52ede4edb532a89d10e710504d9d7d951ca3840972caa29b461a09f212bbe46c4aa4db6a44f2245a0308db"]) 41.969526331s ago: executing program 5 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/223, &(0x7f0000000240)=0xdf) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c225b530aaaaaaaaaabb08004538001c006600000f11907800000000e00000014e244e2000089078"], 0x0) 41.880609209s ago: executing program 5 (id=338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0x6, 0x200, 0x10, 0x0, 0x4, 0x3, 0x101, 0x8, 0x7, 0x1000, 0xa7c1, 0x7, 0xe, 0x8000, 0x21, 0x4, 0x9769, 0x7, 0x40, 0x3ff, 0x5f8c, 0xe, 0x4, 0x81, 0x5bca, 0x6, 0x8, 0x7fff, 0x101, 0xa, 0x6, 0x7, 0x3, 0x1, 0x1000, 0x6, 0x8, 0x6, 0x8, 0x1, 0x1, 0x6, 0x2, 0x1, 0x8, 0x4, 0x0, 0x5], 0x6}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x3, 0x5, 0x0, 0x0, 0x1d9d0f0b3479d1c5, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916790000000000bf6700000000000035060500e0ff1f006706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) sendto$packet(r4, &(0x7f00000000c0)="2cb26c01e52a376097a53921c3da8c9c257adda51a37ffed8ef59f7033ba3ead698615bf8f2c1f25c3ef979716f55ca94979f4682c03faab4a0950d8a4fb323324fc38c08bcb002c937ae4fefc6aec741d354a6154f2e4fd1c28441d678efbaba5d458d8a626c6671e5325893dcb78b2", 0x70, 0x20000000, &(0x7f0000000140)={0x11, 0xd, r1, 0x1, 0x2, 0x6, @random="98790962fdcf"}, 0x14) 41.844806477s ago: executing program 5 (id=341): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xed}}, {@lazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x0, 0x9400}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 41.578459724s ago: executing program 5 (id=346): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x7, 0x7, 0x6, 0x8}, 0x3, 0x6, &(0x7f0000000140)={{0x2, 0x0, 0x101, 0x31}, &(0x7f0000000100)={{0x2, 0xfffffff7, 0x8, 0x6f}, &(0x7f00000000c0)={{0x60800000, 0x0, 0x4, 0x200}}}}, 0x8, &(0x7f0000000180)="cd61b9d298c7c71bf1d80dfa82298f9d166c024b6846cc556eb20c2a47bca65c8cb30dee42ef5a2c81acc5039cfcb6ed013aae9905a38c4af1af82966c3992820cb116e7e49ce46c8d2adda8fc2579c01cf0ad020582789927469f9a73a11a97c3d26cd0547607c4db94043b763e3b36ea9b6f4b97b49064dca4e9a17d0b212fd335c00cb5c6adc374e647", 0x7}}) 40.73092283s ago: executing program 5 (id=355): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x24, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) (async) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003ffffff000000000800000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003ffffff000000000800000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x1}, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 40.727979926s ago: executing program 34 (id=355): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x24, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) (async) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x4}, 0xfffffe29, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003ffffff000000000800000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003ffffff000000000800000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x1}, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 39.114767107s ago: executing program 2 (id=378): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1d1c00, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4097, 0xffffff99}], 0x2, 0x0, 0x0, 0x1b) (async) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4097, 0xffffff99}], 0x2, 0x0, 0x0, 0x1b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") syz_open_dev$vcsu(&(0x7f0000000140), 0x7, 0x20001) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x7, 0x20001) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r8 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r8, 0x20, &(0x7f0000000000)=[r8], 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000180)={0x80, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000180)={0x80, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xf, 0x40300102, 0x3, 0x827, 0x6, 0x7, 0x0, 0x0, 0x80, 0x3fc00000}}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 39.029327075s ago: executing program 2 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) r1 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8864, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e) 38.932102332s ago: executing program 2 (id=383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x888}, 0x40800) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x4000000, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f000061d000/0x4000)=nil, 0x4000, 0xe) 38.92460933s ago: executing program 2 (id=384): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40900000000000061114f000000000085100000020000008500000000000040950000000000000095000000000000002c3335989af2421ddbe7c72ce1c745b5fed7b10fd3871e34"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x23) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(r1, 0x0, 0x22) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 38.857415201s ago: executing program 2 (id=386): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001f200000000000000000a000000000000000000000006001d000000000006001c"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x554, &(0x7f0000000b40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1, 0x38c, &(0x7f0000000380)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") mount$cgroup(0x0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0xffffffffffffff1f) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x314}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 38.35599374s ago: executing program 2 (id=391): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x80, 0xc, 0x9, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x40, 0xb, 0xffffffff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r0, 0xb24, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000280)) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000002c0)={0x200d}) (async) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000300)="c307391a1741913fe3bb89292a6956cf2ab41eaf2be05e5bcc377997638d3cdd32ed6902bc829825767873030c7fd23404d5a13e2c9117601e7dc42623f1f0c8c1ba2e4dc9a9cc", {0x7ff, 0x100, 0x34343452, 0x2, 0x8, 0x2, 0xa, 0x4d4a}}) epoll_pwait(r3, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) (async, rerun: 64) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000480)=[@sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x8f, 0xff}, @mss={0x2, 0x7}, @mss, @window={0x3, 0x81, 0x5}], 0x6) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x448, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffdaf}}, [0x9, 0xa, 0xb, 0x6, 0x1, 0xffffffffe1c39373, 0x4, 0x8, 0x6, 0x7fffffffffffffff, 0xfff, 0xfffffffffffffc01, 0x76, 0x200]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000600)={r5, 0xfffffffa}, &(0x7f0000000640)=0x8) (async) socket$netlink(0x10, 0x3, 0x6) (async) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0xa, 0x80}}, './file0\x00'}) (async, rerun: 64) r8 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x80041) (rerun: 64) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000740)) (async, rerun: 64) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x800000, 0x0) (rerun: 64) r9 = syz_open_dev$ndb(&(0x7f0000000840), 0x0, 0x440000) ioctl$IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000880)={0x5, 0x0, 0x12d, 0x9}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000008c0)=0x2) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) (async) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000980)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r11, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048060}, 0x8010) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000a80)=0x8, 0x4) (async) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000ac0)={0xd, 0x8000}) (async, rerun: 64) map_shadow_stack(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (rerun: 64) 38.355726484s ago: executing program 35 (id=391): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x80, 0xc, 0x9, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x40, 0xb, 0xffffffff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r0, 0xb24, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000280)) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000002c0)={0x200d}) (async) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000300)="c307391a1741913fe3bb89292a6956cf2ab41eaf2be05e5bcc377997638d3cdd32ed6902bc829825767873030c7fd23404d5a13e2c9117601e7dc42623f1f0c8c1ba2e4dc9a9cc", {0x7ff, 0x100, 0x34343452, 0x2, 0x8, 0x2, 0xa, 0x4d4a}}) epoll_pwait(r3, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) (async, rerun: 64) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000480)=[@sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x8f, 0xff}, @mss={0x2, 0x7}, @mss, @window={0x3, 0x81, 0x5}], 0x6) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x448, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffdaf}}, [0x9, 0xa, 0xb, 0x6, 0x1, 0xffffffffe1c39373, 0x4, 0x8, 0x6, 0x7fffffffffffffff, 0xfff, 0xfffffffffffffc01, 0x76, 0x200]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000600)={r5, 0xfffffffa}, &(0x7f0000000640)=0x8) (async) socket$netlink(0x10, 0x3, 0x6) (async) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0xa, 0x80}}, './file0\x00'}) (async, rerun: 64) r8 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x80041) (rerun: 64) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000740)) (async, rerun: 64) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x800000, 0x0) (rerun: 64) r9 = syz_open_dev$ndb(&(0x7f0000000840), 0x0, 0x440000) ioctl$IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000880)={0x5, 0x0, 0x12d, 0x9}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000008c0)=0x2) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) (async) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000980)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r11, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048060}, 0x8010) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000a80)=0x8, 0x4) (async) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000ac0)={0xd, 0x8000}) (async, rerun: 64) map_shadow_stack(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (rerun: 64) 30.386503605s ago: executing program 36 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') (rerun: 64) exit(0x80000000) (async) lseek(r1, 0xffffffff, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES8=r4, @ANYRES32], 0x15) 3.028176677s ago: executing program 8 (id=831): getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = inotify_init1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xda1a}, [@generic={0x6b, 0x1, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 2.52910358s ago: executing program 8 (id=834): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 2.354478578s ago: executing program 8 (id=839): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 2.342069054s ago: executing program 1 (id=840): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x4010) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x2, @loopback}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x10, @private1, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x110}}], 0x2, 0x200488d4) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xc}, 0x8) r6 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) sendfile(r0, r1, 0x0, 0x8) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) 2.063449619s ago: executing program 1 (id=846): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x3b71, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r3) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf251e0000000c000600010000000100000014002d80040003800c0002000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 2.003499549s ago: executing program 1 (id=851): r0 = io_uring_setup(0x261a, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000091401002abd7000fbdbdf2508"], 0x18}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xe, 0xffffffffffffffff, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x171804, 0x88) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) mount$bind(&(0x7f0000000180)='./sys/bus/i2c/devices/i2c-0/new_device\x00', &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-0/new_device\x00', &(0x7f00000002c0), 0x1000a0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {r3}}, './sys/bus/i2c/devices/i2c-0/new_device\x00'}) close(r4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000c00000000000007000000", @ANYRES32=r7, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000500010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000500)='nb7vpq904m 0x1', 0xe) 1.760075411s ago: executing program 1 (id=856): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-+x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) syz_usbip_server_init(0x2) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) close_range(r1, r2, 0x2) 1.480969452s ago: executing program 6 (id=862): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000004000)={0x287, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x80000009, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x15}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x70) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[], 0x2b) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close_range(r7, r7, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500), 0x800004, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c776664056f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000610000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/33, 0x21, 0x0, &(0x7f00000008c0)=""/73, 0x49}, &(0x7f0000000980)=0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b40000000000000061144c0000000000040000000000000095000000000059cac8c6555d3d338a3af1353d9a2bc8ccf96615348a63089355552cc48f3c8b39df4e9ca30b41b0fb72002dad9984151c56140cd8ca72a9267e3b021ceacb9d1f01a918b60c97a2ccc9821d0decb00aa4488b1d1eeb32b4e034af7960fa0805d0a86da7d7438092bb9011c6cfe67bcc5ee057057ec8aca3ab20"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) socket$igmp6(0xa, 0x3, 0x2) 1.444021518s ago: executing program 8 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x6, "4eff5e04e1beffa06d1398e723d337406f34c074bf2d5a553ae708e88c059f78", 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000380)={0x1, {0x8, 0x80000001, 0x4, 0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x100, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="bc2f572fd611043146647e31aa4dcdd589433b1aa1a2c58b1c35c2294d697f78690213ad06d82a06000000000000008749448c53ad31477db8523fb408752912fdad265eb9bd44f4f02b3040ae6e846fdef2c9ca97e1e29fd9094755fec72ed3c545b8e32833395b22", @ANYRES64=r1], 0x6c}, 0x1, 0x0, 0x0, 0x2091}, 0x40000) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0) socket(0x8, 0x5, 0x5) 851.291158ms ago: executing program 7 (id=871): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0x7}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) unshare(0x22020400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') setns(r5, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000006340)=ANY=[], 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x7, 0x5}, {0x5b, 0x80000001}]}, 0x14, 0x1) 850.28203ms ago: executing program 9 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d40)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x134, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0xc7, 0xc, "8ba9f6918f03231ed2fcfe571f22652b24934a498cb1156f2374ee09767200f44da59521cd4af5262e6447f3f1632fd997beb7604756a8efb7df6942cb421b79a2cbdf50bf16a668d2c26ebb5abee67fbed7fd9a129547e70135c9d901bd43fe9049d09c636be9432ef9c10affdd5d69b8cd4223cc44d5592fb91eb0a7ae3058a62af6c28e6108545d90b37f7ea880468a835f5f4d6e7545aeb8cd1bde49f230c2d47b837dd27824ce74d699354de47b59b3c0d4527a3a5ede6e77d725ca5ed679bd1c"}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "555be0a7abd1789b27c284d8e7faa106c8cbcb7cd23b1b9487fd060b52f737df098552127dd9"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "08edf50a5fa9dc482d86708351"}]}, @NFT_MSG_DELTABLE={0x158, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xf4, 0x6, "a5d612ac18ad470929fc7d823b71ed85d4708784f03637a9fdfe62e62590abff6c8261967e213b2553acc37a1887f45e1356796d8141749ec54dffcaa664bc31daaff7fbea81b5aeca28daed611bd42a7e999c0ab309c87572a959d3220706acfadaf31cae3a0514ad455b20feb53ce57d58e264eb4a47aba619d4fca80070f60c20b1088e10cad2588c5554f8ef43e24f46e37e4e6660777cafbcb6c69183504de97fef3d58cc7d5b4d35453a11d5fbcc4a50b228a3ebae39aeab2a4bce24c9110bed69f8d3b96b6004d5652cbadcdc0a5dd51615917e8570c5ab24f91fff5c4ac87a6a99062959f6d7478e9ccb9ced"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x15, 0x6, "ef8e57cb6329867970da38b081f1840b6c"}]}, @NFT_MSG_NEWSETELEM={0x3590, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3570, 0x3, 0x0, 0x1, [{0x1ab0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x224, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf4, 0x1, "e5a17cb9416b944024026ecd22c42234582817ab20a2194142c2f551771306d2f043eb69ce51a050669b105dac55478803838ccaea243c3ae179e0c2adc0728088e4fc7feeb1d244579b410e01e6de20fdf5473925f0d0bec32f2da80a73aac74d7df819b69453ce456e1f27ff3d20fb1d2a05dd0ba277434b6acbd870aadf35beda4f2348cd45a672e821726bec5e2c1c9623bf20e2843432c21b7162d2f4d6c912622324c9a2f9acefcc513ccd79a9e4ef959c28ff316c014a8628f4ef45cf74ef2acba1ffe8b7d8c122598d2419af2f0b2f8e9cb4545e1d0972e88a7556dafa5393d32daceda89ca17aaf76ae4420"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "1d52d14a1a9488cd29f0871cfeeb32dc6462775b8b9a5a7646175319306ce1624e4ad777588879d0174f40d1ebabb2dfdd68ad1f20f0226e7cad569b11abb1aa596a6eaae339d01ad2054d02af98f554f9dba243036b8b13d33e672b1c8b89f03687d3e2680ee9d25db543712f6db421ff743edf2d420b0e4d73f91f96ed4a5f18703cea0728550e3b63c1f1103d596b435ae25f4f49a5da1be4a87e09468ceed7b3d81295de5a53054f8ef8ff1cd987a37811e36c2d2189f05f701b05e43d0dd4c3d60e155ae829c28df7aa4b2cb18bb9c1b5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xbc}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "298a3d9011d616a79c14c38c508792c2f039707426caff386db1036604300c83a51430f39ce2ca0ae8e8a67bc0032703074ceedb5c698617ad5de625535bec470638355ca82543b405c2940e24f4fe64b2ed247c2ead61429f373fb1757e122531122d31def5f8054b05b9353f83ac14281315b1d40a5f10914fb8fa497ec6ea8d29174d7638b4adb0fae86f536768a38335f291cb166154f630d6dfbcaf0530c345826c41050ab55889369178def1e66b6f376b3107d65a5a86618e1e"}, @NFTA_DATA_VALUE={0x88, 0x1, "3ebfd6004f895a0c21376248c30b1e6540b0433ed9151475bad919c5d54ec3ec21fe62f5343cd01b42efff38d35700f4b607adbebef2e267887c9081367864ecb64c6414d950d94bbbb4e74d6cd927766f6d76388e0327ae1e02969fe5db20a651d77415d6afc53a7c361c7f4c5491bfe2d2794a772a08d9c9ea3cb17e9e19f89f85b6d4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x24, 0x1, "21f7326590cf79ad6d6434342508452884d3335597617fe253de6937e57847c5"}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "9bfb98780d0985e187db9d6671b9ba92970c00448d496f4c11218d7c7f7fa2c939668b0f3132c2ff9329c2615cf4e57e1c98c5b6571b683d61017054757906cbad6970e149b8e0be8039069535ca7898b66884bf49bd39e695ffc429594777145501c6c5f4316d27b6f99dfb7f4429452891d3f5665fa8beba6227"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x54, 0x1, "252e5e864f98eaf5311e22cd347515a107e523d15a76eb0db35470a568bf2c8a03cec52b1c1a0dd7c287b0748b923f618dbc93acf477541325e38ac58646e200c7499dfabb957ea7b3b9229e00449f78"}]}, @NFTA_SET_ELEM_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "69c7541bc41de951208bf407c96b90fff2229a5cc9970328f9e1becb68f5cce7c010fa0f96fc6f9759a10e698247d4fefe4509aa2ce0e56870a53d85af45e830a557f44051edebc92152faf6dbc77c667417222880d9175cfd216b2bc77eca4ba950530c6d7e2549b150f313b026dc69cbf155f570a8cb0b85d7a682a3379eeafc7c093d854ede9db2c7656e45518e2a2a9a93c288b546b48660b6bceeb9945406da8c91362941d5f61ebc216923cf7a215cbe59448ffe4472fb0a7103bb076ce5b9567477973c21f4ec9d66ea4586ab709a1ec7da48c2c0a8"}, @NFTA_DATA_VALUE={0xfc, 0x1, "00146142dfa475670c6df7af2b3b6091bdb13bf6b45938554cc4a8d997154699944345511c148d434c6820a4a565d8dcab6a29aa26950e95135af954de447ae92f18eac120129d8dc4b99098fef1c930169d913babb197e267a087c13060b4ad64ce78f3760f61150a71b5cec158e29b7f922539471eba24d04269183e83d26db02574763314fb7512f5752f74b0a906a6e910c20dc7ff153249f5de3d82fc37fef64770d59839e232969508d844a2cbc8ad5ed8fd22036a7762691e80d683b2909b7f0f0dc85462af2567aa6e9cad39ce5a9b0f5609cfe0aa59b5677a5a4fb8ce3e4ab606d059e4ff0b38ef3cdf2b710009e1399b9ebdc0"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x134c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x11c8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x11b8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}, @NFTA_MATCH_INFO={0x3d, 0x3, "b931e4ab23d553f59de3733b72fb34dc22350669e31ad74c6512176be2ac04fb32dfff2752aebb0446e741fd65080b445b3671e1a914d15fd3"}, @NFTA_MATCH_INFO={0x27, 0x3, "6ef3b440986a7d91c6b7e41f580a36976fd4585e608556fb364400f29db67da252d7d4"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x61, 0x3, "5ff94853e927a7bda790e6e0b15fd1909272ed67f9e21faea87dd52f1891fa4dc918a037b884c0944027ae9c646ad7b1ba93737e166d7d131ebeea7c5a72955a58984e9cd32b8366c3a4b2f8e8cf229e023d8f318bfb29da78f89513c5"}, @NFTA_MATCH_INFO={0xb1, 0x3, "072584e5f9b481d6d8cc0ad7a7ce978ad09f4e21202ed28a601ba5004445f6f7de66b91c32f12f7cec247c54d50ba58599cc3ebffc8acf9916db9d30695d1f0cb49205309398cc74c848f885fccd1bb07daf1b91b72f2cf926f86c1bd78465ff2e59262ef10ed60cfa1b663db014b55b9343ea4a95dfe3dc58dcddfe8bb232629a932f57f28fd1efec9e38f69588bf1532bbc9ae377601ffcb871308a696739ab9ab669659e9bde40fde10f6e2"}, @NFTA_MATCH_INFO={0x12, 0x3, "9c1df1bc8b5cf2a6d40005431cf3"}, @NFTA_MATCH_INFO={0x1004, 0x3, "7ceb626287d88a4b14d735afcc3169d86191cefbffe089fe363f46c3cb551141c255f4bddbb3da2f1b012d6eaa93748cf815a70e36cd0c9feac800e697383182c775bd1ebdffdfd2b666d564cf9cff85dabad8d742c7e3aec2fcd1a92f5abbcc8f4b2e10905441549ff7c739bb372fa463c4ad0cc3a3aba9dc7be81a2580685cbfab9083f42ef495ca6f3ccd606dda72540ca4e45518cc964e19e479d4ebaa5326aa3a9f4c2689dc1f48b06d508325383be0bb4bdb44ddb58185f1fe9575b88db20d91960fe337d507b5903012cb2d02cd24c9c06efcff6cdaec7e21dcc5a359ae04c6baf308cde82155bef24ed7574ec5ef53394667c345f79d15d7cd6d5dbdd4afcae65a15996fc0adb9c5c71239c5a6145a36bbe63910a2100d7aafbecf1f5503e4a6cf1a98a82a09b066646a7ffc4f90e1be1b3bad22830528d42c52235a6ca974799fc940fa07e4ab1f9440b506b2df07b86c871880096feb95f810c3ae213e25af88fc5b572cd86a4ebc4e18a549eabdc36ae8ec90f173224b9f7edbe29c4c93d0abc5e13adb687611f49e78fe6f85b328e86b96a29ceff422c714eeb04a21167c8b24af5766ee67059902bd35b342503be3911d80bb8502cd9f42b3a125605d0f21e7e9624e4dc4b0fb204552a38dabc2ff6c02438999bbc1c3ab98a2ca151c4fbd3c18afe989070fd80cf29c7fa671e291776ecc167b7bece35cae6349e15690ea5b1d1ed83a87606dad513915b18cc9710d48fb0a53dc10b757e429b2444d51cc44a54e425ed9bcb126c0ceebdd17ec4c658d3261d57047bf4e27630b2da0d8a0b71e79d78713c4f21e0faeb65f504979a40c5ced15c79e0050af32f214428e91f6d22c573f1eb7c762e8243fef39249012fb9196729b36a4ce8fdafa3da89977441808911ee1cddf130bd3f7445bca9db765cc02db4f0e4a25203f742da47128c83d4d087254c4bec799c96b23f859446ed271533797975f55cf4d81e252e08f25e5bc7883bfbd04cfe71766d36d20b3cc90c6de3768e930637c04fd33119ff0f301cdb2c6671b2e9d1decae6ff972678ad266c8ce02dcfb835f1847ba46bd091b548d15c7e8cc700895ea44052c31d5c8119fa4ca391cd5263b0447a7479caca8e24fb19b83efdce559b14d7c05bb4ecbb07f3ac17fb682557f6ed3b2970bf5194daf8820c8be1e179ded535f67e64063fc1616ed5fe13250dbe35d8145aa5f1314cc0aa6db8eb03a1656474c4afd74ca06753c65b9cd7696823d282495093f28ba259b46d900a024cade6adcfcc3d424679b0dbaf30e1f026e777c6cbdfa93deb16cb0aefae44f002cd21f7be510f8404847bcf3084cd48275bb0790d280569fc6fe4abe8654e577fb18373fa5bdc97cb5d6309bce5e3cdfb28364f9a318e695066b2e54485c87a962eb8ab05cfa0b87959ebda7e82e301d4e680dc5ec859617e1395530d39cdeb9b9135a98f5294e269c0f131794880f23aaba4aa2154e18bf2a60ed687a343c1a78df91f2694708afec6ce96c5c479b748724c66acbc3f7667a9a0942d157c274f2ff154494298263e6642a040cab1bcd7be6cea9ef51425d82d5519d4ecc8f8489f195ea4ab6b8a70e1e20e7b792e59564c89a949d1742191849d316226bf436656d1a4010e16ecc5b1cfb0b8d994ec888d60b0bb49c7af39e3f23217fe62c2eb125d7ccb5379ea03a9f82774cfb34fe331ee662097706ca6da086dbabcfaebca6b5aa41b5639351315c71e5f42b227452f556dfd81c02e28446f51168ad7247b3a9c8bfc441cf4b6109467e639382a8e9d6192e2184c249d49e10116ba7f6cae6b98b061e30f468893570ecc733f2ad063af5ad79844e34e31492d2d59958f63b108db7c2c91ba88508975551ab97b81f7613a3915a3a0a7d9f3351888ae5b8603694c0dd324dcacc43680c1eccdb228c39b95b019d44d6f1fb2c13d17db4b0b7bfecfbdbc51953fc269f8aba23f2ca88d099dd87f75f9af7bfb9a4d793783f47b245a050ebe2f399530a52cda4c074a5381fb24b06fbbc7be33cc3c9acb0ebb5db3572f2f4007709b52c8202b13608120fa71c77154ab26d45455d06fd354b557a6b31607e410d40a90540a9216531facfd9404bf48b4d77cca34ae6944fed53bdd252a3ad41697d9200e82088b0e1bf2f1586b9581f81b812b74162b294ae7a0851fe3e1ac40a909092185e40296c85ee4a5e8675d0ba67d3f3f741acabedc63e799b6a4200040b13b0613111790a7a9f0931cfa95e2114b45de0b1d955faa4aa276f9d9de1d0a83a461c80b9a733206efb8045734a2e0321733ca8fd869435e7d1ae8550c4e0e60512c19ce0a15e6b02610249f38444b3ea8e1abef63e6ba91ac302258fa74c06e12c16eb720700640d1d106348515d8da296dbaa9018b273ba7cb4dbcd69e120a6e7496fe57a2bd2838525c43452824d5b527a4f9236bff9a8faf1d32fbd59d18d2cfdefeb929914f00f0848a2985a5713c027ab9d57cb9e150fea22bac0e76a72d831e4345dd7c45ec887ef1ea1e0a8a0b37fce4db6620796fccbbd57f85a203a8a043c96b1c7cd616b5b7645e531aa176b3de80dfdd0213030ffc11ac60117d9b9e7226421fde31d1d52b76c25854a0025180fa4592cb4435ece739ff4c02b5a32c17334813ed0bed848f35fe6b56eb94bb2c376838eedac741ab039dcd364740e3a6f9bab8dce2a944a33d484a7f578d7e85af5d7dc6ef9b924cb649c094d4b3fe0c656af5ee1bdbd545d609a24eb3933b5a0d02b6836f8cefa43b0121ea0f6afb5a885b2a5ec2d167d511fa45adc4db9b8c7239532ebbf7e60eade884fa9ece50d9e425cbe90938581e932cab4198b310491682bd94c599060f42b9532ae61668ecc6b11fd03bec75bf01d763ccaa736a2de952012b3f9d1ba7cf095ab95d523b6310455c872aeb274e1080a669f6697900171e106423893cbdab75325dbb058145f4d3ef79ffb717bf34d673ecdba249f7c715274bbb570c1fff9d5a2184be845a1bf86195ccac918269321add2e39b947408e2fc4622bd1763b86a774601d2a9f2ede2097c370afb8f80f444a6576b50e71a8871cb48c5ff8d34d88fbaa5d909f9d3ff527c782b88cd2a86b0beab2bf1ba1b505408082c5af23e30435e3155b36e48044cd73179146e8ddf1640143258b22f19e78cbddc9bcd15008a5fef0e5699688101344dc1c7546e233c393807a304ddae06d85395aa11907ed19645a11d77996890e76969f3a8468923d4443d101ee41e85b77f72a3295afe97e2b2f1a58759c0f295381e96efce73e206e84f734867c44f706ca086a49e61dbf3cc64877c930bf6f75241dc6d7212aa389cd803b2b718dd0dafe69335b434d2b0a6ec08d4d94916d3843c5fdfa1da7e43cbcbb79257228daf5996876f1fed42e75ce7d82b25cfb05eb17e335d48ea158fb13ebab6efbd043aac37cb1556820b1d5f3e8eb408186b8ee99a7d6cb2ba2390dfbee9ae5300b495da469e28c2eab20bf06d9f253b592112e15120bad9f49ffdaae41929f1d6f2f84c4c294e4a60438a4e4ea2f35dbce8122108107052bcf50337d7694b7144f0faee718d2cf07870877918cefab33c8fc396a8f30aabb56a0ac9fa42eea2029e88b563ada4bb642a1984f9e696d1890ab2cefdc4c2cdb5dbe49c6bb8c91c8cacb214990974771d1ccfebf5eeb6a52655e2f6ee89b86e537a6725d1f5efa76c574f87b2360703a4c00c9f2aa46fc3b41c9bd40ad7b1abf1fe79e648cb9df5ebfc0fa53eb850754c6f536782fdbbe820943b62cd778f7a858da97fede8490d2c12e9f17d58eab06dc6c6e7c69e08f5e75d00ab272b187d9450c641ffbb00067dd321feaa9a774155d26e78255fa8346c5c7e5ef26c31496fbd95a785e1a70838a043cff8b4d924513aa0cf54d7060bfb52290248dcaa428e079af69f35bc7bcf8730d821964448e2779add41d13c4bc3c06825763fb7b2a1371cb26ad3ea4a084598f0f09b313bef139c607c688af2efd9d002cad13a83d1a53e4cdcac15b0b916c88f6acbd9c25814caf3f205204b1dc0f973dced7897b45755d78ff9cc64acfea978a1ff1a373fe9c00942488f583754c1b97a5a7c912679054aaf49898d486c9c0e773431af43d3b16b8ccf245ee881352e3b2e87c3575257a3dbcb647f379101dce87116f156795a0d06697c550323642acdeacbfd5ba5629feb785521d2f40de63e5ce04d5045f6b249d494491d51575e5e893b51c0999e3a2fb7b6cbc21cb515e6628c1f8b571a7d7fb00777b89652c20255fdc43ae0ecdf890bc6c41035fe61ce5e322d4dab67d985533ed5e75d70cb558d49ff6b725758c6f0243cff599bafc39e02a264ac278952900e436b1b26ea11ab7426daecbe807aa65a60e4e7261c2b181c9bc65cf48cefcf09d198cb38d19fda1e96b75c4ca25c3d76653b18af6b0108def1083bd06da58aad08f47095516bacabcfa24ab2ba4b30eb91f6c00a25661e16e1bb40fdfe30461b1398fb3a9ad23a02e78b27701d2355ecb00a9a95ce38b0a6a5e0273e4c9191708ad51a88ef65a1df696bbd9e2b03f611e9ad52ab1660d5ee70bd67448d435b3c093d6ec918bef008d14cc92c3e7de6c97f462cf69617aefe87c013012137eba0d760fe7e828c75dc11ac34d60766c9be3489a187cf1bed066a8a00c8b37d9100ae2210e0268ce7dbc77d14ed6694855abca8085c1a65cccf9fd1daeb7cb86f2591997eb88e1bf5e7715ffa53ad6af99847e4afea1f9fead0c5607bbb125781b255b30eea6ef8d65aaba2615293c2ac4ad859c9a35967e423000e52398e7398883a26a33d25aab8ba7f2824ee3b418fd4b54d8d6086ed9de79be33eab2f23d623da6ac7c2d4f6a1a2e786f98dd9aa46f6d42a608aa465acfd5afb551b622244a00971040e72bcb0485afc35ffce465ef61c897e9329ee7fd91f522cc6e173924e493d6e0c2571dd6614e9c3b1f4d7cde88475d97c414cf0a04ba5fd34b90ea245b1017c5b32c49e7256da18b6dcec9c6bd86861da67f4a267328a0742dd70e21ec158edcc55bae6eb6110ed9fb42cd2b2d2a22ff71f836c342b0d73c6363b28cf770d0067bba3a11e8f3970151a346e3ae7ad4e939ef1a81473c97977d35d727051dd3771ed749cae0aa64d5a451e1e45c28ab26fb8cc2b03a857093bd7e601813236c995f9e7b1e38e7265abff7e98d58893c25301c4ad5a1f2c50ae40cb50d340d17477713161c3c287a1be25d57e3708c190e4eeec133d69437b857ca8b4178fa063312a7f8442b5b748f877a098aadc22206f0f7a9aa25095cda3a558f366ea8c1ed0fed69a4f7b6905e712115f2445094793724487bf2254e7c1e23bf3e18180b0744e7b4ed72b73151a580efa524f4b974a94e26a44527d1965486e5d2740f2f0504008d40cd3f0293246d381cbcc1403042d2ba856a8c8557be30f68dbef416c47b50f8b3d80f53ab2441d04a816a404967e69a229dea23a914c06d4469ae62bd12014ceb9c0a7a080de9c1ca6f9f365078ddb7a06390b6e00d7d61ecc67d36bd8fc9fa8f381bc4470cf5d41be293b93e4fbc5b650b5695ee1636fa3296e064b516ff6ac1fb91980fd193a6397b8f0bc93175c0226243d43b416a688d3ea17abffdcc546bedfca960e4828f38d715843bc990ea2845007f0d76b1028d3d0805f461ac7351aca758408e4352da9b477eda5bd9bbe3532b914350ae835398e0ccc1b8a14e66f451be1c06c2831c70be10a55d9fb78a9d3808e773c9caf04c354590907"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xd35c}]}}}, {0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x3c}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfe9}]}}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, {0x154c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000004}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x37c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "a9170c852ade30b9bcb1f0df160f576d48c2c6f4754b20af0f4117719af1b2513e8c74a16c59a7536d0fcff3e79a84b60d9d5b78561707a18b515bd970d51fb1"}, @NFTA_DATA_VALUE={0xe8, 0x1, "d9448ba1b6f3050848ea54c16f25ba8dc07e8d2e4ea977a109733e95c2132a62f7782709db1eb6f43f2a83d642f08873274abe89d1f42e67aefb664bd55d071c3d9323c9ba40db34b4f097c6413196547d79121593b206a530ab55308c6894b8634b5ed26ac35e9f19e7e370ebe855d1ecd748fe3f2ed505cff8efd3fd03a5a785e69f24cc19ceade709840512509b275961d7cf0f001a72c8aaec3fb1c1e0c4bbc7e512f556895bc3cedebaa7db0aead64a3d731a20b7c433308372eb07e8cff734a8d945e84148e9fcf10faadfe635a6530e03cc14a4ea4360dbc3ebb6534b6a7f2fcc"}, @NFTA_DATA_VALUE={0xd5, 0x1, "8e39ab655c74f8f8a320d0715151bcc477740c6eac2a7545cfeb6dd4df88ab663de5e1cbc5ce86c0c0e6b0e11645a756395b91fea9ab67d0dcea93347293a606db13e591a69861c02d3930097b3b39d2a4f0d880fcb155a52408826a773022e8ae688db2f121e29fc299e716e2610ec4a237668e3232ee4cc803828ee25719bc33483278557a232cbb033e0c5191349e60164ccb69efb8932b1239e7f66eb5703c4ca4be245dd14baa86e882e54d98ff4ff508a00a9a382a2d9f57c3700aeafa4e9519a9b06547760cfd4e67c5e84cc522"}, @NFTA_DATA_VALUE={0x62, 0x1, "d295e9ce74f683fb3b03e4c90af0ea2992db442fdcfda1411750a8c18f213dec8c2f7dc9e451a3220f223afaa8bd1024af03eecd9e1f8d39d5dbe2dfca32ddc35529bd6aa05ad8ae6a759020371befa257d4053c61b9f5c8547d4a6b0ba9"}, @NFTA_DATA_VALUE={0xc9, 0x1, "c6f06db2f019004f064aca5a7711f45c2e2524e5e59250b551eb4debcfd0fd2d18a4fff2476fff682e980353e0f680e2f24097e2e1e5b5c4d797cb666e41788dec1f2a4c6385125c201cf3b17c7b17acfa2febcb5751f55b5ddb4cf34a369621f40091bcb875a306d53e9039761dfd06684fa46a1cbc11a9acdb62f0f41564c7c4b6993e2fc690279ef588144a3fc1515d69a1b53f2bdbfdad6113b1a54876c0ad07ded02f350ee5d9ee4be4a6d0d517a479c57cea0f01e86eb276d1c8b7a75dfd8ae5abc6"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1170, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "404f4995463ec569b134cd8db404b6a352b4498a44278408d49ff6731e3eb512c5e3458ff0a16e7f6960c469bc7c6e15590d4923cc6455c17aebfd20c7c7808aa61d8b2655f159a331c68185be171006cc"}, @NFTA_DATA_VALUE={0x4f, 0x1, "1f8ed5f2a76b378701f53d0d218467a09d30396360a84d24028693355e7f9f677e98718d188549c49bcdbd01b28efc7ba926c55ee0662d1f59d1e4d4dd4ec14f33b5825de8875d54532885"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa6, 0x1, "7219cc1944cefc193e0ca63acf971cb4dba28a6b07ee512b6e2014f206d2ad0af3aa6b4e7a02cde97d47666db840fe67b973850cd2dbbead4aba8c891d794428dfd13e5c4722aaa28839218e37bb9b502da5450cfe5bad99b83cfacf59e636c743ffc030fd9f712d66e5a1cc9684b9dc6f0523c56ce473b6efb7fcdffc4c4264e84898f7572223db8651608ac61dde056f3e3e5f21528772a2097caeb944b1c3c48e"}, @NFTA_DATA_VALUE={0x17, 0x1, "d3c12b5c83afb3bc50bc4b344e182567dac72f"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5d14818e}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "5f7dccc859937af419361d57899c34e48484d3116898b2c0b48755026b4572e6f281affa8a"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "2cb8314bb0f7321a64e9bc9f5e0e75a668d112cecb0bd39a5f23061643981417996103dfa6cdaa3db4d3644dc7f1220628ed72cb8d508cc1b381309631ba50e820c3eaa5144163be84393fff9a436f048c61526c1789df2f6ffee1625962a3369160615749b54532bc1565a5c03342d75bf81880b13019d03ebcebe05b41cbff90e0191a42fbec4dc3bc1c19ffff0c95605a846bafe6807da43d9fe29d3737971d5def987bb304730a94a8d65f710f68b6d1bb80ee9f6846a1ddfc69bed34931f7ee08cb34c3ad7313769622c77324abd2c3ccf3842d9008105f7864c66a67df5d3407b820646d90190d45b1fc7b408f"}, @NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}, @NFTA_MATCH_INFO={0x9, 0x3, "37566598c9"}, @NFTA_MATCH_NAME={0xc, 0x1, 'iprange\x00'}]}}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd87c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "0a687cc4fa7065cfe7fe22b529dcef5d11ce5d1a36223fd44eaa08c31ca33690e86dfe75c8d2df5cb22a2f4aebf636aa6fb852378f9dcfc9d4d73d3cc99563d136ea42bb7565677e0f054157691fd4e7553ee40417163e3861a0f0e771a73bbde2b5004469af1bc08577fb7775cb677b51c1"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xe7, 0x6, 0x1, 0x0, "27ad545f7aebde6c8a9054164b8cd4672c200262930794ed9c4d36187dc717c6f5529a08d5a106c321a27c2dadda61078e75c703db60d13b5aeb706f151dbc4119ca281cde9e861fe5763bc83fd3973f0b2b448c08fc1fc350897bfe1371b9d69ca1dd25285e2c2b412c5709297f13a4b2269b75f8d97dccd9f1c0cabb474d13a0b5f00d0a58aa6163329b46b1150111f7973a1c3502cea709f787b970b71bcd1558fb58c2bd35ab0649cf54830ba2b772689e775d5037a82159a60b9fba14c9188197d00f26bb59ec590bdc0f7050e1b7b720965a575f32195f34f9976757b6158273"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfff}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3870}, 0x1, 0x0, 0x0, 0x81}, 0x180) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) 842.217743ms ago: executing program 9 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000000)={0x7f, {{0x29, 0x0, 0x2000000, @mcast2, 0x5}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FICLONE(r0, 0x40049409, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x7f, &(0x7f0000000040)=""/127, 0x0, 0x48}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 799.870596ms ago: executing program 7 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0x6, 0xf, 0x0, 0x3d559da2}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf019, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x801070cf, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000002a0000000800580000000000eb98c9976e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 683.774226ms ago: executing program 7 (id=875): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000001a40)={0x0, 0xea60}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000400)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "cdc966"}}}}}, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x478, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x13f, 0x20000000, 0x3, 0x7fff, 0x5, {0x8, 0x0, 0x388, 0x100, 0xf, 0xffffffff}, {0x80, 0x2, 0xb, 0x3, 0x200, 0x3}, 0x1, 0xe, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x842, 0x10000, 0x6, 0xfffffffe, 0x40000000, 0x6, 0x8, 0x9, 0x7, 0x8, 0xa648, 0x9, 0x9, 0xf, 0x400a, 0x3, 0x101, 0x2, 0x4, 0x2, 0x0, 0x27, 0x6, 0x9, 0x7, 0x9, 0x3, 0x0, 0xc97f, 0x2, 0x4, 0xb7, 0x10001, 0x101, 0x0, 0x1, 0x0, 0x9, 0x81, 0xffffffff, 0x7, 0x3, 0x4, 0x6c2525df, 0x0, 0x2, 0x3d582f91, 0x65a5, 0x49b, 0x0, 0xffff, 0xa, 0x1fdb, 0x7, 0x8, 0x4, 0x8, 0x0, 0x5, 0x32b, 0x4, 0x5, 0xfffffffb, 0x5, 0x0, 0x8, 0xef7f, 0x9, 0xd4, 0x5, 0xfffff001, 0xf, 0x7, 0x40, 0xcd0, 0x80000000, 0x3, 0x7, 0x3834be7b, 0x3, 0xfff, 0x8, 0x3, 0x81, 0x7, 0xd0e7, 0x0, 0x9, 0xa, 0x8, 0x4, 0x7, 0xd, 0x75bd, 0x101, 0x7b5b, 0x200, 0x400, 0x0, 0x0, 0x6, 0x248, 0x1, 0xe9fd, 0x821, 0x4, 0xfffffff2, 0x1, 0xffff, 0x7, 0x7, 0x0, 0xc, 0xf, 0x0, 0xe364, 0x3ff, 0x7fff, 0x2, 0xe2, 0x9, 0xd1d, 0x10, 0x9b9, 0x2, 0x40, 0x4d8e, 0x4, 0x0, 0x6, 0x4, 0x4d3a6317, 0x5, 0x1, 0x1, 0x2, 0x3, 0x7, 0x0, 0xd13a, 0x100, 0x7, 0x0, 0x1, 0x2525, 0x0, 0x9, 0x1ff, 0x5, 0x9, 0x2, 0x3, 0x800, 0x1, 0x441, 0xfffffffe, 0xa, 0xe8, 0x7, 0x1, 0x5, 0xfffffffd, 0x5, 0xa15, 0xfffffffa, 0x1, 0x101, 0xab, 0x3, 0x1, 0x200, 0xfffffffc, 0x7, 0x5, 0x2, 0x81, 0x5, 0xe9b, 0x0, 0x80000000, 0x0, 0x0, 0x5, 0x6, 0x5, 0x7, 0x3, 0x3, 0x4, 0xfff, 0x4, 0xffff, 0x28, 0x6741, 0x8001, 0x80000001, 0x1, 0x0, 0x4, 0x8, 0xb0, 0x3, 0x2, 0x3, 0x5, 0x8, 0x7, 0x6, 0x7, 0x27, 0x0, 0x6, 0x2, 0xff, 0x1, 0x7f, 0xfffffff7, 0x9, 0x2, 0x6, 0x3, 0x0, 0x7fff, 0x6, 0x1, 0x1, 0x8b, 0x0, 0x63e729c7, 0x9, 0x7, 0x101, 0xc0a, 0xfe, 0x80000000, 0x8, 0x6, 0x40, 0x6af6a214, 0xb, 0xf, 0x2, 0x5, 0x2, 0x3ff, 0x1, 0x2, 0x5, 0x5, 0x67, 0xfa3, 0x7a, 0x4, 0x10, 0x3, 0x6]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040028bd7000fddbdf250100000008000a000000000014001f00fc0200ebffffff000000000000000001050004009500000008000b00010000000600020001000400"], 0x48}, 0x1, 0x0, 0x0, 0x22044810}, 0x810) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003e6107010000000005000000017c00000400fc800c000180060006003b00edd510000280040014000800b7005334c16977649314", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r10 = fanotify_init(0x0, 0x0) fanotify_mark(r10, 0x1, 0x800002b, r0, 0x0) r11 = syz_io_uring_setup(0x7893, &(0x7f0000000540)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r11, 0x1, 0x1, 0x1, 0x0, 0x0) 682.081963ms ago: executing program 9 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x3800080, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x302, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/215, 0xd7}], 0x2, 0x7, 0x57e1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x82) fanotify_mark(r3, 0x80, 0x1010, r3, &(0x7f0000000200)='./file0\x00') fallocate(r3, 0x0, 0xb237, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0}, &(0x7f00000023c0)=0xc) setxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000002400)=@v3={0x3000000, [{0x8, 0x5}, {0x8, 0x30}], r5}, 0x18, 0x2) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xcb0a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="840000001000a54e27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000005c00128009000100766c616e000000004c00028006000100040000000c0002001c00000010000000340003800c00010001800000ffff00000c0001000600000001f0ffff0c00010001000000040000000c000100010001000700000008000500", @ANYRES32=r1], 0x84}, 0x1, 0x0, 0x0, 0x6c051}, 0x8000) 586.239128ms ago: executing program 9 (id=877): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000580)={0x6, 0x0, 0xfffffffffffffffe}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10101) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) fchmodat(0xffffffffffffff9c, 0x0, 0x2) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000580)={0x6, 0x0, 0xfffffffffffffffe}) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10101) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) 585.842078ms ago: executing program 6 (id=878): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB="0f00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000000000010090098"], 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000400000000000000000a20000000000a03000000000000000000070000000900010073797a300000000098000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5400128014000180090001006c617374000000000400028028000180090001006c617374000000001800028008000140000000000c0002400000000000000007140001800c000100636f756e746572000400028008000340000001"], 0xe0}}, 0x20050800) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x149a82, 0x16e) write$cgroup_int(r11, &(0x7f00000001c0)=0x100, 0x12) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x2000) (rerun: 64) 579.795994ms ago: executing program 8 (id=879): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 519.987815ms ago: executing program 7 (id=880): syz_open_dev$usbmon(0x0, 0x0, 0x0) (async) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000100)={0x10101, 0x2, 0x1, 0x4240, 0x0, 0x2}, 0x30, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x5, 0x0, 0x4) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) (async) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, r6}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, r6}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x48, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 503.894189ms ago: executing program 9 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000550001002cbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="a50620bb85d062b3ea594d9a14d0216a079793c6b2c4baba9d9fa0345e965e08bae993d21ccd1a13342dd5d1c19683321721d157b5b56a150ee63201683e4e5893aded074bea43c65b9f", @ANYRES32, @ANYBLOB="840103000000000000000000000000000000000108"], 0xf8}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c000100626974776973650024"], 0x108}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="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", @ANYBLOB="7de2514f593227286570311cbba5f767ec37bed59925ed8b5502d4743700059c38e97802f36542c90c672a9340d8c6c557a6881159315eb8cba2ee8188ff55172270eb753bc4f1563bb010bfe1893d44de095496e45ff5311bd577fa434a73f4ea782f2674299ea5e715ead8652ddf3ca0d6250a639056e1c562e84de870bdebf88e16b0aa702ee035a66dec92b51f6faab78576071f573b44440cfb66d06e1a1aac8d52062c078cb1611ced6edc35f18d0dddf77436a82fb0605c1a7d8e", @ANYRES32=r4], 0x270}, 0x1, 0x0, 0x0, 0x4c001}, 0x4) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0xb, @sliced={0x6, [0xfff9, 0x6, 0x7, 0x0, 0x7, 0x0, 0x62, 0x0, 0x80, 0x6, 0x5, 0x200, 0xd, 0xfffd, 0x9, 0x9, 0xdc, 0x8, 0x6, 0xf, 0x8000, 0x8, 0x85, 0x1, 0x3, 0x7, 0x4, 0x80, 0x1, 0x5, 0x8b1f, 0x5, 0x9, 0x1a, 0xc, 0xa, 0x4, 0x6, 0x3a0, 0x1, 0x1, 0x3, 0x4, 0x2, 0x80, 0x5, 0x100, 0x1], 0x1}}) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310400000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 502.979949ms ago: executing program 8 (id=882): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'wg0\x00', 0x1000}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001040102000000000000000100"/36], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$inet(r2, 0x0, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x102) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) msgget$private(0x0, 0x5a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000001940)=[{{&(0x7f0000000340), 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, &(0x7f0000000600)=""/217, 0xd9}, 0x2}, {{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/153, 0x99}, {&(0x7f0000000a80)=""/181, 0xb5}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/27, 0x1b}], 0x9, &(0x7f0000000dc0)=""/225, 0xe1}, 0x75b}, {{&(0x7f0000000ec0)=@rc, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f40)=""/29, 0x1d}, {&(0x7f0000000f80)=""/132, 0x84}, {&(0x7f0000001040)=""/63, 0x3f}, {&(0x7f0000001080)=""/64, 0x40}, {&(0x7f00000010c0)=""/38, 0x26}, {&(0x7f0000001100)=""/59, 0x3b}, {&(0x7f0000001a80)=""/152, 0x98}, {&(0x7f0000001200)=""/48, 0x30}], 0x8, &(0x7f00000012c0)=""/251, 0xfb}, 0x6}, {{&(0x7f00000013c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/207, 0xcf}], 0x1, &(0x7f0000001580)=""/111, 0x6f}, 0x9}, {{&(0x7f0000001600)=@caif=@dbg, 0x80, &(0x7f0000001840)=[{&(0x7f0000001680)=""/189, 0xbd}, {&(0x7f0000001740)=""/211, 0xd3}], 0x2, &(0x7f0000001880)=""/135, 0x87}, 0x5}], 0x5, 0x2, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="0c00a54697549f97786872b04fd46a159900010000b2a9c78a4fb3c34500040400000a0006000802a08f00010000"], 0x3c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 502.756165ms ago: executing program 6 (id=883): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006c000000bc8900000000000035090100000000009500000000000000b7020000001ac81b7baaf8ff00000000d5090000000000007baaf0ff00000000bf8300000000000007080000fffdffffbca400000000000007040000f0ffffff240200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000080000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4f4, &(0x7f0000000ec0)="$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") ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0060001}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) execve(&(0x7f0000000000)='./file3\x00', 0x0, 0x0) 311.936312ms ago: executing program 7 (id=884): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) pwrite64(r0, &(0x7f0000000800)="e8aed317", 0x4, 0xffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800000a00000000000000fbdbdf2505000500000000000a004e20000000070000000000007fffffffffff640101010000000000000000030006002b00010400004e3607eec019"], 0x50}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800000a00000000000000fbdbdf2505000500000000000a004e20000000070000000000007fffffffffff640101010000000000000000030006002b00010400004e3607eec019"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x185) symlinkat(&(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') 292.504251ms ago: executing program 1 (id=885): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbd2, &(0x7f0000002000)="$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") r3 = inotify_init1(0x800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x33, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r5 = open(&(0x7f0000000500)='./file0\x00', 0xc2040, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000600000000000000ff00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000085200040050000008d7f18df7151e605693d20000003c6a67aca3c7ef00400000085000000560000000da00c00f0ffffffbf91000000000000b702000000e100008500000000000000b7000000000000009a153fa7a8031f8bf8b68c9d55136c401c9e5250f206b038cd25ff8d6acb02fa0b91d895a4109f1cd357fe59ddd3ac32ac170f0b18265463082b0840a5089c6b005e7ff2991cc45115408c276f4def2e33a48b6ed2362c82f1afb8b5fd5b4319af63bab503e9e2ade2eccf02b49e2f91718399"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x0, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r3, 0x5, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0x7, 0x6}, {0x1, 0x1, 0xa, 0xc}, {0x5, 0x5, 0x3, 0x6}, {0x0, 0x3, 0xb}, {0x3, 0x5, 0xa, 0x5}], 0x10, 0xfffffff5}, 0x94) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x9, 0x1000, 0x32314d56, 0x1, 0xfffffffe, 0x0, 0x9, 0x40, 0x1, 0x3, 0x0, 0x5}}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r5, r2, 0x34, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) getpeername$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) bind$packet(r5, &(0x7f0000000bc0)={0x11, 0x7, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000a00)=""/228, &(0x7f0000000b00)=0xe4) (async) r9 = getuid() mount$overlay(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x2048001, &(0x7f0000000d40)={[{@xino_auto}, {@metacopy_off}, {@volatile}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@euid_eq={'euid', 0x3d, r9}}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@seclabel}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nodiscard'}}, {@smackfsdef={'smackfsdef', 0x3d, '^}-'}}]}) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000526) (async) removexattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000500000000000000800900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) (async) r11 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, [0x2, 0x4, 0x3, 0xc, 0x100000001, 0x8, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x80000, 0x8, 0x5, 0x3, 0x1]}, &(0x7f0000000900)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000940)={r15, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x9}}, 0xfffffff9, 0xff, 0x8, 0x9, 0x65, 0x1, 0x4}, 0x9c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x52, 0x0, @fd=r0, 0x0, 0x0, 0x4, {0x4020}, 0x1}) (async) io_uring_enter(r11, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 212.107398ms ago: executing program 9 (id=886): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ba6dbc8500a52b00"/28], 0x50) 198.182772ms ago: executing program 7 (id=887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x13, 0x0, 0xfffffffa, 0x871e, 0x5, 0x8, 0x9, 0x4, 0xffffff1b, 0x1, 0x8, 0x8, 0x4, 0xfffffff9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x7, 0x2, 0x9, 0xc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000280)={{@align=0x3, {0x2, 0x0, 0x9, 0x9}}, {{[0xfffffff7, 0x1, 0x3, 0x4]}, 0x0, 0x1, 0xfffffff9, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0x8, 0x7]}, {0x1, 0x800, 0xffff, 0x4}}, 0x9b3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x44f6, 0x8]}, {0xa, 0x3, 0xffc, 0x9}}}, {{@align=0x2, {0x5, 0x93b, 0x100000, 0x6}}, 0x10, 0x0, '-\x00'}]}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x20) write(r6, &(0x7f0000000400)='\n', 0x1) 191.882175ms ago: executing program 6 (id=888): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1b, &(0x7f0000000040)={0x0, 0x2, 0x4220, 0xfffffff9, 0x34e}, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc6e6, 0x800, 0x1, 0x40000082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x2d0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x2bc, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x3, 0x5, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x168, 0x0, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x100}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa7, 0x5, 0x20000000, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa9, 0x4, 0x7, 0x5, 0x12a7}}]}, {0xcc, 0x6, "2661f20bd6500c541f996dc21d4d09370c6967cfe3b49510c8b42cefffdd952b19d8f7c8c0daec39462d39ddbf2309d7f756aed8a76b8cc10dff91d69aaeef8dc6146cb1bc4a8f5611f38fccfab364253c37f8a1a5306a76d369c9c7d64fe47010ebc7f17c8f0f4f8cfc2d78b1242c55ddb616e418b1f49b810198027f8ada6b29efc9fc37c6144f7453331894a5c13f35b66683a149080d655649b50a39bf5cc935c3fe01723fb60c5aaedddd20b0d2ff06155838536fb188e975e4bf3611fa5b1906c3781c986f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xfc, 0x1b, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x7c, 0x6, "d15e3707242a37e0fcd62b294e391358589e662027af2073e598cb54c68b4725f4f3ac4f1861c25cb76cdb40807c33bc9c22713d1cbfcc2f9d171d5b9972412730367b6612266c5969dd3dba3f8de32c6305441951758c322aae791a8f26dd7c81f3bd73fdbdcb5ff84812a50f67b4b61e80d77fd5fc974f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2d0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @random="7b0eb40666a3"}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) ftruncate(r0, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x37, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x304, 0x0, 0x0, 0x1000, 0xd9, 0x0, 0x0, 0x14}}}, &(0x7f0000000300)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) semop(0x0, &(0x7f0000002480)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000d00)=""/4096) 80.775949ms ago: executing program 6 (id=889): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6a}, 0x1c, &(0x7f0000006840)=[{&(0x7f0000000c40)="8f", 0x1}], 0x1}}], 0x1, 0x200040c0) (async) sendmmsg$inet6(r2, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6a}, 0x1c, &(0x7f0000006840)=[{&(0x7f0000000c40)="8f", 0x1}], 0x1}}], 0x1, 0x200040c0) socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) socket$inet(0xa, 0x801, 0x84) (async) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r5, 0xfffffffd) listen(r4, 0x8) socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$inet(0xa, 0x801, 0x84) accept4(r4, 0x0, 0x0, 0x0) listen(r6, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r8, 0x7) r9 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40080d0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40080d0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 79.680222ms ago: executing program 1 (id=890): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x81, 0x2ae, &(0x7f0000000880)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000540)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,uni_xlate=0,uni_xlate=1,umask=0000 0R0000000000000007,fmask=00000000000000000000007,uni_xlate=0,shortname=win95,shortname=winnt,nonumtail=0,iocharset=cp437,shortname=lower,nonumtail=0,\x00'], 0x81, 0x2bc, &(0x7f0000000b40)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet(r4, &(0x7f00000002c0), &(0x7f00000000c0)=0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = socket(0x6, 0x5, 0x84) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x40003c, [0x8000, 0x101, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x24, 0x2, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x200, 0xe660, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x0, 0x5, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x84, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0xc, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xfffffffe, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xfffffffb, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0xa, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x8002, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xff, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x3ff, 0x5, 0xb1c, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000018d06d0b76b77dbbbbbbbbbbbb88a8c000f8eb2ba00e5a8ca9142cad0be88100000089061b1771be8dd3f38fd9214a99cf99cb45c415b69421510b72fe31218b7dd61f36dfb565d6eb1e"], 0x40) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000018c0)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a3154e5d188aee290fe4558ea147", 0x56}], 0x1}, 0x4011) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/207, 0xcf, 0x1, 0x0}, &(0x7f00000002c0)=0x40) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x168, 0x2c100, 0x12345}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, r9, 0x1, 0x60bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000000) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) kernel console output (not intermixed with test programs): 6194] loop1: lost filesystem error report for type 5 error -117 [ 53.611179][ T6194] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.289: mark_inode_dirty error [ 53.611191][ T6194] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.611270][ T6194] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 53.611305][ T6194] EXT4-fs (loop1): 1 orphan inode deleted [ 53.611799][ T6194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.613214][ T15] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.614785][ T15] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 53.617713][ T6194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.619058][ T6194] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.289: Invalid inode table block 1 in block_group 0 [ 53.619075][ T6194] loop1: lost filesystem error report for type 5 error -117 [ 53.620970][ T6194] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 53.620991][ T6194] loop1: lost filesystem error report for type 5 error -117 [ 53.621492][ T6194] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz.1.289: mark_inode_dirty error [ 53.621507][ T6194] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.017073][ T50] Bluetooth: hci4: command tx timeout [ 54.489772][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'. [ 54.542451][ T6235] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 54.546819][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.605205][ T6207] nvme nvme1: failed to connect socket: -512 [ 54.640207][ T6243] loop2: detected capacity change from 0 to 512 [ 54.911723][ T6260] loop1: detected capacity change from 0 to 1024 [ 55.058379][ T6260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.498219][ T6284] loop6: detected capacity change from 0 to 512 [ 55.507326][ T6284] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.305: corrupted xattr block 95: invalid header [ 55.507371][ T6284] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.508409][ T6284] EXT4-fs (loop6): Remounting filesystem read-only [ 55.508423][ T6284] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 55.508458][ T6284] EXT4-fs (loop6): 1 orphan inode deleted [ 55.509061][ T6284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.525836][ T6284] EXT4-fs (loop6): shut down requested (1) [ 55.679096][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.047814][ T6301] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 56.097970][ T6309] 9pnet_fd: Insufficient options for proto=fd [ 56.184084][ T50] Bluetooth: hci4: command tx timeout [ 56.217157][ T6315] usb usb8: usbfs: process 6315 (syz.1.316) did not claim interface 0 before use [ 56.250561][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.250598][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.252771][ T6315] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 56.265010][ T6315] EXT4-fs (loop1): 1 truncate cleaned up [ 56.266995][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.268252][ T6321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.285950][ T5203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.287847][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.322752][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.378972][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.321'. [ 56.389558][ T6339] ext4: Unknown parameter 'uid' [ 56.435622][ T6348] tipc: Started in network mode [ 56.435656][ T6348] tipc: Node identity 1000001, cluster identity 4711 [ 56.435665][ T6348] tipc: Node number set to 16777217 [ 56.436120][ T6348] tipc: Enabled bearer , priority 1 [ 56.496105][ T6348] xt_l2tp: v2 doesn't support IP mode [ 56.503023][ T6347] tipc: Resetting bearer [ 56.533015][ T6347] tipc: Disabling bearer [ 56.663163][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.331'. [ 56.724438][ T6381] tmpfs: Bad value for 'mpol' [ 56.815479][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 56.930285][ T6403] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 56.947045][ T4803] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.961154][ T4803] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.962061][ T6403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.011697][ T6403] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.341: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.023623][ T6403] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.341: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.105382][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.128055][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.133824][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.345'. [ 57.134627][ T5203] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 57.140242][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.140438][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.147959][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.148248][ T5203] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 57.148405][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.148516][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.149145][ T5203] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /45/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.149590][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.152163][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.154102][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.158427][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.159086][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.160444][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.161965][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.164441][ T5203] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.215158][ T6411] fido_id[6411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.498270][ T6433] input: syz1 as /devices/virtual/input/input6 [ 57.532091][ T6436] set_capacity_and_notify: 6 callbacks suppressed [ 57.533301][ T6436] loop1: detected capacity change from 0 to 512 [ 57.550234][ T6436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.628404][ T6446] loop2: detected capacity change from 0 to 2048 [ 57.651210][ T6446] loop2: p1 p2 p3 [ 57.651210][ T6446] p1: [ 57.652838][ T6446] loop2: p3 start 65280 is beyond EOD, truncated [ 57.779665][ T5203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.786553][ T15] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.838029][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 57.852954][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.869728][ T15] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.878085][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.879054][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.879358][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.879693][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.879905][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.969356][ T15] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.047268][ T15] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.059819][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.061293][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.061393][ T6453] bridge_slave_0: entered allmulticast mode [ 58.061951][ T6453] bridge_slave_0: entered promiscuous mode [ 58.062846][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.062937][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.062993][ T6453] bridge_slave_1: entered allmulticast mode [ 58.063508][ T6453] bridge_slave_1: entered promiscuous mode [ 58.073070][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.074152][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.081059][ T6453] team0: Port device team_slave_0 added [ 58.082542][ T6453] team0: Port device team_slave_1 added [ 58.089617][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.089649][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.089670][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.090298][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.090305][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.090326][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.103361][ T6453] hsr_slave_0: entered promiscuous mode [ 58.103693][ T6453] hsr_slave_1: entered promiscuous mode [ 58.103937][ T6453] debugfs: 'hsr0' already exists in 'hsr' [ 58.103946][ T6453] Cannot create hsr debugfs directory [ 58.157629][ T6453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 58.159949][ T6453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.160276][ T6453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 58.162293][ T6453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.163174][ T6453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 58.165694][ T6453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.166035][ T6453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 58.168209][ T6453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.206836][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.206911][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.207001][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.207037][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.214375][ T15] bridge_slave_1: left allmulticast mode [ 58.214408][ T15] bridge_slave_1: left promiscuous mode [ 58.216885][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.225470][ T15] bridge_slave_0: left allmulticast mode [ 58.225502][ T15] bridge_slave_0: left promiscuous mode [ 58.225583][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.233934][ T50] Bluetooth: hci4: command tx timeout [ 58.292119][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.318797][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.321298][ T15] bond0 (unregistering): Released all slaves [ 58.325653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.327090][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.340731][ T15] tipc: Left network mode [ 58.355454][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.367585][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.369665][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.369710][ T4858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.372869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.372915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.386981][ T6453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.387021][ T6453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.404197][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.443489][ T6492] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 58.500703][ T15] hsr_slave_0: left promiscuous mode [ 58.501851][ T15] hsr_slave_1: left promiscuous mode [ 58.502092][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.502105][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.503104][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.503115][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.510201][ T15] veth1_macvtap: left promiscuous mode [ 58.510244][ T15] veth0_macvtap: left promiscuous mode [ 58.510289][ T15] veth1_vlan: left promiscuous mode [ 58.510324][ T15] veth0_vlan: left promiscuous mode [ 58.551032][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.554126][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.557203][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.559385][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.642513][ T15] team0 (unregistering): Port device team_slave_1 removed [ 58.649416][ T15] team0 (unregistering): Port device team_slave_0 removed [ 58.707172][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 58.719453][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 58.787077][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.875426][ T6453] veth0_vlan: entered promiscuous mode [ 58.877739][ T6453] veth1_vlan: entered promiscuous mode [ 58.890620][ T6453] veth0_macvtap: entered promiscuous mode [ 58.891942][ T6453] veth1_macvtap: entered promiscuous mode [ 58.902765][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.906486][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.910204][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 58.911845][ T1314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911914][ T1314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911934][ T1314] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911951][ T1314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.939928][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.939962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.956397][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.956430][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.009795][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.356'. [ 59.071137][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 59.128063][ T6561] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 59.132867][ T6561] bond1 (unregistering): Released all slaves [ 59.246214][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.246428][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.248539][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 59.248548][ T30] audit: type=1400 audit(58.666:369): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowe[rdir" requested=x pid=6578 comm="syz.1.365" name="file1" dev="tmpfs" ino=483 [ 59.255308][ T30] audit: type=1400 audit(58.666:370): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowe[rdir" requested=w pid=6578 comm="syz.1.365" name="file1" dev="tmpfs" ino=483 [ 59.265977][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 59.333235][ T6594] loop6: detected capacity change from 0 to 512 [ 59.336726][ T6594] EXT4-fs (loop6): Test dummy encryption mode enabled [ 59.340951][ T6594] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.368: inode has both inline data and extents flags [ 59.340979][ T6594] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.341109][ T6594] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.368: couldn't read orphan inode 15 (err -117) [ 59.341124][ T6594] loop6: lost filesystem error report for type 5 error -117 [ 59.352991][ T6594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.358908][ T6594] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 59.377278][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.419543][ T6599] loop6: detected capacity change from 0 to 256 [ 59.426880][ T6599] syz.6.370: attempt to access beyond end of device [ 59.426880][ T6599] loop6: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 59.495612][ T6601] fuse: Bad value for 'fd' [ 59.521466][ T6607] loop6: detected capacity change from 0 to 128 [ 59.534588][ T6607] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.587853][ T5849] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.646611][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 59.646649][ T6623] netlink: 'syz.6.379': attribute type 10 has an invalid length. [ 59.646661][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.379'. [ 59.824170][ T6641] loop2: detected capacity change from 0 to 1024 [ 59.825157][ T6641] EXT4-fs: inline encryption not supported [ 59.830545][ T6641] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 59.830583][ T6641] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 59.830593][ T6641] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.384: Failed to acquire dquot type 0 [ 59.830606][ T6641] loop2: lost filesystem error report for type 5 error -117 [ 59.831864][ T6641] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 59.832352][ T6641] EXT4-fs (loop2): 1 truncate cleaned up [ 59.833377][ T6641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.864362][ T4720] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 74: comm syz-executor: path /86/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 59.864825][ T4720] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 59.864883][ T4720] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 59.864892][ T4720] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz-executor: Failed to acquire dquot type 0 [ 59.943633][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.388'. [ 59.947819][ T6654] veth0: entered promiscuous mode [ 59.950579][ T6654] veth0: left promiscuous mode [ 59.954832][ T4718] Bluetooth: hci2: command tx timeout [ 60.181148][ T6660] block device autoloading is deprecated and will be removed. [ 60.198824][ T6660] Soft offlining pfn 0x13d42b at process virtual address 0x20000000 [ 60.205799][ T6660] Soft offline: 0x13d42b: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 60.316563][ T5246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.396971][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.398416][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.398875][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.399214][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.399477][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.543407][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.543509][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.543608][ T6662] bridge_slave_0: entered allmulticast mode [ 60.544081][ T6662] bridge_slave_0: entered promiscuous mode [ 60.545117][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.545140][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.545199][ T6662] bridge_slave_1: entered allmulticast mode [ 60.545626][ T6662] bridge_slave_1: entered promiscuous mode [ 60.555967][ T6662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.557270][ T6662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.563716][ T6662] team0: Port device team_slave_0 added [ 60.564709][ T6662] team0: Port device team_slave_1 added [ 60.570671][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.570692][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.570707][ T6662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.571256][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.571262][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.571277][ T6662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.581243][ T6662] hsr_slave_0: entered promiscuous mode [ 60.581933][ T6662] hsr_slave_1: entered promiscuous mode [ 60.582129][ T6662] debugfs: 'hsr0' already exists in 'hsr' [ 60.582140][ T6662] Cannot create hsr debugfs directory [ 60.631802][ T6662] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 60.634460][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.634815][ T6662] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 60.638287][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.638626][ T6662] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 60.640899][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.641404][ T6662] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 60.643697][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.652077][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.652126][ T6662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.652201][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.652229][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.692138][ T6662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.698480][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.699951][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.719642][ T6662] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.729384][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.729434][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.732770][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.732819][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.829714][ T6702] netlink: 256 bytes leftover after parsing attributes in process `syz.6.396'. [ 60.890073][ T6707] loop6: detected capacity change from 0 to 512 [ 60.923266][ T6707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.924844][ T6707] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.929846][ T6662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.970815][ T6721] loop1: detected capacity change from 0 to 512 [ 60.977330][ T6721] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.977469][ T6721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.977893][ T6721] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 60.977915][ T6721] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 60.977935][ T6721] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.399: Failed to acquire dquot type 1 [ 60.977952][ T6721] loop1: lost filesystem error report for type 5 error -5 [ 60.979843][ T6721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.399: bg 0: block 40: padding at end of block bitmap is not set [ 60.979873][ T6721] loop1: lost filesystem error report for type 5 error -117 [ 60.980465][ T6721] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 60.980620][ T6721] loop1: lost filesystem error report for type 5 error -117 [ 60.980875][ T6721] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.399: data will be lost [ 60.981223][ T6721] EXT4-fs (loop1): 1 truncate cleaned up [ 60.986623][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 60.986654][ C1] EXT4-fs (loop1): initial error at time 60: ext4_acquire_dquot:7041 [ 60.986680][ C1] EXT4-fs (loop1): last error at time 60: ext4_mb_clear_bb:6679 [ 61.034198][ T6721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.047407][ T6721] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.399: iget: bad i_size value: 360287970189639690 [ 61.065874][ T6721] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 61.068285][ T9] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 61.083136][ T6662] veth0_vlan: entered promiscuous mode [ 61.086904][ T6662] veth1_vlan: entered promiscuous mode [ 61.093941][ T6662] veth0_macvtap: entered promiscuous mode [ 61.095103][ T6662] veth1_macvtap: entered promiscuous mode [ 61.098719][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.099902][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.108168][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108220][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108238][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108254][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.152264][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.152298][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.172829][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.172861][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.179583][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.273065][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.402'. [ 61.274917][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.402'. [ 61.281368][ T6737] bond1: entered allmulticast mode [ 61.286606][ T6736] bond2: entered allmulticast mode [ 61.368422][ T6750] loop6: detected capacity change from 0 to 512 [ 61.373327][ T6750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.383775][ T6750] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.404: invalid indirect mapped block 32768 (level 2) [ 61.383811][ T6750] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.385635][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 61.385646][ C1] EXT4-fs (loop6): initial error at time 60: ext4_free_branches:1023: inode 16 [ 61.385661][ C1] EXT4-fs (loop6): last error at time 60: ext4_free_branches:1023: inode 16 [ 61.393281][ T6750] EXT4-fs (loop6): 1 orphan inode deleted [ 61.393304][ T6750] EXT4-fs (loop6): 1 truncate cleaned up [ 61.393784][ T6750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.398226][ T6750] EXT4-fs (loop6): shut down requested (2) [ 61.421565][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.636518][ T4718] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 61.683836][ T6765] loop6: detected capacity change from 0 to 1024 [ 62.135414][ T4718] Bluetooth: hci2: command tx timeout [ 62.568635][ T4718] Bluetooth: hci3: command tx timeout [ 62.756453][ T6797] bond1: (slave bond_slave_1): Device is not our slave [ 62.758085][ T6797] bond1: option active_slave: invalid value (bond_slave_1) [ 62.762051][ T6797] bond1 (unregistering): Released all slaves [ 63.188309][ T6844] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 63.259975][ T6855] netlink: 'syz.6.430': attribute type 1 has an invalid length. [ 63.260927][ T6855] netlink: 96 bytes leftover after parsing attributes in process `syz.6.430'. [ 63.262761][ T6855] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 63.309919][ T6859] overlayfs: conflicting lowerdir path [ 63.370187][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.370416][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.370850][ T6863] bridge0: entered allmulticast mode [ 63.375608][ T6863] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 63.478454][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.440'. [ 63.480207][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.491265][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.504183][ T30] audit: type=1400 audit(62.715:371): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=6882 comm="syz.1.441" name="file1" dev="tmpfs" ino=585 [ 63.507827][ T30] audit: type=1400 audit(62.724:372): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=6882 comm="syz.1.441" name="file1" dev="tmpfs" ino=585 [ 63.611048][ T6890] nbd1: detected capacity change from 0 to 8 [ 63.615156][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.7.443'. [ 63.638907][ T6911] block nbd1: shutting down sockets [ 63.645138][ C1] blk_print_req_error: 30 callbacks suppressed [ 63.645180][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.645223][ C1] buffer_io_error: 30 callbacks suppressed [ 63.645230][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.645970][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.645990][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.646546][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.646568][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.646741][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.646758][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.646824][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.646839][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.646896][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.646907][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.646954][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.646964][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.647004][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.647014][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.647029][ T4703] ldm_validate_partition_table(): Disk read failed. [ 63.647059][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.647069][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.647108][ T4394] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.647118][ T4394] Buffer I/O error on dev nbd1, logical block 0, async page read [ 63.647199][ T4703] Dev nbd1: unable to read RDB block 0 [ 63.647305][ T4703] nbd1: unable to read partition table [ 63.647376][ T4703] nbd1: partition table beyond EOD, truncated [ 63.683927][ T4703] ldm_validate_partition_table(): Disk read failed. [ 63.684111][ T4703] Dev nbd1: unable to read RDB block 0 [ 63.684219][ T4703] nbd1: unable to read partition table [ 63.684272][ T4703] nbd1: partition table beyond EOD, truncated [ 63.726189][ T6876] cgroup: fork rejected by pids controller in /syz6 [ 63.806667][ T6925] binder: 6917:6925 got transaction to invalid handle, 3 [ 63.806706][ T6925] binder: 6917:6925 cannot find target node [ 63.808791][ T6925] binder: 6917:6925 transaction call to 0:0 failed 17/29201/-22, code 0 size 96-24 line 3252 [ 63.841338][ T4311] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.992212][ T6937] netlink: 'syz.8.446': attribute type 10 has an invalid length. [ 64.042586][ T6950] Cannot find add_set index 0 as target [ 64.063741][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.8.449'. [ 64.130705][ T6968] loop8: detected capacity change from 0 to 512 [ 64.145021][ T6968] EXT4-fs (loop8): Test dummy encryption mode enabled [ 64.152752][ T6968] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.452: inode has both inline data and extents flags [ 64.152805][ T6968] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.155320][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 64.155365][ C1] EXT4-fs (loop8): initial error at time 63: ext4_orphan_get:1399: inode 15 [ 64.155406][ C1] EXT4-fs (loop8): last error at time 63: ext4_orphan_get:1399: inode 15 [ 64.162149][ T6968] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.452: couldn't read orphan inode 15 (err -117) [ 64.162181][ T6968] loop8: lost filesystem error report for type 5 error -117 [ 64.170681][ T6968] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 64.349240][ T4718] Bluetooth: hci2: command tx timeout [ 64.776670][ T4718] Bluetooth: hci3: command tx timeout [ 64.945900][ T6999] overlayfs: missing 'lowerdir' [ 65.267549][ T7011] __nla_validate_parse: 2 callbacks suppressed [ 65.269257][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 65.360845][ T7023] loop8: detected capacity change from 0 to 256 [ 65.367533][ T7030] netlink: 44 bytes leftover after parsing attributes in process `syz.7.461'. [ 65.378906][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.378956][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.379588][ T1039] cfg80211: failed to load regulatory.db [ 65.381388][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.381798][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.400454][ T7030] netlink: 44 bytes leftover after parsing attributes in process `syz.7.461'. [ 65.449474][ T4718] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 65.449508][ T4718] Bluetooth: Wrong link type (-22) [ 65.450262][ T4718] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 65.450277][ T4718] Bluetooth: Wrong link type (-22) [ 65.530886][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.464'. [ 65.585593][ T7067] loop6: detected capacity change from 0 to 512 [ 65.604565][ T7070] loop1: detected capacity change from 0 to 1024 [ 65.607646][ T7070] EXT4-fs: Ignoring removed bh option [ 65.691462][ T7083] netlink: 128 bytes leftover after parsing attributes in process `syz.6.468'. [ 65.833094][ T7099] can0: slcan on ptm0. [ 65.908634][ T7108] xt_connbytes: Forcing CT accounting to be enabled [ 66.393503][ T7119] loop7: detected capacity change from 0 to 512 [ 66.395615][ T7119] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 66.401143][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.471'. [ 66.579417][ T4718] Bluetooth: hci2: command tx timeout [ 66.800658][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.6.486'. [ 66.800746][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.6.486'. [ 66.806268][ T7098] can0 (unregistered): slcan off ptm0. [ 67.063788][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 67.065546][ T15] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.129156][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.130292][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.131068][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.131713][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.132190][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.175929][ T7214] fuse: Unknown parameter '•M£pR„U._7eià„'$›ÊPÁÀ¦§è·ð°ÂP“Y!0x0000000000000004' [ 67.178409][ T15] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.189465][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.191001][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.192442][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.194678][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.194963][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.213300][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 67.268728][ T15] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.335768][ T7242] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 7242 comm: syz.1.499) [ 67.337043][ T7245] loop6: detected capacity change from 0 to 256 [ 67.342800][ T7247] usb usb2: check_ctrlrecip: process 7247 (syz.1.499) requesting ep 01 but needs 81 [ 67.342851][ T7247] usb usb2: usbfs: process 7247 (syz.1.499) did not claim interface 0 before use [ 67.342903][ T7242] usb usb2: check_ctrlrecip: process 7242 (syz.1.499) requesting ep 01 but needs 81 [ 67.342912][ T7242] usb usb2: usbfs: process 7242 (syz.1.499) did not claim interface 0 before use [ 67.375207][ T15] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.670035][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.672707][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.674246][ T7207] bridge_slave_0: entered allmulticast mode [ 67.677048][ T7207] bridge_slave_0: entered promiscuous mode [ 67.699986][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.702376][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.702491][ T7207] bridge_slave_1: entered allmulticast mode [ 67.706866][ T7207] bridge_slave_1: entered promiscuous mode [ 67.714766][ T15] bridge_slave_1: left allmulticast mode [ 67.714796][ T15] bridge_slave_1: left promiscuous mode [ 67.714884][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.719652][ T15] bridge_slave_0: left allmulticast mode [ 67.723601][ T15] bridge_slave_0: left promiscuous mode [ 67.723688][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.854970][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.855214][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.864488][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.868225][ T7297] loop1: detected capacity change from 0 to 512 [ 67.869866][ T7297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.889788][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.897828][ T7297] EXT4-fs mount: 8 callbacks suppressed [ 67.897853][ T7297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.905859][ T15] bond0 (unregistering): Released all slaves [ 67.920776][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.921179][ T7297] tipc: Enabling of bearer rejected, media not registered [ 67.925194][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.930357][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.944641][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.944733][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.944841][ T7216] bridge_slave_0: entered allmulticast mode [ 67.945328][ T7216] bridge_slave_0: entered promiscuous mode [ 67.946438][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.946460][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.946522][ T7216] bridge_slave_1: entered allmulticast mode [ 67.947567][ T7216] bridge_slave_1: entered promiscuous mode [ 67.969777][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.970895][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.980511][ T7207] team0: Port device team_slave_0 added [ 67.981426][ T7207] team0: Port device team_slave_1 added [ 67.987365][ T7216] team0: Port device team_slave_0 added [ 68.021984][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.023567][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.028890][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.032504][ T7216] team0: Port device team_slave_1 added [ 68.041294][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.042901][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.048214][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.111703][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 68.112879][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.112892][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.112909][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.113560][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.113567][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.113580][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.162425][ T7207] hsr_slave_0: entered promiscuous mode [ 68.165558][ T7207] hsr_slave_1: entered promiscuous mode [ 68.165827][ T7207] debugfs: 'hsr0' already exists in 'hsr' [ 68.165838][ T7207] Cannot create hsr debugfs directory [ 68.175642][ T15] hsr_slave_0: left promiscuous mode [ 68.177953][ T15] hsr_slave_1: left promiscuous mode [ 68.178273][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.178287][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.179530][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.179543][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.187569][ T15] veth1_macvtap: left promiscuous mode [ 68.187612][ T15] veth0_macvtap: left promiscuous mode [ 68.187661][ T15] veth1_vlan: left promiscuous mode [ 68.187694][ T15] veth0_vlan: left promiscuous mode [ 68.306842][ T15] team0 (unregistering): Port device team_slave_1 removed [ 68.311095][ T15] team0 (unregistering): Port device team_slave_0 removed [ 68.397771][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.401291][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.403552][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.404894][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 68.406324][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.407879][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.420190][ T7335] syzkaller0: entered promiscuous mode [ 68.420229][ T7335] syzkaller0: entered allmulticast mode [ 68.432105][ T7216] hsr_slave_0: entered promiscuous mode [ 68.433150][ T7216] hsr_slave_1: entered promiscuous mode [ 68.433406][ T7216] debugfs: 'hsr0' already exists in 'hsr' [ 68.433417][ T7216] Cannot create hsr debugfs directory [ 68.498000][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.587515][ T7355] loop6: detected capacity change from 0 to 512 [ 68.607423][ T7355] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 68.607526][ T7355] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -ENXIO [ 68.707682][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 68.737626][ T7365] loop1: detected capacity change from 0 to 2048 [ 68.754852][ T7216] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.787951][ T7365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.825849][ T7216] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.924244][ T7216] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.932620][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.979441][ T7381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.046672][ T7216] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.063229][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.064798][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.064881][ T7336] bridge_slave_0: entered allmulticast mode [ 69.068139][ T7336] bridge_slave_0: entered promiscuous mode [ 69.071211][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.073689][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.075272][ T7336] bridge_slave_1: entered allmulticast mode [ 69.076996][ T7336] bridge_slave_1: entered promiscuous mode [ 69.107516][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.110268][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.117024][ T7336] team0: Port device team_slave_0 added [ 69.117805][ T7336] team0: Port device team_slave_1 added [ 69.124329][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.124354][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.124370][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.124917][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.124924][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.124937][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.134574][ T7336] hsr_slave_0: entered promiscuous mode [ 69.134880][ T7336] hsr_slave_1: entered promiscuous mode [ 69.135074][ T7336] debugfs: 'hsr0' already exists in 'hsr' [ 69.135085][ T7336] Cannot create hsr debugfs directory [ 69.215193][ T15] bridge_slave_1: left allmulticast mode [ 69.215234][ T15] bridge_slave_1: left promiscuous mode [ 69.215359][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.228013][ T15] bridge_slave_0: left allmulticast mode [ 69.228046][ T15] bridge_slave_0: left promiscuous mode [ 69.228139][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.360627][ T50] Bluetooth: hci2: command tx timeout [ 69.405968][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.425457][ T50] Bluetooth: hci3: command tx timeout [ 69.428737][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.458828][ T15] bond0 (unregistering): Released all slaves [ 69.586712][ T7216] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.588250][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.588697][ T7216] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.590655][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.591055][ T7216] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.593233][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.593629][ T7216] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.595750][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.864648][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.905133][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.984730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.984780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.985356][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.985378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.032957][ T15] hsr_slave_0: left promiscuous mode [ 70.034242][ T15] hsr_slave_1: left promiscuous mode [ 70.034578][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.034591][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.044140][ T15] veth1_macvtap: left promiscuous mode [ 70.044188][ T15] veth0_macvtap: left promiscuous mode [ 70.044302][ T15] veth1_vlan: left promiscuous mode [ 70.044345][ T15] veth0_vlan: left promiscuous mode [ 70.202327][ T15] team0 (unregistering): Port device team_slave_1 removed [ 70.227659][ T15] team0 (unregistering): Port device team_slave_0 removed [ 70.409262][ T40] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 70.410981][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 70.411007][ T40] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.411007][ T40] [ 70.411479][ T40] EXT4-fs (loop6): Total free blocks count 0 [ 70.411510][ T40] EXT4-fs (loop6): Free/Dirty block details [ 70.411548][ T40] EXT4-fs (loop6): free_blocks=2415919504 [ 70.411574][ T40] EXT4-fs (loop6): dirty_blocks=16 [ 70.411586][ T40] EXT4-fs (loop6): Block reservation details [ 70.411599][ T40] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 70.412958][ T5849] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.414545][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.439249][ T7435] set_capacity_and_notify: 1 callbacks suppressed [ 70.439562][ T7435] loop6: detected capacity change from 0 to 256 [ 70.439987][ T7435] vfat: Bad value for 'tz' [ 70.470818][ T7216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.470858][ T7216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.509960][ T7438] loop6: detected capacity change from 0 to 512 [ 70.580687][ T7451] loop6: detected capacity change from 0 to 512 [ 70.646615][ T50] Bluetooth: hci5: command tx timeout [ 70.659774][ T7457] loop6: detected capacity change from 0 to 8192 [ 70.681647][ T7457] loop6: p1 p2 p3 p4[EZD] [ 70.681675][ T7457] loop6: partition table partially beyond EOD, truncated [ 70.681758][ T7457] loop6: p1 start 16384 is beyond EOD, truncated [ 70.681768][ T7457] loop6: p2 size 150994944 extends beyond EOD, truncated [ 70.686938][ T7457] loop6: p3 start 67108864 is beyond EOD, truncated [ 70.687431][ T7457] loop6: p4 size 33555584 extends beyond EOD, truncated [ 70.742569][ T7467] veth2: entered allmulticast mode [ 70.782954][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.937702][ T7336] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 70.963275][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.967128][ T7336] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 70.978285][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.984459][ T7336] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 71.010387][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.036126][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 71.042536][ T4914] udevd[4914]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 71.050564][ T7336] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 71.053268][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.071602][ T7497] loop1: detected capacity change from 0 to 512 [ 71.073018][ T7497] EXT4-fs: Invalid want_extra_isize 4 [ 71.086897][ T7207] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 71.091115][ T7207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.092257][ T7497] tc_dump_action: action bad kind [ 71.093484][ T7497] fuse: Unknown parameter 'd ÅÔõµKY9Ù‘æ¸pM¹ê»j˜\)ËÍÚêÖDfÁOš)¾ÿTš¯žOÁƒ¨¬a·ªIPà*¾¶ª©\(þI¨0x0000000000000009' [ 71.113271][ T7207] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 71.119217][ T7207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.120402][ T7207] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 71.132181][ T7207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.161878][ T7207] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 71.167605][ T7207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.182774][ T7216] veth0_vlan: entered promiscuous mode [ 71.200569][ T7216] veth1_vlan: entered promiscuous mode [ 71.261607][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.263634][ T7216] veth0_macvtap: entered promiscuous mode [ 71.267922][ T7216] veth1_macvtap: entered promiscuous mode [ 71.279733][ T7336] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.299886][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.299939][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.302007][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.302028][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.320304][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.321394][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.346597][ T7336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.349483][ T7336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.350269][ T7523] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 71.352284][ T7523] Injecting memory failure for pfn 0x111e46 at process virtual address 0x20276000 [ 71.364477][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.364535][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.364557][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.364574][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370940][ T7523] Memory failure: 0x111e46: keeping poisoned page in swap cache [ 71.371128][ T7523] Memory failure: 0x111e46: recovery action for clean swapcache page: Recovered [ 71.371172][ T7523] Injecting memory failure for pfn 0x11d9d0 at process virtual address 0x20277000 [ 71.371374][ T7523] Memory failure: 0x11d9d0: keeping poisoned page in swap cache [ 71.371404][ T7523] Memory failure: 0x11d9d0: recovery action for clean swapcache page: Recovered [ 71.416873][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.441585][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.448420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.448466][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.453327][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.453374][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.465534][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.465570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.486811][ T7207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.486853][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.518091][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.518126][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.591769][ T50] Bluetooth: hci2: command tx timeout [ 71.673853][ T50] Bluetooth: hci3: command tx timeout [ 71.880742][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.897371][ T7336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.921065][ T7571] __nla_validate_parse: 1 callbacks suppressed [ 71.921099][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.526'. [ 72.073058][ T7591] loop6: detected capacity change from 0 to 256 [ 72.079608][ T7591] vfat: Unknown parameter 'nnonumtail' [ 72.122677][ T7207] veth0_vlan: entered promiscuous mode [ 72.125088][ T7207] veth1_vlan: entered promiscuous mode [ 72.155880][ T7207] veth0_macvtap: entered promiscuous mode [ 72.171287][ T7207] veth1_macvtap: entered promiscuous mode [ 72.191161][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.192263][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.210969][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.211193][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.211265][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.211334][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.286653][ T7615] IPVS: Unknown mcast interface: /dri/card# [ 72.299794][ T7336] veth0_vlan: entered promiscuous mode [ 72.303042][ T7336] veth1_vlan: entered promiscuous mode [ 72.308816][ T7336] veth0_macvtap: entered promiscuous mode [ 72.316500][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.316532][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.343311][ T7336] veth1_macvtap: entered promiscuous mode [ 72.345564][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.345576][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.367651][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.368756][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.390568][ T3455] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.390699][ T3455] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.390732][ T3455] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.390748][ T3455] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.432357][ T7629] loop8: detected capacity change from 0 to 512 [ 72.434141][ T7629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.465812][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.465848][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.498900][ T7629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.507669][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.509794][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.616299][ T7652] random: crng reseeded on system resumption [ 72.678036][ T7657] netlink: 'syz.6.538': attribute type 6 has an invalid length. [ 72.678074][ T7657] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.678232][ T7657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.678240][ T7657] IPv6: NLM_F_CREATE should be set when creating new route [ 72.685995][ T7657] loop6: detected capacity change from 0 to 512 [ 72.697170][ T7657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.727332][ T7665] netlink: 'syz.6.538': attribute type 6 has an invalid length. [ 72.727394][ T7665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.757797][ T7670] loop9: detected capacity change from 0 to 1024 [ 72.762814][ T7670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.765211][ T7670] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.773170][ T7670] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 72.773378][ T7670] EXT4-fs (loop9): orphan cleanup on readonly fs [ 72.780526][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.782461][ T7670] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 3: comm syz.9.540: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.782496][ T7670] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.786252][ T7670] __quota_error: 4 callbacks suppressed [ 72.789132][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 72.789167][ C0] EXT4-fs (loop9): initial error at time 71: ext4_map_blocks:833: inode 3: block 3 [ 72.789190][ C0] EXT4-fs (loop9): last error at time 71: ext4_map_blocks:833: inode 3: block 3 [ 72.795104][ T7670] Quota error (device loop9): write_blk: dquota write failed [ 72.796647][ T7670] Quota error (device loop9): find_free_dqentry: Can't write quota data block 3 [ 72.798668][ T7670] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 72.800901][ T7670] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.540: Failed to acquire dquot type 0 [ 72.800929][ T7670] loop9: lost filesystem error report for type 5 error -117 [ 72.805283][ T7670] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 3: comm syz.9.540: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.805463][ T7670] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.811440][ T7670] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 72.812129][ T7670] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.540: Failed to acquire dquot type 0 [ 72.812147][ T7670] loop9: lost filesystem error report for type 5 error -117 [ 72.815704][ T7670] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.540: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.815724][ T7670] loop9: lost filesystem error report for type 5 error -117 [ 72.824190][ T7670] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 3: comm syz.9.540: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.824214][ T7670] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.828660][ T7670] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 72.829198][ T7670] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.540: Failed to acquire dquot type 0 [ 72.829221][ T7670] loop9: lost filesystem error report for type 5 error -117 [ 72.832215][ T7670] EXT4-fs (loop9): 1 orphan inode deleted [ 72.833797][ T7670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.840961][ T7670] Invalid option length (5532) for dns_resolver key [ 72.874069][ T7682] loop6: detected capacity change from 0 to 256 [ 72.914108][ T50] Bluetooth: hci5: command tx timeout [ 72.915702][ T7683] EXT4-fs error (device loop9): ext4_lookup:1785: inode #15: comm syz.9.540: iget: bad extended attribute block 6 [ 72.944482][ T7336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.959644][ T7689] sctp: [Deprecated]: syz.7.542 (pid 7689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.959644][ T7689] Use struct sctp_sack_info instead [ 73.073373][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.7.545'. [ 73.073411][ T7709] netlink: 'syz.7.545': attribute type 1 has an invalid length. [ 73.077219][ T30] audit: type=1326 audit(71.609:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7707 comm="syz.7.545" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb377a168 code=0x7ffc0000 [ 73.077264][ T30] audit: type=1326 audit(71.609:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7707 comm="syz.7.545" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb377a168 code=0x7ffc0000 [ 73.077308][ T30] audit: type=1326 audit(71.609:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7707 comm="syz.7.545" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb377a168 code=0x7ffc0000 [ 73.077335][ T30] audit: type=1326 audit(71.609:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7707 comm="syz.7.545" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb3779e60 code=0x7ffc0000 [ 73.077354][ T30] audit: type=1326 audit(71.609:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7707 comm="syz.7.545" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffb3779ecc code=0x7ffc0000 [ 73.120463][ T7709] xt_CT: No such helper "pptp" [ 73.250041][ T7730] overlayfs: failed to resolve './file0fowner=00000000000000000000': -2 [ 73.777762][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.557'. [ 73.849057][ T50] Bluetooth: hci2: command tx timeout [ 73.924895][ T50] Bluetooth: hci3: command tx timeout [ 74.084259][ T7776] syzkaller0: entered promiscuous mode [ 74.084289][ T7776] syzkaller0: entered allmulticast mode [ 74.085802][ T7776] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 74.176008][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.561'. [ 74.209823][ T7786] input: syz1 as /devices/virtual/input/input9 [ 74.292740][ T7790] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 74.335816][ T7207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.415454][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.569'. [ 74.415489][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.569'. [ 74.420628][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.422635][ T7807] bond1: (slave bond0): making interface the new active one [ 74.425723][ T7807] bond1: (slave bond0): Enslaving as an active interface with an up link [ 74.427346][ T7807] netlink: 'syz.8.569': attribute type 4 has an invalid length. [ 74.427371][ T7807] netlink: 152 bytes leftover after parsing attributes in process `syz.8.569'. [ 74.430057][ T7807] .`: renamed from bond0 (while UP) [ 74.551368][ T7804] loop1: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 74.580912][ T7804] loop1: p5 start 100669496 is beyond EOD, truncated [ 74.583386][ T7804] loop1: p6 size 218103808 extends beyond EOD, truncated [ 74.635420][ T7816] syz.1.572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.160151][ T50] Bluetooth: hci5: command tx timeout [ 75.546656][ T7829] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 75.548471][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.574'. [ 75.553917][ T7828] netlink: 'syz.7.574': attribute type 5 has an invalid length. [ 75.555368][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.574'. [ 75.579901][ T7828] geneve2: entered promiscuous mode [ 75.579945][ T7828] geneve2: entered allmulticast mode [ 75.602629][ T39] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 75.602681][ T39] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 75.602702][ T39] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 75.602719][ T39] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 75.606380][ T7833] netlink: 'syz.6.577': attribute type 2 has an invalid length. [ 75.606393][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 75.612045][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 75.631135][ T4914] udevd[4914]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 75.656632][ T7837] syzkaller1: entered promiscuous mode [ 75.656669][ T7837] syzkaller1: entered allmulticast mode [ 75.665078][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.691059][ T7835] syz.8.578: attempt to access beyond end of device [ 75.691059][ T7835] loop8: rw=2048, sector=0, nr_sectors = 2 limit=1 [ 75.691108][ T7835] SQUASHFS error: Failed to read block 0x0: -5 [ 75.691128][ T7835] unable to read squashfs_super_block [ 75.739277][ T5069] udevd[5069]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 75.745884][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 75.754017][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 75.756487][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 75.763895][ T7841] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.581: couldn't read orphan inode 26 (err -116) [ 75.763927][ T7841] loop8: lost filesystem error report for type 5 error -116 [ 75.766245][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 75.766257][ C0] EXT4-fs (loop8): initial error at time 74: ext4_orphan_get:1404 [ 75.766272][ C0] EXT4-fs (loop8): last error at time 74: ext4_orphan_get:1404 [ 75.769252][ T7841] EXT4-fs (loop8): Remounting filesystem read-only [ 75.774352][ T7841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.784723][ T7832] tc_dump_action: action bad kind [ 75.794401][ T5728] udevd[5728]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 75.796782][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 75.804101][ T7839] syzkaller0: entered promiscuous mode [ 75.804141][ T7839] syzkaller0: entered allmulticast mode [ 75.812164][ T7207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.093643][ T50] Bluetooth: hci2: command tx timeout [ 76.179243][ T50] Bluetooth: hci3: command tx timeout [ 76.243598][ T7862] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 76.243617][ T7862] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.243672][ T7863] vhci_hcd: xmit failed -107 [ 76.245268][ T7862] vhci_hcd vhci_hcd.0: Device attached [ 76.247014][ T3455] vhci_hcd vhci_hcd.0: stop threads [ 76.247024][ T3455] vhci_hcd vhci_hcd.0: release socket [ 76.247036][ T3455] vhci_hcd vhci_hcd.0: disconnect device [ 76.445377][ T7870] set_capacity_and_notify: 6 callbacks suppressed [ 76.445419][ T7870] loop7: detected capacity change from 0 to 512 [ 76.445741][ T7870] ext4: Unknown parameter 'euid' [ 77.405511][ T50] Bluetooth: hci5: command tx timeout [ 77.436401][ T7908] loop8: detected capacity change from 0 to 2048 [ 77.486748][ T7908] loop8: p3 < > p4 < > [ 77.486786][ T7908] loop8: partition table partially beyond EOD, truncated [ 77.486912][ T7908] loop8: p3 start 4284289 is beyond EOD, truncated [ 77.487160][ T7911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.487635][ T4812] team_slave_0: entered promiscuous mode [ 77.487659][ T4812] team_slave_1: entered promiscuous mode [ 77.524163][ T7917] __nla_validate_parse: 3 callbacks suppressed [ 77.524206][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 77.533505][ T7908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.564461][ T7920] netdevsim netdevsim9 netdevsim0: refused to change device tx_queue_len [ 77.621437][ T7935] netlink: 'syz.8.601': attribute type 1 has an invalid length. [ 77.630556][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 77.652074][ T7937] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.113551][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.9.609'. [ 78.131056][ T7977] loop1: detected capacity change from 0 to 512 [ 78.132795][ T7977] EXT4-fs: inline encryption not supported [ 78.135457][ T7977] EXT4-fs: old and new quota format mixing [ 78.208733][ T7975] loop8: detected capacity change from 0 to 8192 [ 78.209081][ T7975] vfat: Unknown parameter '¾ïȦ' [ 78.249583][ T7983] cgroup: Need name or subsystem set [ 78.314889][ T7992] fuse: Bad value for 'fd' [ 78.378987][ T8001] loop1: detected capacity change from 0 to 512 [ 78.388431][ T8001] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.617: dx entry: limit 1024 != root limit 124 [ 78.388474][ T8001] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.617: Corrupt directory, running e2fsck is recommended [ 78.389703][ T8001] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 78.389837][ T8001] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.617: corrupted in-inode xattr: invalid ea_ino [ 78.389853][ T8001] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.390025][ T8001] EXT4-fs (loop1): Remounting filesystem read-only [ 78.390514][ T8001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.428289][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.537883][ T8010] loop1: detected capacity change from 0 to 512 [ 78.542335][ T8010] /dev/loop1: Can't open blockdev [ 78.556143][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 78.556285][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 78.651653][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.623'. [ 78.651693][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.623'. [ 78.668581][ T39] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.668635][ T39] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.668666][ T39] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.668687][ T39] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.669761][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.623'. [ 78.669790][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.623'. [ 78.809176][ T8032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.626'. [ 78.817306][ T8032] netdevsim netdevsim1: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 78.895003][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.629'. [ 78.908622][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.910460][ T8039] bridge_slave_1: left allmulticast mode [ 78.911645][ T8039] bridge_slave_1: left promiscuous mode [ 78.913435][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.153996][ T8052] loop1: detected capacity change from 0 to 256 [ 79.453033][ T8066] loop1: detected capacity change from 0 to 1024 [ 79.461005][ T8066] EXT4-fs: Ignoring removed nobh option [ 79.465696][ T8066] EXT4-fs: Ignoring removed bh option [ 79.468085][ T8066] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 79.484598][ T8066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 79.484653][ T8066] System zones: 0-1, 3-12 [ 79.485222][ T8066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.492592][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 79.492619][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT [ 79.492635][ T50] Tainted: [L]=SOFTLOCKUP [ 79.492639][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.492646][ T50] Workqueue: hci5 hci_rx_work [ 79.492662][ T50] Call trace: [ 79.492666][ T50] show_stack+0x2c/0x3c (C) [ 79.492684][ T50] __dump_stack+0x30/0x40 [ 79.492696][ T50] dump_stack_lvl+0xd8/0x12c [ 79.492708][ T50] dump_stack+0x1c/0x28 [ 79.492720][ T50] sysfs_warn_dup+0x9c/0xb8 [ 79.492732][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 79.492744][ T50] kobject_add_internal+0x290/0x6f0 [ 79.492754][ T50] kobject_add_varg+0x9c/0xe8 [ 79.492762][ T50] kobject_add+0x110/0x1c8 [ 79.492770][ T50] device_add+0x394/0x9e0 [ 79.492778][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 79.492790][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 79.492799][ T50] hci_le_conn_complete_evt+0x114/0x3d8 [ 79.492809][ T50] hci_le_meta_evt+0x2b0/0x46c [ 79.492821][ T50] hci_event_packet+0x4c0/0x9c8 [ 79.492831][ T50] hci_rx_work+0x2f4/0xd78 [ 79.492838][ T50] process_scheduled_works+0x788/0x10b8 [ 79.492849][ T50] worker_thread+0x798/0xbd0 [ 79.492859][ T50] kthread+0x304/0x3d4 [ 79.492868][ T50] ret_from_fork+0x10/0x20 [ 79.492893][ T50] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.492912][ T50] Bluetooth: hci5: failed to register connection device [ 79.561092][ T8066] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.637: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 79.573377][ T8066] EXT4-fs (loop1): Remounting filesystem read-only [ 79.578797][ T8066] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 79.588231][ T8071] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 79.679357][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.769661][ T8080] fuse: Bad value for 'user_id' [ 79.769697][ T8080] fuse: Bad value for 'user_id' [ 80.119320][ T8102] loop7: detected capacity change from 0 to 1024 [ 80.122843][ T8102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.124953][ T8102] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.128265][ T8102] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 80.130029][ T8102] EXT4-fs (loop7): orphan cleanup on readonly fs [ 80.133778][ T8102] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 3: comm syz.7.648: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.133816][ T8102] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.136985][ T8102] __quota_error: 91 callbacks suppressed [ 80.137027][ T8102] Quota error (device loop7): write_blk: dquota write failed [ 80.137048][ T8102] Quota error (device loop7): find_free_dqentry: Can't write quota data block 3 [ 80.137108][ T8102] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 80.137141][ T8102] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.648: Failed to acquire dquot type 0 [ 80.137161][ T8102] loop7: lost filesystem error report for type 5 error -117 [ 80.143170][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 80.143180][ C1] EXT4-fs (loop7): initial error at time 78: ext4_map_blocks:833: inode 3: block 3 [ 80.143199][ C1] EXT4-fs (loop7): last error at time 78: ext4_acquire_dquot:7041 [ 80.158489][ T8102] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.648: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.158534][ T8102] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.161304][ T8102] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 80.161342][ T8102] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.648: Failed to acquire dquot type 0 [ 80.161361][ T8102] loop7: lost filesystem error report for type 5 error -117 [ 80.168667][ T8102] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.648: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.168700][ T8102] loop7: lost filesystem error report for type 5 error -117 [ 80.172991][ T8102] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.648: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.173025][ T8102] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.177368][ T8102] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 80.177396][ T8102] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.648: Failed to acquire dquot type 0 [ 80.177408][ T8102] loop7: lost filesystem error report for type 5 error -117 [ 80.184724][ T8102] EXT4-fs (loop7): 1 orphan inode deleted [ 80.188553][ T8102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.213844][ T8102] Invalid option length (5532) for dns_resolver key [ 80.288178][ T8108] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.648: iget: bad extended attribute block 6 [ 80.302435][ T8110] loop9: detected capacity change from 0 to 256 [ 80.355454][ T7216] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.427609][ T8115] bridge_slave_1: left allmulticast mode [ 80.427649][ T8115] bridge_slave_1: left promiscuous mode [ 80.427744][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.432945][ T8115] bridge_slave_0: left allmulticast mode [ 80.432974][ T8115] bridge_slave_0: left promiscuous mode [ 80.433075][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.471120][ T8117] binder: 8116:8117 unknown command 49 [ 80.471155][ T8117] binder: 8116:8117 ioctl c0306201 200001c0 returned -22 [ 80.496208][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496208][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496249][ T8117] buffer_io_error: 25 callbacks suppressed [ 80.496268][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496485][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496485][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496498][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496517][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496517][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496528][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496546][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496546][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496556][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496573][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496573][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496583][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496600][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496600][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496610][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496626][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496626][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496636][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496652][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496652][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496662][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496678][ T8117] syz.9.652: attempt to access beyond end of device [ 80.496678][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.496688][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.496706][ T8117] Buffer I/O error on dev loop9, logical block 57847, async page read [ 80.848402][ T8132] EXT4-fs: inline encryption not supported [ 80.849735][ T8132] ext4: Unknown parameter 'permit_directio' [ 81.028444][ T8133] Soft offlining pfn 0x11b744 at process virtual address 0x20000000 [ 81.029905][ T8133] Soft offline: 0x11b744: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 81.050508][ T8130] tmpfs: Bad value for 'mpol' [ 81.117570][ T8117] bio_check_eod: 53719 callbacks suppressed [ 81.117611][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117611][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117642][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117642][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117668][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117668][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117692][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117692][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117716][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117716][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117740][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117740][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117763][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117763][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117786][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117786][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117809][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117809][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.117833][ T8117] syz.9.652: attempt to access beyond end of device [ 81.117833][ T8117] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.226502][ T8140] ublk_ctrl_add_dev: invalid recovery flags 10 [ 81.244592][ T8141] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 81.245888][ T8141] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 81.322251][ T8148] vfat: Deprecated parameter 'posix' [ 81.323723][ T8148] FAT-fs: "posix" option is obsolete, not supported now [ 81.480685][ T15] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.480742][ T15] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.481165][ T15] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.481185][ T15] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.648310][ T8153] netlink: 'syz.6.662': attribute type 4 has an invalid length. [ 82.220455][ T8174] set_capacity_and_notify: 3 callbacks suppressed [ 82.220506][ T8174] loop9: detected capacity change from 0 to 1024 [ 82.424686][ T8174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.896540][ T30] audit: type=1326 audit(80.764:473): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8188 comm="syz.8.674" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x0 [ 82.908944][ T8193] batadv_slave_0: entered promiscuous mode [ 82.916648][ T8192] batadv_slave_0: left promiscuous mode [ 82.918863][ T8189] loop8: detected capacity change from 0 to 8192 [ 82.981010][ T30] audit: type=1326 audit(80.859:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8188 comm="syz.8.674" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x0 [ 82.987091][ T8189] loop8: p1 p2 < > p3 [ 82.987119][ T8189] loop8: partition table partially beyond EOD, truncated [ 82.987216][ T8189] loop8: p1 size 1342439424 extends beyond EOD, truncated [ 82.988731][ T8189] loop8: p2 start 16384 is beyond EOD, truncated [ 82.988745][ T8189] loop8: p3 start 67108864 is beyond EOD, truncated [ 82.996249][ T7336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.148366][ T8206] __nla_validate_parse: 8 callbacks suppressed [ 83.149589][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.679'. [ 83.233977][ T8213] loop7: detected capacity change from 0 to 1024 [ 83.236027][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.237661][ T8213] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.242372][ T8213] EXT4-fs (loop7): orphan cleanup on readonly fs [ 83.246702][ T8213] EXT4-fs error (device loop7): ext4_quota_enable:7232: comm syz.7.681: inode #17152: comm syz.7.681: iget: illegal inode # [ 83.249372][ T8213] loop7: lost filesystem error report for type 5 error -117 [ 83.249706][ T8213] EXT4-fs (loop7): Remounting filesystem read-only [ 83.250999][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 83.251012][ C1] EXT4-fs (loop7): initial error at time 81: ext4_quota_enable:7232 [ 83.251030][ C1] EXT4-fs (loop7): last error at time 81: ext4_quota_enable:7232 [ 83.255931][ T8213] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 83.260656][ T8213] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 83.262440][ T8213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.335069][ T7216] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.359222][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 83.376749][ T8216] netlink: 'syz.6.682': attribute type 1 has an invalid length. [ 83.379198][ T8216] netlink: 'syz.6.682': attribute type 5 has an invalid length. [ 83.392715][ T8216] loop6: detected capacity change from 0 to 256 [ 83.409233][ T8216] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.435318][ C0] Unknown status report in ack skb [ 83.484524][ T8226] loop7: detected capacity change from 0 to 512 [ 83.500266][ T8226] /dev/loop7: Can't open blockdev [ 83.529290][ T8231] loop9: detected capacity change from 0 to 512 [ 83.590311][ T8231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.642456][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 83.666296][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.690'. [ 83.803008][ T7336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.926550][ T8253] binder: 8252:8253 tried to acquire reference to desc 0, got 1 instead [ 83.927134][ T4718] Bluetooth: hci3: hcon 00000000393e85bc sent 1 < count 4096 [ 83.935929][ T4718] Bluetooth: hci3: hcon 000000004bf2d845 sent 1 < count 65535 [ 83.950608][ T8255] bond0: (slave bond_slave_1): Releasing backup interface [ 83.968217][ T8253] binder: 8252:8253 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 83.968250][ T8253] binder: 8253 RLIMIT_NICE not set [ 83.968271][ T8253] binder: 8253 RLIMIT_NICE not set [ 83.968643][ T8253] binder: release 8252:8253 transaction 30 out, still active [ 83.968662][ T8253] binder: release 8252:8253 transaction 23 in, still active [ 83.968677][ T8253] binder: undelivered TRANSACTION_COMPLETE [ 83.968798][ T8253] binder: 8253 RLIMIT_NICE not set [ 84.043051][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.695'. [ 84.043901][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.695'. [ 84.158690][ T8268] loop6: detected capacity change from 0 to 4096 [ 84.190448][ T8268] EXT4-fs (loop6): Test dummy encryption mode enabled [ 84.193702][ T8268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.224085][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.242082][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.699'. [ 84.247827][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.700'. [ 84.516878][ T8280] netlink: 76 bytes leftover after parsing attributes in process `syz.8.699'. [ 84.521425][ T8283] netlink: 76 bytes leftover after parsing attributes in process `syz.6.700'. [ 84.613517][ T8285] loop9: detected capacity change from 0 to 256 [ 84.614975][ T8285] FAT-fs (loop9): bogus sectors per cluster 30 [ 84.615025][ T8285] FAT-fs (loop9): Can't find a valid FAT filesystem [ 84.636280][ T1039] binder: release 8252:8253 transaction 30 in, still active [ 84.636317][ T1039] binder: release 8252:8253 transaction 23 out, still active [ 84.640930][ T1039] binder: send failed reply for transaction 30, target dead [ 84.643281][ T1039] binder: send failed reply for transaction 23, target dead [ 84.688831][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.702'. [ 84.932114][ T8326] loop1: detected capacity change from 0 to 128 [ 84.948227][ T8326] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.976774][ T8326] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 84.976795][ T8326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.976845][ T8326] vhci_hcd vhci_hcd.0: Device attached [ 85.124807][ T8335] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.178257][ T4802] IPVS: starting estimator thread 0... [ 85.204580][ T8355] Injecting memory failure for pfn 0x130785 at process virtual address 0x20001000 [ 85.214234][ T8355] Memory failure: 0x130785: corrupted page was clean: dropped without side effects [ 85.214408][ T8355] Memory failure: 0x130785: recovery action for clean LRU page: Recovered [ 85.214427][ T8355] Injecting memory failure for pfn 0x127e8b at process virtual address 0x20002000 [ 85.214547][ T8355] Memory failure: 0x127e8b: corrupted page was clean: dropped without side effects [ 85.214574][ T8355] Memory failure: 0x127e8b: recovery action for clean LRU page: Recovered [ 85.214585][ T8355] Injecting memory failure for pfn 0x13b286 at process virtual address 0x20003000 [ 85.214611][ T8355] Memory failure: 0x13b286: corrupted page was clean: dropped without side effects [ 85.214632][ T8355] Memory failure: 0x13b286: recovery action for clean LRU page: Recovered [ 85.216155][ T1039] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 85.266449][ T8353] IPVS: using max 59 ests per chain, 141600 per kthread [ 85.277244][ T8366] netlink: 'syz.6.723': attribute type 11 has an invalid length. [ 85.748272][ T8333] vhci_hcd: connection reset by peer [ 85.935915][ T12] vhci_hcd vhci_hcd.1: stop threads [ 85.936319][ T12] vhci_hcd vhci_hcd.1: release socket [ 85.936975][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 86.226270][ T8392] loop8: detected capacity change from 0 to 512 [ 86.228387][ T8392] EXT4-fs: Ignoring removed oldalloc option [ 86.235214][ T8392] EXT4-fs: journaled quota format not specified [ 86.250918][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.402897][ T8399] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.403033][ T8399] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.405934][ T8399] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.410924][ T8399] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 86.412460][ T8399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #16: comm syz.1.745: corrupted xattr block 31: invalid header [ 86.413093][ T8399] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 86.415988][ T8399] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 86.416058][ T8399] EXT4-fs (loop1): 1 orphan inode deleted [ 86.649428][ T8399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.693354][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.779086][ T8416] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 86.780338][ T8416] EXT4-fs: failed to create workqueue [ 86.780368][ T8416] EXT4-fs (loop6): mount failed [ 87.833622][ T8452] binder: 8451:8452 ioctl 40046205 0 returned -22 [ 87.833846][ T8452] binder: 8451:8452 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.833859][ T8452] binder: 8452 RLIMIT_NICE not set [ 87.887045][ T8453] binder: 8451:8453 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.887081][ T8453] binder: 8453 RLIMIT_NICE not set [ 88.004868][ T8454] netlink: 'syz.7.748': attribute type 27 has an invalid length. [ 88.004899][ T8454] netlink: 'syz.7.748': attribute type 4 has an invalid length. [ 88.023837][ T8454] set_capacity_and_notify: 2 callbacks suppressed [ 88.023871][ T8454] loop7: detected capacity change from 0 to 4096 [ 88.024247][ T8454] EXT4-fs: inline encryption not supported [ 88.025286][ T8454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.025295][ T8454] EXT4-fs (loop7): Test dummy encryption mode enabled [ 88.031342][ T8454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 88.031404][ T8454] System zones: 0-5 [ 88.034361][ T8454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.369075][ T8461] __nla_validate_parse: 13 callbacks suppressed [ 88.369130][ T8461] netlink: 76 bytes leftover after parsing attributes in process `syz.9.749'. [ 88.776314][ T7216] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.800053][ T8463] loop7: detected capacity change from 0 to 512 [ 89.737044][ T8466] VFS: Mount too revealing [ 89.756407][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.752'. [ 89.974741][ T8424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.373680][ T8488] loop6: detected capacity change from 0 to 512 [ 90.424010][ T8488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.449805][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.493788][ T8508] loop6: detected capacity change from 0 to 2048 [ 90.498695][ T8505] loop1: detected capacity change from 0 to 8192 [ 90.511043][ T8508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.583439][ T1039] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 90.596005][ T8505] loop1: p1 p2 < > p3 [ 90.596038][ T8505] loop1: partition table partially beyond EOD, truncated [ 90.596169][ T8505] loop1: p1 size 1342439424 extends beyond EOD, truncated [ 90.597095][ T8505] loop1: p2 start 16384 is beyond EOD, truncated [ 90.597107][ T8505] loop1: p3 start 67108864 is beyond EOD, truncated [ 90.604643][ T30] audit: type=1326 audit(88.245:475): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8504 comm="syz.1.762" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9377a168 code=0x0 [ 90.912853][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.8.763'. [ 90.935818][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.8.763'. [ 90.939420][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.8.763'. [ 90.953228][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.765'. [ 91.014899][ T8522] syzkaller0: entered promiscuous mode [ 91.017160][ T8522] syzkaller0: entered allmulticast mode [ 91.025484][ T8522] 9p: Bad value for 'rfdno' [ 91.025680][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.764'. [ 91.042471][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.766'. [ 91.043077][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.766'. [ 91.135088][ T8529] netlink: 76 bytes leftover after parsing attributes in process `syz.7.765'. [ 91.332869][ T8532] sctp: [Deprecated]: syz.8.767 (pid 8532) Use of int in maxseg socket option. [ 91.332869][ T8532] Use struct sctp_assoc_value instead [ 91.372864][ T8536] loop8: detected capacity change from 0 to 512 [ 91.374792][ T8536] ext2: Unknown parameter 'uid' [ 91.496501][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.630868][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.633508][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.768673][ T8553] loop9: detected capacity change from 0 to 8192 [ 91.784311][ T8553] loop9: p1 p2 < > p3 [ 91.784357][ T8553] loop9: partition table partially beyond EOD, truncated [ 91.784475][ T8553] loop9: p1 size 1342439424 extends beyond EOD, truncated [ 91.785335][ T8553] loop9: p2 start 16384 is beyond EOD, truncated [ 91.785351][ T8553] loop9: p3 start 67108864 is beyond EOD, truncated [ 91.795817][ T30] audit: type=1326 audit(89.357:476): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8552 comm="syz.9.774" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9777a168 code=0x0 [ 91.921976][ T8555] loop7: detected capacity change from 0 to 256 [ 91.925495][ T8555] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 91.925530][ T8555] FAT-fs (loop7): Filesystem has been set read-only [ 92.011638][ T8567] loop9: detected capacity change from 0 to 512 [ 92.055152][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.097863][ T8575] overlayfs: workdir and upperdir must reside under the same mount [ 92.216482][ T8585] loop6: detected capacity change from 0 to 2048 [ 92.269685][ T8585] Alternate GPT is invalid, using primary GPT. [ 92.269762][ T8585] loop6: p1 p2 p3 [ 92.269784][ T8585] loop6: partition table partially beyond EOD, truncated [ 92.292569][ T8587] loop9: p1 p2 < > p3 [ 92.292618][ T8587] loop9: partition table partially beyond EOD, truncated [ 92.292740][ T8587] loop9: p1 size 1342439424 extends beyond EOD, truncated [ 92.321424][ T8587] loop9: p2 start 16384 is beyond EOD, truncated [ 92.321480][ T8587] loop9: p3 start 67108864 is beyond EOD, truncated [ 92.337764][ T30] audit: type=1326 audit(89.852:477): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.9.786" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9777a168 code=0x0 [ 92.360618][ T8593] pim6reg: entered allmulticast mode [ 92.369308][ T8593] pim6reg: left allmulticast mode [ 92.451702][ T30] audit: type=1326 audit(89.963:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.9.786" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9777a168 code=0x0 [ 92.464353][ T5069] udevd[5069]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 92.469231][ T5728] udevd[5728]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 92.484831][ T8595] bio_check_eod: 21658 callbacks suppressed [ 92.485013][ T8595] syz.6.789: attempt to access beyond end of device [ 92.485013][ T8595] loop6: rw=2049, sector=1768, nr_sectors = 32 limit=256 [ 92.485975][ T8595] syz.6.789: attempt to access beyond end of device [ 92.485975][ T8595] loop6: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 92.486036][ T8595] syz.6.789: attempt to access beyond end of device [ 92.486036][ T8595] loop6: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 92.486099][ T8595] syz.6.789: attempt to access beyond end of device [ 92.486099][ T8595] loop6: rw=2049, sector=1960, nr_sectors = 40 limit=256 [ 92.487445][ T8595] syz.6.789: attempt to access beyond end of device [ 92.487445][ T8595] loop6: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 92.487461][ T8595] buffer_io_error: 75386 callbacks suppressed [ 92.487467][ T8595] Buffer I/O error on dev loop6, logical block 442, lost async page write [ 92.504797][ T8595] syz.6.789: attempt to access beyond end of device [ 92.504797][ T8595] loop6: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 92.504838][ T8595] Buffer I/O error on dev loop6, logical block 442, lost async page write [ 92.508988][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.521022][ T8601] vlan2: entered allmulticast mode [ 92.521060][ T8601] bridge1: entered allmulticast mode [ 92.527202][ T8601] bridge1: port 1(erspan0) entered blocking state [ 92.528029][ T8601] bridge1: port 1(erspan0) entered disabled state [ 92.528122][ T8601] erspan0: entered allmulticast mode [ 92.530329][ T8601] erspan0: entered promiscuous mode [ 92.530762][ T8601] bridge1: port 1(erspan0) entered blocking state [ 92.530797][ T8601] bridge1: port 1(erspan0) entered forwarding state [ 92.541342][ T8601] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 92.662311][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.699235][ T8612] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 92.835784][ T8635] bridge: RTM_NEWNEIGH with invalid ether address [ 92.861392][ T8643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.863023][ T8643] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 92.868328][ T8643] EXT4-fs (loop6): 1 truncate cleaned up [ 92.868732][ T8643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.016530][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.033911][ T8664] syzkaller0: entered promiscuous mode [ 93.035144][ T8664] syzkaller0: entered allmulticast mode [ 93.068225][ T8669] netlink: 'syz.6.803': attribute type 1 has an invalid length. [ 93.105420][ T8674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.110012][ T8674] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 93.378459][ T8701] gadgetfs: bound to dummy_udc driver [ 93.472838][ T8706] No such timeout policy "syz1" [ 93.704737][ T8710] set_capacity_and_notify: 6 callbacks suppressed [ 93.706186][ T8710] loop1: detected capacity change from 0 to 4096 [ 93.722273][ T8710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.800161][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.929581][ T1039] kernel read not supported for file 163/task/164/uid_map (pid: 1039 comm: kworker/1:2) [ 93.933240][ T8713] __nla_validate_parse: 6 callbacks suppressed [ 93.934484][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.8.812'. [ 94.055096][ T8720] netlink: 'syz.8.814': attribute type 10 has an invalid length. [ 94.072610][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.076104][ T8720] team0: Port device netdevsim1 added [ 94.081522][ T8720] netlink: 'syz.8.814': attribute type 10 has an invalid length. [ 94.113264][ T8720] team0: Port device netdevsim1 removed [ 94.114635][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.117787][ T8720] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 94.198230][ T8726] loop8: detected capacity change from 0 to 8192 [ 94.213348][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.9.818'. [ 94.228278][ T8728] netlink: 'syz.9.818': attribute type 1 has an invalid length. [ 94.228585][ T8728] netlink: 'syz.9.818': attribute type 5 has an invalid length. [ 94.308760][ T8733] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 95.071949][ T30] audit: type=1326 audit(92.398:479): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.8.817" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x0 [ 95.080249][ T8726] loop8: p1 p2 < > p3 [ 95.080302][ T8726] loop8: partition table partially beyond EOD, truncated [ 95.080428][ T8726] loop8: p1 size 1342439424 extends beyond EOD, truncated [ 95.085176][ T8726] loop8: p2 start 16384 is beyond EOD, truncated [ 95.085215][ T8726] loop8: p3 start 67108864 is beyond EOD, truncated [ 95.089903][ T8728] loop9: detected capacity change from 0 to 256 [ 95.093446][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.819'. [ 95.103427][ T8728] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.118464][ C1] Unknown status report in ack skb [ 95.128555][ T30] audit: type=1326 audit(92.453:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.8.817" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x0 [ 95.151359][ T8731] netlink: 'syz.7.819': attribute type 1 has an invalid length. [ 95.151801][ T8731] netlink: 'syz.7.819': attribute type 5 has an invalid length. [ 95.209538][ T8731] loop7: detected capacity change from 0 to 256 [ 95.225731][ T8731] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.283608][ T8745] fuse: Bad value for 'fd' [ 95.330032][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.825'. [ 95.330095][ T8752] bridge_slave_1: left allmulticast mode [ 95.330128][ T8752] bridge_slave_1: left promiscuous mode [ 95.330234][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.337924][ T8752] bridge_slave_0: left allmulticast mode [ 95.340182][ T8752] bridge_slave_0: left promiscuous mode [ 95.341628][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.383505][ T8757] loop9: detected capacity change from 0 to 256 [ 95.386928][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.387002][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 95.410687][ T8757] loop9: detected capacity change from 0 to 256 [ 95.413390][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.422766][ T8759] loop7: detected capacity change from 0 to 128 [ 95.423842][ T8757] loop9: detected capacity change from 0 to 256 [ 95.424097][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.425594][ T8757] loop9: detected capacity change from 0 to 256 [ 95.425789][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.427260][ T8757] loop9: detected capacity change from 0 to 256 [ 95.432622][ T8759] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 95.445629][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.447511][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.570109][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.571883][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.676674][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.687747][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.8.831'. [ 95.687884][ T8769] Unknown options in mask b7f2 [ 95.704983][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.711180][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.712970][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.960805][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.962547][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 95.966745][ T8771] overlay: ./bus is not a directory [ 95.979858][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 96.013629][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 96.034841][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 96.067476][ T8777] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 96.067930][ T8777] netlink: 'syz.1.832': attribute type 5 has an invalid length. [ 96.074167][ T8757] vfat: Unknown parameter 'hortnam‡ªøqe' [ 96.115442][ T8777] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.135303][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.833'. [ 96.155821][ T8785] netlink: 'syz.9.833': attribute type 1 has an invalid length. [ 96.156144][ T8785] netlink: 'syz.9.833': attribute type 5 has an invalid length. [ 96.169898][ T8785] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.229876][ T8791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.241946][ T8789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.259584][ T5849] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.276918][ T8789] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.834: corrupted inode contents [ 96.283791][ T8789] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.834: mark_inode_dirty error [ 96.284163][ T8789] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.834: corrupted inode contents [ 96.284442][ T8789] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.834: mark_inode_dirty error [ 96.284612][ T8789] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.834: corrupted inode contents [ 96.284753][ T8789] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.834: mark_inode_dirty error [ 96.284899][ T8789] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.834: corrupted inode contents [ 96.295521][ T8789] EXT4-fs error (device loop8): ext4_truncate:4691: inode #15: comm syz.8.834: mark_inode_dirty error [ 96.300055][ T8789] EXT4-fs error (device loop8) in ext4_setattr:6172: Corrupt filesystem [ 96.312618][ T8795] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.834: corrupted inode contents [ 96.370458][ T7207] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.373542][ T7207] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.373998][ T7207] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 96.382849][ T7207] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.434568][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.839'. [ 96.537289][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.7.842'. [ 96.555071][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.842'. [ 96.623296][ T8818] random: crng reseeded on system resumption [ 96.844739][ T8826] syzkaller1: entered promiscuous mode [ 96.844778][ T8826] syzkaller1: entered allmulticast mode [ 96.848496][ T8826] tls_set_device_offload_rx: netdev not found [ 96.862082][ T8841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.963493][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.014243][ T8851] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 97.223622][ T8865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 97.223649][ T8865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.227469][ T8865] vhci_hcd vhci_hcd.0: Device attached [ 97.390012][ T4803] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 97.655483][ T4803] usb 4-1: new full-speed USB device number 3 using vhci_hcd [ 97.721006][ T8877] 9p: Bad value for 'rfdno' [ 97.756193][ T8893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.760361][ T8898] binder: tried to use weak ref as strong ref [ 97.762043][ T8898] binder: 8896:8898 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.770809][ T8898] binder: 8896:8898 got transaction to invalid handle, 1 [ 97.774718][ T8898] binder: 8896:8898 cannot find target node [ 97.776396][ T8898] binder: 8896:8898 transaction call to 0:0 failed 33/29201/-22, code 0 size 88-24 line 3252 [ 97.779372][ T8898] binder: 8896:8898 ioctl 540d 0 returned -22 [ 97.780438][ T7216] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.783877][ T4802] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.925906][ T8906] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.039623][ T7336] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.342613][ T8868] vhci_hcd: connection reset by peer [ 98.351810][ T3563] vhci_hcd vhci_hcd.1: stop threads [ 98.351839][ T3563] vhci_hcd vhci_hcd.1: release socket [ 98.351876][ T3563] vhci_hcd vhci_hcd.1: disconnect device [ 98.424145][ T8934] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 98.425896][ T8934] EXT4-fs (loop6): orphan cleanup on readonly fs [ 98.430482][ T8934] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated! [ 98.433731][ T8934] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 98.435649][ T8934] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.883: Failed to acquire dquot type 1 [ 98.437738][ T8934] loop6: lost filesystem error report for type 5 error -5 [ 98.438210][ T8934] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.883: bg 0: block 40: padding at end of block bitmap is not set [ 98.442183][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 98.442201][ C0] EXT4-fs (loop6): initial error at time 95: ext4_acquire_dquot:7041 [ 98.442214][ C0] EXT4-fs (loop6): last error at time 95: ext4_acquire_dquot:7041 [ 98.447605][ T8934] loop6: lost filesystem error report for type 5 error -117 [ 98.447906][ T8934] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 98.453596][ T8934] loop6: lost filesystem error report for type 5 error -117 [ 98.456361][ T8934] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.883: data will be lost [ 98.456479][ T8934] EXT4-fs (loop6): 1 truncate cleaned up [ 98.457016][ T8934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.477267][ T8934] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.883: corrupted xattr block 31: invalid header [ 98.481877][ T8934] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.883: corrupted xattr block 31: invalid header [ 98.485183][ T8945] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.487064][ T8934] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.883: corrupted xattr block 31: invalid header [ 98.490878][ T8942] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.494510][ T8942] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.495911][ T8934] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.883: bad symlink. [ 98.503508][ T8945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.504732][ T8942] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.537002][ T5849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.647084][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.757416][ T8964] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 98.757535][ T8964] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 98.757578][ T8964] ================================================================== [ 98.757586][ T8964] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x44/0x84 [ 98.757604][ T8964] Read of size 8 at addr ffff0000db0c5ef0 by task syz.7.887/8964 [ 98.757612][ T8964] [ 98.757618][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.7.887 Tainted: G L syzkaller #0 PREEMPT [ 98.757630][ T8964] Tainted: [L]=SOFTLOCKUP [ 98.757633][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 98.757639][ T8964] Call trace: [ 98.757642][ T8964] show_stack+0x2c/0x3c (C) [ 98.757656][ T8964] __dump_stack+0x30/0x40 [ 98.757668][ T8964] dump_stack_lvl+0xd8/0x12c [ 98.757680][ T8964] print_address_description+0xb0/0x238 [ 98.757690][ T8964] print_report+0x68/0x84 [ 98.757697][ T8964] kasan_report+0x8c/0xc4 [ 98.757708][ T8964] __asan_report_load8_noabort+0x20/0x2c [ 98.757720][ T8964] dummy_free_request+0x44/0x84 [ 98.757730][ T8964] usb_ep_free_request+0x108/0x3fc [ 98.757741][ T8964] uvc_function_bind+0xbb0/0x1230 [ 98.757753][ T8964] usb_add_function+0x1d0/0x6bc [ 98.757762][ T8964] configfs_composite_bind+0xb4c/0x10b8 [ 98.757773][ T8964] gadget_bind_driver+0x274/0x834 [ 98.757781][ T8964] really_probe+0x29c/0x800 [ 98.757793][ T8964] __driver_probe_device+0x1e0/0x350 [ 98.757804][ T8964] driver_probe_device+0x6c/0x19c [ 98.757815][ T8964] __driver_attach+0x168/0x384 [ 98.757826][ T8964] bus_for_each_dev+0x128/0x1b4 [ 98.757836][ T8964] driver_attach+0x50/0x60 [ 98.757846][ T8964] bus_add_driver+0x208/0x500 [ 98.757855][ T8964] driver_register+0x220/0x310 [ 98.757867][ T8964] usb_gadget_register_driver_owner+0xf0/0x25c [ 98.757880][ T8964] gadget_dev_desc_UDC_store+0x164/0x22c [ 98.757891][ T8964] configfs_write_iter+0x27c/0x354 [ 98.757904][ T8964] vfs_write+0x51c/0xa0c [ 98.757911][ T8964] ksys_write+0x12c/0x228 [ 98.757918][ T8964] __arm64_sys_write+0x84/0x98 [ 98.757926][ T8964] invoke_syscall+0x98/0x244 [ 98.757938][ T8964] el0_svc_common+0xec/0x23c [ 98.757950][ T8964] do_el0_svc+0x4c/0x5c [ 98.757961][ T8964] el0_svc+0x64/0x260 [ 98.757973][ T8964] el0t_64_sync_handler+0x48/0x148 [ 98.757985][ T8964] el0t_64_sync+0x198/0x19c [ 98.757994][ T8964] [ 98.757996][ T8964] Allocated by task 4703: [ 98.758000][ T8964] kasan_save_track+0x40/0x78 [ 98.758009][ T8964] kasan_save_alloc_info+0x44/0x54 [ 98.758019][ T8964] __kasan_kmalloc+0x9c/0xb4 [ 98.758027][ T8964] __kmalloc_cache_noprof+0x2e8/0x5ec [ 98.758035][ T8964] kernfs_fop_open+0x5d4/0x994 [ 98.758044][ T8964] do_dentry_open+0x5c4/0xfc0 [ 98.758053][ T8964] vfs_open+0x44/0x2dc [ 98.758062][ T8964] path_openat+0x21fc/0x2a60 [ 98.758071][ T8964] do_file_open+0x1c8/0x2e8 [ 98.758078][ T8964] do_sys_openat2+0x114/0x1e8 [ 98.758088][ T8964] do_sys_open+0xb0/0xe0 [ 98.758098][ T8964] __arm64_sys_openat+0xa8/0xc4 [ 98.758108][ T8964] invoke_syscall+0x98/0x244 [ 98.758118][ T8964] el0_svc_common+0xec/0x23c [ 98.758128][ T8964] do_el0_svc+0x4c/0x5c [ 98.758137][ T8964] el0_svc+0x64/0x260 [ 98.758147][ T8964] el0t_64_sync_handler+0x48/0x148 [ 98.758157][ T8964] el0t_64_sync+0x198/0x19c [ 98.758163][ T8964] [ 98.758164][ T8964] Freed by task 7207: [ 98.758168][ T8964] kasan_save_track+0x40/0x78 [ 98.758176][ T8964] kasan_save_free_info+0x58/0x70 [ 98.758186][ T8964] __kasan_slab_free+0x74/0xa4 [ 98.758194][ T8964] __rcu_free_sheaf_prepare+0x130/0x2ac [ 98.758203][ T8964] rcu_free_sheaf+0x28/0xd8 [ 98.758211][ T8964] rcu_core+0x598/0xf04 [ 98.758219][ T8964] rcu_core_si+0x10/0x1c [ 98.758225][ T8964] handle_softirqs+0x2ec/0xd98 [ 98.758232][ T8964] __do_softirq+0x14/0x20 [ 98.758238][ T8964] [ 98.758240][ T8964] The buggy address belongs to the object at ffff0000db0c5e00 [ 98.758240][ T8964] which belongs to the cache kmalloc-128 of size 128 [ 98.758247][ T8964] The buggy address is located 112 bytes to the right of [ 98.758247][ T8964] allocated 128-byte region [ffff0000db0c5e00, ffff0000db0c5e80) [ 98.758256][ T8964] [ 98.758258][ T8964] The buggy address belongs to the physical page: [ 98.758262][ T8964] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000db0c5f00 pfn:0x11b0c5 [ 98.758270][ T8964] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 98.758279][ T8964] page_type: f5(slab) [ 98.758287][ T8964] raw: 05ffc00000000200 ffff0000c0001a00 fffffdffc32761d0 fffffdffc3bbb450 [ 98.758294][ T8964] raw: ffff0000db0c5f00 0000000800100004 00000000f5000000 0000000000000000 [ 98.758298][ T8964] page dumped because: kasan: bad access detected [ 98.758302][ T8964] [ 98.758303][ T8964] Memory state around the buggy address: [ 98.758308][ T8964] ffff0000db0c5d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.758313][ T8964] ffff0000db0c5e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.758319][ T8964] >ffff0000db0c5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.758323][ T8964] ^ [ 98.758328][ T8964] ffff0000db0c5f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.758337][ T8964] ffff0000db0c5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.758341][ T8964] ================================================================== [ 98.758369][ T8964] Disabling lock debugging due to kernel taint [ 98.758558][ T8964] ------------[ cut here ]------------ [ 98.758563][ T8964] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7c/0x84, CPU#1: syz.7.887/8964 [ 98.844915][ T8964] Modules linked in: [ 98.845636][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.7.887 Tainted: G B L syzkaller #0 PREEMPT [ 98.847412][ T8964] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 98.848353][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 98.850010][ T8964] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.851326][ T8964] pc : dummy_free_request+0x7c/0x84 [ 98.852189][ T8964] lr : dummy_free_request+0x7c/0x84 [ 98.853044][ T8964] sp : ffff8000903874e0 [ 98.853729][ T8964] x29: ffff8000903874e0 x28: 0000000000000000 x27: ffff0000ca5b0528 [ 98.855069][ T8964] x26: ffff0000d1724800 x25: 1fffe000194b60a5 x24: dfff800000000000 [ 98.856358][ T8964] x23: dfff800000000000 x22: ffff800088b07eb8 x21: ffff800087332280 [ 98.857645][ T8964] x20: ffff0000c93f0068 x19: ffff0000db0c5ef0 x18: 1fffe00035bc9e28 [ 98.858918][ T8964] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800088bbd0a0 [ 98.860276][ T8964] x14: ffff0001ade4f14c x13: 0000000000000001 x12: 0000000000000000 [ 98.861629][ T8964] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000026be2 [ 98.863062][ T8964] x8 : ffff8000a4906000 x7 : 0000000000000000 x6 : ffff8000803b8a6c [ 98.864443][ T8964] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f7b34 [ 98.865790][ T8964] x2 : 0000000000000000 x1 : ffff0000c50f8000 x0 : 0000000000000001 [ 98.867116][ T8964] Call trace: [ 98.867671][ T8964] dummy_free_request+0x7c/0x84 (P) [ 98.868602][ T8964] usb_ep_free_request+0x108/0x3fc [ 98.869458][ T8964] uvc_function_bind+0xbb0/0x1230 [ 98.870290][ T8964] usb_add_function+0x1d0/0x6bc [ 98.871080][ T8964] configfs_composite_bind+0xb4c/0x10b8 [ 98.871972][ T8964] gadget_bind_driver+0x274/0x834 [ 98.872783][ T8964] really_probe+0x29c/0x800 [ 98.873527][ T8964] __driver_probe_device+0x1e0/0x350 [ 98.874433][ T8964] driver_probe_device+0x6c/0x19c [ 98.875287][ T8964] __driver_attach+0x168/0x384 [ 98.876085][ T8964] bus_for_each_dev+0x128/0x1b4 [ 98.876902][ T8964] driver_attach+0x50/0x60 [ 98.877654][ T8964] bus_add_driver+0x208/0x500 [ 98.878438][ T8964] driver_register+0x220/0x310 [ 98.879229][ T8964] usb_gadget_register_driver_owner+0xf0/0x25c [ 98.880254][ T8964] gadget_dev_desc_UDC_store+0x164/0x22c [ 98.881132][ T8964] configfs_write_iter+0x27c/0x354 [ 98.881941][ T8964] vfs_write+0x51c/0xa0c [ 98.882647][ T8964] ksys_write+0x12c/0x228 [ 98.883381][ T8964] __arm64_sys_write+0x84/0x98 [ 98.884146][ T8964] invoke_syscall+0x98/0x244 [ 98.884939][ T8964] el0_svc_common+0xec/0x23c [ 98.885691][ T8964] do_el0_svc+0x4c/0x5c [ 98.886399][ T8964] el0_svc+0x64/0x260 [ 98.887060][ T8964] el0t_64_sync_handler+0x48/0x148 [ 98.887892][ T8964] el0t_64_sync+0x198/0x19c [ 98.888605][ T8964] irq event stamp: 4067 [ 98.889244][ T8964] hardirqs last enabled at (4067): [] finish_task_switch+0x234/0x858 [ 98.890831][ T8964] hardirqs last disabled at (4066): [] __schedule+0x2f8/0x2d80 [ 98.892354][ T8964] softirqs last enabled at (3332): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 98.894083][ T8964] softirqs last disabled at (3330): [] fpsimd_restore_current_state+0x44/0x9c8 [ 98.895803][ T8964] ---[ end trace 0000000000000000 ]--- [ 98.897696][ T8964] udc dummy_udc.0: failed to start g1: -22 [ 98.897766][ T8964] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 98.899041][ T8964] UDC core: g1: couldn't find an available UDC or it's busy [ 99.365663][ T8962] set_capacity_and_notify: 26 callbacks suppressed [ 99.369490][ T8962] loop1: detected capacity change from 0 to 256 [ 99.376939][ T8962] vfat: Unknown parameter '0xffffffffffffffff' [ 102.834117][ T4803] vhci_hcd vhci_hcd.1: vhci_device speed not set