last executing test programs: 1m10.845499667s ago: executing program 2 (id=7): r0 = syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r2, 0x0, 0xd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0xfffe, 0x0, 0x3, 0x1}}, 0x26) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4004000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') lseek(r7, 0xffffff60, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000500)=0x2) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000080)={0x32, @broadcast, 0x4e22, 0x2, 'none\x00', 0x0, 0x1, 0x2}, 0x2c) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000040)=0x7) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) 1m10.61469799s ago: executing program 2 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) openat(r0, &(0x7f0000000200)='./file0\x00', 0x2000, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x0, 0x8, 0x6}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000) (async) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) (async) openat(r0, &(0x7f0000000200)='./file0\x00', 0x2000, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x0, 0x8, 0x6}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) (async) close(r1) (async) 1m10.441582573s ago: executing program 2 (id=11): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400500, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0xc3, 0xdf, &(0x7f0000000080)="dcc824a1253440e14014398711b6f01cce665e9545f1ac8b8a1541576e5508e173ad56493b10fc8eb8506391ebaadae06cfcf9f3979dde427ec19ce21de9a810c58efb5c7f909b019a40629fe47e6ea5f13a6fab1d8532b67cb8938bafa0836d557e2d3cd0d103d0457e86366b99ab3c2deb7a1e37c6de7da8a5de2661c0922bce0d23fbdf92aca37a8af3a88cfcd145f3a5c305713669e178b849f92d62ec7a92e9642491e23583eae84289481c84c8c906965ad52c5d23150204e93cfba9a986b819", &(0x7f0000000740)=""/223, 0x200, 0x0, 0x45, 0x49, &(0x7f0000000840)="143e18ad2feed29105dc239b57668f6583ae1db601e5e75c3d984d47b8e885213edf044d3c39bfc4b7b90e822166d87c9d53bd5d6cf7b971071c92186a26fb5e36ea76243d", &(0x7f0000000340)="68937811b5e256273f00c96da71b17e4194ea689780db8a407df5a4d1bb58c90108bdf65690696b03baf6de16f19fe5363e0ff6a8b44841a091a69c49ace5b75185245a0d679b2a971", 0x3, 0x0, 0x7fff}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000000)=0xfffff801, 0x1) listen(r2, 0x0) (async) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x40, 0x28, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x7ff8}, {0x10, 0xfff3}, {0x7, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6b}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xe0, 0x7f}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x40, 0x28, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x7ff8}, {0x10, 0xfff3}, {0x7, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6b}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xe0, 0x7f}}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x7a3640) 1m10.354939139s ago: executing program 2 (id=15): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000ac0)={0x101, 0x6, 0x0, 0x6}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x2800000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000a, @loopback, 0xfffbf803}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) 1m9.489131546s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r1, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x46800) (async) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = timerfd_create(0x9, 0x80000) timerfd_gettime(r4, &(0x7f00000003c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080)=0x101, 0x4) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000000dc51"], 0x0, 0x200) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x6, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) 1m8.545336585s ago: executing program 4 (id=41): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'dvmrp0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, r5, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x5}]}}, 0x0, 0x26, 0x0, 0x1, 0x1ff}, 0x28) sendfile(r2, r7, 0x0, 0x106f) (async) sendfile(r2, r7, 0x0, 0x106f) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x0, 0xc, 0x241, 0x9, 0xa, 0x0, &(0x7f0000000000)="a5d3ee2b71f3f2d67b39"}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$nl_crypto(0x10, 0x3, 0x15) socket(0xa, 0x1, 0x0) (async) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffa}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffa}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r11) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r11) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r12, 0x109, 0x0, 0x10000, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r12, 0x109, 0x0, 0x10000, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 1m8.48774655s ago: executing program 4 (id=42): prctl$PR_SCHED_CORE(0x23, 0x2, 0x0, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x1c) 1m8.365246865s ago: executing program 4 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102, 0x41000}, 0x94) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790018000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x13}, 0x50) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) copy_file_range(r7, 0x0, r7, 0xffffffffffffffff, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7d}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd26, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x2}, 0x6, 0x17, 0x5100, 0x5, 0xf, 'syz0\x00', "c988fd1a9d0e41e6df6f0dc721bce88473e1779a9bf1cd7f86c00b7dc1aa7fb6", "59066bf5c6a11b642af7b9225ddc85d3314b55a859e106a2db83b80dc4b46ceb", [{0x9d, 0x8, {0x2, 0x6}}, {0x9, 0x5, {0x1, 0x6}}, {0x4, 0x101, {0x3, 0xbd}}, {0x9, 0xff, {0x0, 0xf43}}, {0x8, 0x3, {0x1, 0x1}}, {0x8, 0x86, {0x0, 0xd4}}, {0x6848, 0x8000, {0x0, 0x9}}, {0x2, 0x8, {0x1, 0x1}}, {0x8, 0x9, {0x0, 0x690d}}, {0xe98c, 0x70, {0x1}}, {0x7b10, 0x4, {0x1, 0xfff}}, {0x5, 0xfffa, {0x2, 0x3600}}, {0x1, 0x7448, {0x0, 0x4}}, {0x2e5, 0x4, {0x0, 0xfffffffc}}, {0xf, 0x8, {0x2, 0x2}}, {0x5, 0xffff, {0x0, 0x2}}, {0x9, 0x8000, {0x1, 0xfff}}, {0xfffb, 0x6, {0x0, 0x7ff}}, {0x7, 0x2, {0x0, 0x1}}, {0x6, 0x80, {0x1}}, {0xff4c, 0x8, {0x2, 0xffff}}, {0xb, 0x5, {0x0, 0x81}}, {0x5, 0x400, {0x3, 0x2}}, {0x95, 0x57b5, {0x3, 0x8}}, {0x7, 0x2, {0x1, 0x1}}, {0x100, 0x5, {0x2, 0xe129}}, {0x1ff, 0x9, {0x0, 0x1}}, {0xc161, 0x0, {0x0, 0x30000000}}, {0xe6, 0x6, {0x0, 0x7}}, {0x2, 0x5, {0x2, 0x3c82}}, {0x8, 0x5, {0x1, 0x401}}, {0x2, 0x1, {0x0, 0x1}}, {0x62, 0xff, {0x0, 0x1}}, {0x5, 0x6, {0x3, 0x7}}, {0x9, 0x96, {0x0, 0x80000000}}, {0x6, 0x7, {0x2, 0x6}}, {0x4, 0xfff8, {0x3, 0x4}}, {0x1ff, 0x5, {0x0, 0x1}}, {0x1, 0x7, {0x1, 0x6}}, {0xd4, 0xd0, {0x1, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x846}, 0x4000) 1m8.113480232s ago: executing program 4 (id=47): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) 1m7.877878678s ago: executing program 4 (id=48): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 1m7.041427034s ago: executing program 2 (id=49): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000000)) 1m6.860454287s ago: executing program 32 (id=49): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000000)) 1m6.433426514s ago: executing program 4 (id=62): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') (async, rerun: 64) r1 = socket(0x1d, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000340)="4d00c040f06b6f5c0c211f6972918dfe9955dab391aee0bc3ff2506c42dd850fa5828073a5122e60757df54bed5b6d7e6befb2a051271456c3293900baf6c0c19ba4cecd2fa85da64fa6b52c3a5512d1be89bedb8f5b7b1599863a049499b3cf27c7af9d16f52fa21110c8e8fa96fc8a0283a94158eb3f48a1774d237eb54e2cc0c7486320250d67ceb9d5f5495c5e5ccf3f31468c8b42a41cde8d14698a80a2cf07934d6140e5fd56ccbc5ed32a41fa01480bf0a3dab380ac8da8770a422f70b8631ad7573afe2a81a5cf22e98c11a73ade9d71fd02578ae873ce8a82672077bb08f78aba93d8eee14b11ca8df2") (async, rerun: 32) r2 = fsopen(&(0x7f0000000240)='nfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) (async) unshare(0x2040400) (async) io_setup(0x2, &(0x7f0000001080)=0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_submit(r5, 0x1, &(0x7f0000001740)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) (async) fchdir(r3) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x4004000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(r7, r8, 0x0, 0xe3aa6ea) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r10 = fcntl$dupfd(r9, 0x406, r9) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001980)=""/4110, 0x100e}) (async) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009) (async) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa08000, &(0x7f00000003c0)=ANY=[], 0x5, 0x288, &(0x7f0000000940)="$eJzs3UFqE1EYB/CvbdLGbhLQlbgYcOMqNL1BkApiQIhkUVcNtgVpQiGFgC5sd97FS3gHj+EJIgiRZAaTiVEomo5tfj8Y5mNe/uFNFnmz+F5y9Kh/dnxeiVQSpYir+DapN2Mr8jamx3bu2lUAALdNu91tFj0HVmswaHbLEbHzy0jnUyETAgAAAAAAAAAA4K+l/f8Xp4f3v0alkvX/jyJqc/3/G9l5c77/Pzvp/weA20f//903GDS7u9nzW57+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA4o/G4Ov7DUfT8AIB/z/oPAOvH+g8A62eUW+s3wvoPAHffq8PXL5qt1kE7SSoR/Y/DzrCTntPx5mm8jV6cxF5U43tMng8yaf3seetgL5mqxVH/MstfDjtb+XwjqlFbnm+k+SSfL8fufH4/qvFgeX5/aX47njyey9ejGl/exHn04jgm2Vn+QyNJnr5sLeR3pq8DAAAAAAAAAAAAAAAAAACAm1BPflq6f79e/914mr/G7wMs7K8vxcNSsfcOAAAAAAAAAAAAAAAAAAAA/4uLd+/Pur3eyUBx/eLz4pV7PlXFDRflFb1zwV9MAAAAAAAAAAAAAAAAAACwhmabfoueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUZ/b//6srir5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYD38CAAA//+36OXO") (async, rerun: 64) r12 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000180)=[r3, r11, r2, r10, r7, r12], 0x6) 1m6.101748052s ago: executing program 33 (id=62): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') (async, rerun: 64) r1 = socket(0x1d, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000340)="4d00c040f06b6f5c0c211f6972918dfe9955dab391aee0bc3ff2506c42dd850fa5828073a5122e60757df54bed5b6d7e6befb2a051271456c3293900baf6c0c19ba4cecd2fa85da64fa6b52c3a5512d1be89bedb8f5b7b1599863a049499b3cf27c7af9d16f52fa21110c8e8fa96fc8a0283a94158eb3f48a1774d237eb54e2cc0c7486320250d67ceb9d5f5495c5e5ccf3f31468c8b42a41cde8d14698a80a2cf07934d6140e5fd56ccbc5ed32a41fa01480bf0a3dab380ac8da8770a422f70b8631ad7573afe2a81a5cf22e98c11a73ade9d71fd02578ae873ce8a82672077bb08f78aba93d8eee14b11ca8df2") (async, rerun: 32) r2 = fsopen(&(0x7f0000000240)='nfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) (async) unshare(0x2040400) (async) io_setup(0x2, &(0x7f0000001080)=0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_submit(r5, 0x1, &(0x7f0000001740)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) (async) fchdir(r3) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x4004000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(r7, r8, 0x0, 0xe3aa6ea) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r10 = fcntl$dupfd(r9, 0x406, r9) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001980)=""/4110, 0x100e}) (async) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009) (async) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa08000, &(0x7f00000003c0)=ANY=[], 0x5, 0x288, &(0x7f0000000940)="$eJzs3UFqE1EYB/CvbdLGbhLQlbgYcOMqNL1BkApiQIhkUVcNtgVpQiGFgC5sd97FS3gHj+EJIgiRZAaTiVEomo5tfj8Y5mNe/uFNFnmz+F5y9Kh/dnxeiVQSpYir+DapN2Mr8jamx3bu2lUAALdNu91tFj0HVmswaHbLEbHzy0jnUyETAgAAAAAAAAAA4K+l/f8Xp4f3v0alkvX/jyJqc/3/G9l5c77/Pzvp/weA20f//903GDS7u9nzW57+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA4o/G4Ov7DUfT8AIB/z/oPAOvH+g8A62eUW+s3wvoPAHffq8PXL5qt1kE7SSoR/Y/DzrCTntPx5mm8jV6cxF5U43tMng8yaf3seetgL5mqxVH/MstfDjtb+XwjqlFbnm+k+SSfL8fufH4/qvFgeX5/aX47njyey9ejGl/exHn04jgm2Vn+QyNJnr5sLeR3pq8DAAAAAAAAAAAAAAAAAACAm1BPflq6f79e/914mr/G7wMs7K8vxcNSsfcOAAAAAAAAAAAAAAAAAAAA/4uLd+/Pur3eyUBx/eLz4pV7PlXFDRflFb1zwV9MAAAAAAAAAAAAAAAAAACwhmabfoueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUZ/b//6srir5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYD38CAAA//+36OXO") (async, rerun: 64) r12 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000180)=[r3, r11, r2, r10, r7, r12], 0x6) 52.709183925s ago: executing program 3 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc, 0x8f, 0x21}, {0xc, 0x90, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x20044010) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) (async) socketpair(0x8, 0x4, 0x80000001, 0xfffffffffffffffe) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r2, &(0x7f0000000200)='1', 0x1) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x3, @vbi={0x45f, 0x120000, 0x6, 0x59565955, [0x1, 0x5], [0x9, 0x5], 0x1}}) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500090000000000", 0x68) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) (async, rerun: 64) close(r6) (async, rerun: 64) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x53}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6}, 0x10}, 0x94) 52.418306694s ago: executing program 3 (id=201): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x8a, 0x67, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x883b, 0x76, 0x0, @opaque="6bbfb35d707ad6d57392c6a730bcf5f61e5a8240e77180708a7473705b86c2ef05ace6f350204cadfb0332d5aa2cb53bd0401248ad86b07b61812a576dda81ed6cf932f9dbde2d6769ed19ffbded514e411025b549bb0595e00baed79f2e09128b5777071ffdad9d9dbfdd45172c"}}}}}, 0x0) 52.388805768s ago: executing program 3 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) (async) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x95, 0x4) (async) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/74, 0x4a}, 0x2}], 0x1, 0x20, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x604001, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x8581) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000040)=0x3) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) (async) r5 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMREADOOB64(r5, 0xc0184d16, &(0x7f00000003c0)={0xff80000000000000, 0x0, 0x0, 0x0}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/179, 0xb3}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/107, 0x6b}, {&(0x7f0000003680)=""/115, 0x73}, {&(0x7f0000003700)=""/137, 0x89}], 0xa}, 0x0) 52.308821287s ago: executing program 3 (id=205): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {}, {@shortname_mixed}, {@numtail}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@numtail}, {@rodir}]}, 0x3, 0x2ab, &(0x7f0000001980)="$eJzs3cFqY2UUB/D/bZI20UW6cCXCXNCFq2HqE7QMI6gFQclCZ6GiHRBTlBYKHcU4K5/AJ/B53IhLN/MAijtnIV65vUmb1Jt2Okzbofx+mx7O952cc3svTTf58ulrgyT7Dx599zj9fpGVzWzmSZH1rGTmh7T67c/2PADwgntSVfmraqw1qcPFHb0lld2VSx8OALgU8+//Cwv1u/vj+9c2FwBweT786OP3tra3731Qlv1k98eDUZHmZ7O+9SBfZpyd3Mkw/yTVsSZ++53te+mWtfW8sTs5GNWVu5/8Mn39rT+So/qNDLPeXr9RNubqJwejXl6a9t8cZ+f9nzPMK3XN7+/OZq+KpK5/q6U+o9W8+frc/LczzK+f5+uM88Wsftr/+42yvFv99Pe3R//u1PXF5GC0drxvurtzVfcEAAAAAAAAAAAAAAAAAAAAAICb73Z5bH3x/J3Zwf9nrP//fKDB7ICfydz5PnfKsqyKZv9JfTevdtO9zmsHAAAAAAAAAAAAAAAAAACAF8X+4cOvPhuPd/ZOB4dJliydH8w+1t+ylH8XM2tJnqVFE9y6aFU609HGRXL4sJezq76Zy/SydlR5fq/OBa9iUM+zs1d0c9bm+3ebyZ/ulYvjzKAJspLs7d9K06vODJpgLvOMt/sk6KfpldmoxXk3t9/2kDyHoGp5/DpLq1ZPZwbTK2jZPDij++rLFxt19jQOl+wpkvTydPe993x/h1fwxwcAAAAAAAAAAAAAAAAAAFhw8qHflsVH1zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyDk+//v0AwmRYv21N16qCbaeZ0z97VXyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA33H8BAAD//1pRUkg=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000500)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x0, {0x2, 0x4e22, @empty}, 'veth1_to_hsr\x00'}) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, 0x0, 0x3c00) getdents64(r2, &(0x7f0000000200)=""/229, 0xe5) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xf2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000228, 0x0) 52.160650262s ago: executing program 3 (id=209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x200002ae, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffbf00000000050000008500000041000000850000001120000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x100, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)=@fd={0x80000001, 0x2, 0x4, 0x0, 0xff, {0x77359400}, {0x3, 0x0, 0x5, 0x12, 0xd3, 0x47, "febdfe08"}, 0xbd, 0x4, {}, 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xf}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0009"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 51.711745622s ago: executing program 3 (id=216): r0 = eventfd2(0x43, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) read$eventfd(r0, &(0x7f00000000c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa1, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) write(r2, &(0x7f0000000180)='pi3usb30532 0x5', 0xf) 51.643835638s ago: executing program 34 (id=216): r0 = eventfd2(0x43, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) read$eventfd(r0, &(0x7f00000000c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa1, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) write(r2, &(0x7f0000000180)='pi3usb30532 0x5', 0xf) 40.144162219s ago: executing program 0 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="3ff8ffffc86a14cabf85ffffffff000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0)={[0xe]}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="04000000000000009a00000000000002181100004eeb15a56efbf7ee48b3ce8f26afe1b11197ee07ff8189a88b7c8ed317a3f998213806a2c480b2247e55ca06", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0xfca804a0, 0x1b, 0x2, &(0x7f0000000280)="6344bebfb60c468759c7a2077fd6657585ad56fe71e3b12539b3b8", &(0x7f0000000200)=""/2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r10, r8, 0x4, r7}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x1a000, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r12, 0x8008f511, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r11, 0x25, 0x15, @val=@perf_event={0x7}}, 0x18) 40.065798657s ago: executing program 0 (id=365): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.941355477s ago: executing program 0 (id=369): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@norecovery}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x611, &(0x7f00000022c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 39.545427215s ago: executing program 0 (id=372): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x113, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$dvb_frontend(0x0, 0x5, 0x10000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/loop0/queue/scheduler\x00', 0x2, 0x124) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) io_uring_enter(0xffffffffffffffff, 0x2001, 0x1, 0x1e0, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x40000000000b946) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0xf400, 0x1000000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0xfffffffffffffffd}]}) 36.989633891s ago: executing program 0 (id=403): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x7, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x5, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x2, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x20, 0x0, @tid=r1}, &(0x7f0000000300)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x175) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000100)}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async, rerun: 64) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) (rerun: 64) pwritev(r9, &(0x7f0000000540)=[{&(0x7f00000001c0)="4799", 0x2}, {&(0x7f0000000380)="ea652ae3ab7154e7d2e69bcd9998498090c1c228ec35d54cef03bd4c403d20af2799275b1f61c6a6c4f55630d855321f8d7c438c0487e86ab17d525d4d0ed0e3e15b556c5f4aaf2f204d2edee2d209b4223c018b654723826a7ced724a2126f8c4cc43ae204c19dff8acf6a4d7b7ef58475f1a0a2c136c0b85d5fede5ebb3c467c86d07f270ba6f14576e3d459644c6bc2a6858e375afbdd6a9c9d811ffa0c443946bc31ed3d8ca8e9d9d1eb2105", 0xae}, {&(0x7f00000004c0)="1b3c4dec4a2d3996ace9ddd336198be8d0fa02ffdb3b156dad8c4b4fc52da0a972b130f7b736bddd74e4372c964ba0fc47aa19b222781a9d17dc82aafcc74d592c96a1d1d1524f0535a9561e7c5347ce85", 0xffffffffffffff44}], 0x3, 0x82e, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r9, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 36.315473272s ago: executing program 0 (id=410): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) socket$inet_sctp(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/69) mmap$usbmon(&(0x7f0000b80000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0xd) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 36.260591635s ago: executing program 35 (id=410): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) socket$inet_sctp(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/69) mmap$usbmon(&(0x7f0000b80000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0xd) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 32.35337442s ago: executing program 7 (id=460): r0 = socket(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x40, 0xb, 0x6, 0x85f, 0x6, 0x1, 0x7fffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40488c1}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40f2200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r10, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x13}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004004}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000880) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 32.041362689s ago: executing program 7 (id=463): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2cc8, 0x3a10, 0x2, 0x31d}, &(0x7f0000000500)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x8, 0x3, 0x1}) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) (rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) (async) io_uring_enter(r0, 0xadc, 0x40ab, 0x1, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) (async, rerun: 32) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000002c0)='./trace\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x9}}], [{@euid_lt={'euid<', 0xee00}}, {@euid_gt={'euid>', 0xee01}}, {@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x21}}]}}, 0x1, 0x0, &(0x7f00000005c0)="b8f7d8ce69af8896d9dc66c3715b34c351ec929be63b89c203cfce2a2be41dfdbbb798297f086cb3039027082e902f4f8fdf114330361058e520d619eec1961c87ebd66b628048de09d725424e9cdd18b73d57045012640b6b97c6d28c8b6b87adf72855b85248f30849a0d785ae731d75e2fff537d62f56cb37e04012bf6c130455d7c0bc29b8af667b83a722b28fec120575525c4011d60ee7572e5830f44291003398adb875ad1f448c2eedc310d456f3cac09d2aa31601aeb659502577dca8247d65dc8035d48ecb3429a6f97f0c72ac385a") mkdirat(r6, &(0x7f00000006c0)='./trace\x00', 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='((ev_)t', 0x7) (async) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) 31.821334759s ago: executing program 7 (id=466): r0 = socket$inet(0x2, 0x3, 0x82008800) r1 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x10800) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)="af", 0x1}], 0x1, 0x0, 0x2, 0x1a) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@fallback=r2, r2, 0x2f}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x008', @ANYRES32], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003e00)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="2f00000004009b00000000005b2beca554"], 0x20) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0xad03) ioctl$FE_GET_EVENT(r7, 0x80286f4e, &(0x7f00000000c0)) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r8, &(0x7f0000000440), 0x0, 0x1000) execveat$binfmt(r3, r8, &(0x7f0000000200)={[&(0x7f0000000180)='\x00']}, &(0x7f0000000280)={[&(0x7f0000000240)='--$\xd7%%-\x00']}, 0x1000) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x1, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 30.310370662s ago: executing program 7 (id=490): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feff03ff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ffa0000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x4e22, @empty}, @l2tp={0x2, 0x0, @local, 0x2}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x9a4, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000280)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) madvise(0xffffffffffffffff, 0x0, 0x13) sendto$rxrpc(r6, &(0x7f0000000180)="7b0e5b9079a32a116551bbe688bb014db139ce250602f08bbbe9e29510929b1025093d04b2e1b5b2bd895a68b95301b00a644b51b54d028e923c57d4c4c8c51dcc357fedb9d93137c748dcfd5f57cab6", 0x50, 0x90, &(0x7f0000000200)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x24) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x4e24, @multicast1}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r7 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d0000000002000000020000041123000600140000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc00}}, 0x1c}}, 0x8c0) 29.66521318s ago: executing program 7 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020001030900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='lC'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) write(r2, &(0x7f0000000e00)='testhandle 2000000000 0', 0x17) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000040)=0x8) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000000)={0x1, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r7, 0x0, 0x79, 0x25, &(0x7f0000000480)="54654c06085fab712322c131075eacf450a3340a1503832cfc2a1934ca1a6693a90214189340faf7d066f0c1f2292f27d3f064da78a56ffd4df9c59213b21c6caa1e1679daea7b69bebc865b4289bb649c2d45bcda754c13a6e40dfb2693a51f1f6c4db62aee4ab9867d6fa49dc4323bbc3242e5a3e476c6e3", &(0x7f0000000500)=""/37, 0x8, 0x0, 0xb3, 0x4c, &(0x7f0000000700)="53bebdaa2061693721161b7bcafdb7bc559e2821f017d82adf4f094021b535a3d108da4ba4c8da814934e7785faca4096bcada5066a85d73151a5cbff9f4172886ce2f381acf0cf1e2660910a0021edc4d726999526af2087c51b97f100dfcdae252a89b498c91d4484ec8ca03f0c7b6c7d3c44e23a2e879560531b9e746b7401df71353722e03522d3a8b9110fc81b1425d2a616edefe3403771035bff4eab71dd4daae1b01c31caa057eb57e114e36dc00f9", &(0x7f00000007c0)="53908982c7124d5e7fd4bb9bc46db3282508924337c20bb4cb015ac984fdb1003a7f8216a7f3a1dee4053625753dcaa74f6c61649a1d05421636f480f4cb724f02568c2b5f21df618243cd73", 0x1, 0x0, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 29.065220581s ago: executing program 7 (id=504): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xbf, 0x9, 0x0, @mcast1, @private2, 0x40, 0x40, 0x80000001, 0x6}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x203e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x8, 0x1, 0x108, 0xc983, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x5, 0x3, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x527, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x1, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r1, r2, 0x1, r3, r4, 0x1, r5, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x8, 0x7}, {0x0, 0x2, 0xf, 0xa}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0xb, 0x9}, {0x4, 0x4, 0x5}], 0x10, 0x3}, 0x94) r6 = syz_io_uring_complete(0x0, 0x0) bind$inet(r6, &(0x7f0000000580)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f00000005c0)=[0x1, 0x3], 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$kcm(r6, &(0x7f0000000900)={&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/44, 0x2c}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/23, 0x17}, {&(0x7f0000000740)=""/238, 0xee}], 0x4, &(0x7f0000000880)=""/90, 0x5a}, 0x2040) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000940), &(0x7f0000000980)=0x4) accept4$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0xc0, 0x8, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x1, 0x1442d175, 0x8001}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa4, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x67}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xa4}}, 0x840) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000d40)) fanotify_mark(r6, 0x8, 0x1001, r6, &(0x7f0000000d80)='./file0\x00') syz_emit_ethernet(0xaa, &(0x7f0000000dc0)={@random="415ca1e1180e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@llc={0x4, {@llc={0x1, 0x1, "e2", "406a4c0a24100c22c3b26edebcd23294ce1632404c1a4e04ff8b9371c67c8e42337016c707e650e46556ba75bd5b5bbe726dddaade8fd7df6ece04ed6047cce271eee7c1776f04b02bfbd0d20791e9c4d035ca0910f8e0f07de879bc05617acd838fa3305bca5b8a9fb5c340ad105a8cd9a1e6be5db5c77e0f15d63e4492b7fe9fbcfbf490903a2b57769dea2115cf9b61ebbcc112bdb98981"}}}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x78e}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) ioctl$NBD_DO_IT(r6, 0xab03) r11 = syz_clone(0x2000, &(0x7f0000000fc0)="1b848c60b392ecb528a8a960593771eb69bd93f6bdfae666ad28fb55c5690d2ebe0f2c3d2de273e5a270ceadda94401b8482e99e8d1942f4402f70334bb4dba4256e774ec1f70afc3837b40dca53292f4ce3fa502a3a127c4111d237a49ba650d6c44ca6bedb1fb0f4b85e390f6e782d53c5b8120d609c1a65a9613a34e9844a82f5a68235c23fbf1650cee43b241111260561196d0b99b3897c8e00bfce372b611515e7ac05d916219379f96800444793f4e01c0d7d66906dfe34fce449f2a09555de7cd359d8ea90d55f38902043c3af135563c8f938aa9f", 0xd9, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="40229e4672e80b43") syz_open_procfs$pagemap(r11, &(0x7f0000001180)) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000011c0), 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001240)={0x7, &(0x7f0000001200)=[{0xb42, 0x2, 0x4, 0x56cede51}, {0x462, 0x1, 0x5, 0x4}, {0xf, 0x3, 0xc, 0x6}, {0x4, 0xf, 0x6}, {0xffff, 0x7, 0x7, 0x9}, {0x5, 0x3, 0xd}, {0xdbb1, 0x3, 0x1, 0x9}]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x4579, 0x9}, &(0x7f0000001340)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0x38, &(0x7f0000001380)=[@in6={0xa, 0x4e20, 0x8, @private0, 0x3}, @in6={0xa, 0x4e20, 0x6, @private1, 0x1}]}, &(0x7f0000001400)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001440)={r12, 0x1, 0xcae0, 0x9, 0x200, 0x2, 0x3, 0x5, {r13, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x6}}, 0xfe, 0x4, 0x4, 0x3, 0x8}}, &(0x7f0000001500)=0xb0) 28.969822589s ago: executing program 36 (id=504): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xbf, 0x9, 0x0, @mcast1, @private2, 0x40, 0x40, 0x80000001, 0x6}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x203e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x8, 0x1, 0x108, 0xc983, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x5, 0x3, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x527, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x1, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r1, r2, 0x1, r3, r4, 0x1, r5, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x8, 0x7}, {0x0, 0x2, 0xf, 0xa}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0xb, 0x9}, {0x4, 0x4, 0x5}], 0x10, 0x3}, 0x94) r6 = syz_io_uring_complete(0x0, 0x0) bind$inet(r6, &(0x7f0000000580)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f00000005c0)=[0x1, 0x3], 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$kcm(r6, &(0x7f0000000900)={&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/44, 0x2c}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/23, 0x17}, {&(0x7f0000000740)=""/238, 0xee}], 0x4, &(0x7f0000000880)=""/90, 0x5a}, 0x2040) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000940), &(0x7f0000000980)=0x4) accept4$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0xc0, 0x8, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x1, 0x1442d175, 0x8001}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa4, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x67}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xa4}}, 0x840) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000d40)) fanotify_mark(r6, 0x8, 0x1001, r6, &(0x7f0000000d80)='./file0\x00') syz_emit_ethernet(0xaa, &(0x7f0000000dc0)={@random="415ca1e1180e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@llc={0x4, {@llc={0x1, 0x1, "e2", "406a4c0a24100c22c3b26edebcd23294ce1632404c1a4e04ff8b9371c67c8e42337016c707e650e46556ba75bd5b5bbe726dddaade8fd7df6ece04ed6047cce271eee7c1776f04b02bfbd0d20791e9c4d035ca0910f8e0f07de879bc05617acd838fa3305bca5b8a9fb5c340ad105a8cd9a1e6be5db5c77e0f15d63e4492b7fe9fbcfbf490903a2b57769dea2115cf9b61ebbcc112bdb98981"}}}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x78e}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) ioctl$NBD_DO_IT(r6, 0xab03) r11 = syz_clone(0x2000, &(0x7f0000000fc0)="1b848c60b392ecb528a8a960593771eb69bd93f6bdfae666ad28fb55c5690d2ebe0f2c3d2de273e5a270ceadda94401b8482e99e8d1942f4402f70334bb4dba4256e774ec1f70afc3837b40dca53292f4ce3fa502a3a127c4111d237a49ba650d6c44ca6bedb1fb0f4b85e390f6e782d53c5b8120d609c1a65a9613a34e9844a82f5a68235c23fbf1650cee43b241111260561196d0b99b3897c8e00bfce372b611515e7ac05d916219379f96800444793f4e01c0d7d66906dfe34fce449f2a09555de7cd359d8ea90d55f38902043c3af135563c8f938aa9f", 0xd9, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="40229e4672e80b43") syz_open_procfs$pagemap(r11, &(0x7f0000001180)) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000011c0), 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001240)={0x7, &(0x7f0000001200)=[{0xb42, 0x2, 0x4, 0x56cede51}, {0x462, 0x1, 0x5, 0x4}, {0xf, 0x3, 0xc, 0x6}, {0x4, 0xf, 0x6}, {0xffff, 0x7, 0x7, 0x9}, {0x5, 0x3, 0xd}, {0xdbb1, 0x3, 0x1, 0x9}]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x4579, 0x9}, &(0x7f0000001340)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0x38, &(0x7f0000001380)=[@in6={0xa, 0x4e20, 0x8, @private0, 0x3}, @in6={0xa, 0x4e20, 0x6, @private1, 0x1}]}, &(0x7f0000001400)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001440)={r12, 0x1, 0xcae0, 0x9, 0x200, 0x2, 0x3, 0x5, {r13, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x6}}, 0xfe, 0x4, 0x4, 0x3, 0x8}}, &(0x7f0000001500)=0xb0) 4.119522869s ago: executing program 8 (id=833): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0x4}, {0x9, '\x00', @buffer={"189bb929b5af897d6a3bee029128341252f3a11b7cad0a23222390f424ea31c4", 0x20}, 0xfffffffb}, {0xd, '\x00', @buffer={"0c520b2ea8dbf8875d6bac650e76b86dcf5eb4e1469506358d460a40d42c22f0", 0x20}, 0xd02d}, {0x40, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x7}, {0x1a, '\x00', @buffer={"35491c63a0228bd4d72b8de2941b9c0daf2ebfa4c4becfc8c25d00db7e1459c1", 0x20}, 0x8}]}) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0x4}, {0x9, '\x00', @buffer={"189bb929b5af897d6a3bee029128341252f3a11b7cad0a23222390f424ea31c4", 0x20}, 0xfffffffb}, {0xd, '\x00', @buffer={"0c520b2ea8dbf8875d6bac650e76b86dcf5eb4e1469506358d460a40d42c22f0", 0x20}, 0xd02d}, {0x40, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x7}, {0x1a, '\x00', @buffer={"35491c63a0228bd4d72b8de2941b9c0daf2ebfa4c4becfc8c25d00db7e1459c1", 0x20}, 0x8}]}) (async) 4.048706239s ago: executing program 8 (id=835): setns(0xc9, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x1003, 0xf9d, 0x3, {0xa, @raw_data="ba1460dfb29d225c2e04000000d728e6a0828a975fbe64af6af4383f3aa29fb3039b123338719932601c71ba5b6312fd1d4106445ba01c400f36cbe03032c44f1a77d43fa24c4230cfa0479310b2bccad58de125b708cee1a9cf615dbed612c53ab387d99c3138f884ce801538b19c2c373e936ff494907896ac2ea9f538ae95825a278eec6288b56871bbf37b7aa929c54a13e6060bf7015695eae1665572d40e8f71f79e0146ab6a27a22167004fcfc7d9545e010fbd9a078fe700"}, 0x8}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0xa8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000002440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_mount_image$fuse(&(0x7f00000028c0), &(0x7f0000002900)='./file0\x00', 0x200003, &(0x7f0000002940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$inet(r2, &(0x7f0000000000)={0x2a, 0x4e24, @private=0x1000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3008085, &(0x7f0000000040)={[{@min_batch_time}]}, 0x39, 0x55b, &(0x7f0000000c40)="$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") 3.945665757s ago: executing program 8 (id=837): shmctl$IPC_RMID(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffef9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x25}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001280), 0x8, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x8000, 0x6, 0x2, 0x9, 0x3, 0xa}}, {0x18, 0x2, [0x400, 0x0, 0x1ff, 0x2d, 0xe1cb, 0x5, 0x8, 0xede9, 0x9d6, 0x2]}}]}]}, 0x5c}}, 0x44080) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000008300)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x4, 0x2}, {0x3, 0x0, 0x2000, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x3, 0x0, 0x4c, 0x2, 0x0, 0x5}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000240)={'wg0\x00', @ifru_hwaddr=@random="22e3fa29e60e"}}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) write$smackfs_netlabel(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x20042000) 3.893909904s ago: executing program 5 (id=839): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/4113, 0x1011}], 0x1}, 0x4453d}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000003980)=""/95, 0x5f}, {&(0x7f0000003bc0)=""/239, 0xef}, {&(0x7f0000003cc0)=""/179, 0xb3}, {&(0x7f0000003d80)=""/216, 0xd8}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x7}, 0x8}], 0x3, 0x40002000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x54}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000d2}, 0x28d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) ftruncate(0xffffffffffffffff, 0x6000000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007a000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) 3.285314735s ago: executing program 8 (id=845): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000180)={0xc5, 0xb}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0xc) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') statx(r1, 0x0, 0x0, 0x200, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = shmget$private(0x0, 0x13000, 0x4, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x30181b, 0x0) 3.077392932s ago: executing program 8 (id=849): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000c00)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141420000000003300000000000000000000000000000000000000000000000000000000db00000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff000000000000000096070000000000000000000000000000bf00000000000000fcffffffb1a00100"], 0xf8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 2.992876763s ago: executing program 5 (id=851): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0x1}, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0xe, 0x2, "4479d77df74203f7a00b"}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4e136eff}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) 1.922958385s ago: executing program 1 (id=858): unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000002f00000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.899181267s ago: executing program 1 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/93, 0x5d}], 0x1, &(0x7f0000004f80)=""/4107, 0x100b}, 0x5}], 0x1, 0x23, 0x0) r3 = accept4$nfc_llcp(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x60, 0x800) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000640)="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", 0x118}, {&(0x7f0000000780)="0e7684d35972a6faf268843f35c58901ea0261fcd25dcfe101831a991e8d92b3d774fcb506a3d2e93c84679b18a16ef06562cc04f9fcd362cddcd6112622023c3ec34e07353286e05b5412d3f88d2485f6cc8f7ac11dfca42bf4dc43976b90d6284551d675750cc7ee2445e8fa075ff12a4b1440467170274169eed0e6547bbb6aa59f947252f674f8be782340cba3a6e4a97f1f3acb04e859e35c9b640b56c0b7ddc5eb8d68cb8266f7755b3e32aee3763e4d093ab05dd2868cf4cfec4a20e28b66520a9232b9522cd1d4d65c66", 0xce}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x6) 1.673157403s ago: executing program 1 (id=860): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000e14001100020000000000000000200000", 0x17) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x4c, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x220, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x755651edf8228d23}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000009000000080000000400000000000000", @ANYRES32, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000000)="4c00000011000e14001100020000000000000000200000", 0x17) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x4c, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x220, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x755651edf8228d23}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000009000000080000000400000000000000", @ANYRES32, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.298655557s ago: executing program 9 (id=867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e003c0064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000009000000e713121fd31c215d87b93d77a9cb46562b3d9c0000"], 0x0) 1.221201601s ago: executing program 6 (id=869): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x4280, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002380)={0xffffffffffffffff, 0x20, &(0x7f0000002340)={&(0x7f0000001300)=""/47, 0x2f, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002740)={0x6, 0x22, &(0x7f00000023c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x9, 0x4, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @call={0x85, 0x0, 0x0, 0xbf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0x2, 0x0, 0x8, 0x2646, 0x7}, @jmp={0x5, 0x1, 0x4, 0x3, 0xb, 0xffffffffffffffc0, 0x1}], &(0x7f0000002500)='GPL\x00', 0x1000, 0xb0, &(0x7f0000002540)=""/176, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002640)={0x2, 0xc, 0x27, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002680)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000026c0)=[{0x0, 0x3, 0x5, 0x5}, {0x5, 0x5, 0xd, 0x8}, {0x2, 0x1, 0x1, 0x3}, {0x3, 0x1, 0x4}, {0x5, 0x3, 0xa, 0x3}, {0x3, 0x4, 0x3, 0x1}, {0x3, 0x1, 0xa, 0xa}, {0x2, 0x3, 0x7, 0x7}], 0x10, 0x7}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002800)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000003140)={{0xffffffffffffffff, &(0x7f00000028c0)='!\\=-\x19\x00', 0x10040, &(0x7f0000002900)={@_ha_fsid={[0x3, 0xb]}, {0xa, 0x0, 0x80000, 0x15}}, 0x7, &(0x7f0000002940)={@_ha_fsid}, &(0x7f0000002980)=0x9}, 0x7, &(0x7f0000003040)=[{0x1, 0xef, &(0x7f00000029c0)='-\xb2#!%*-{&\x00', &(0x7f0000002a00)="c54d4a4206c11fbecafe1686dba58d699b275845a307896984971b0339dbb10e6889b5eed2d8863430b39586f18c6b8aa414c6e00a47c91d9e27664942d09b8d0278006a0ee63a647b7ff5571cdfe06fe8298417c34001007e1cbe0eb7505a1621035ba642715ae51a9665de0b8fc754db80855c2d2d6fbe9467fb2af73db39a91b9a7784cb8f5c900859cb0ef242aae7e402f122e049e20682a9806e8f51640950108c5f19fc6ea2876854823f3bed2046f9aab96edbcf234ed3f7b108fbc3474bc6ff98e79e8854dce60b8f8ae69", 0xcf, 0x2}, {0x2, 0xe, &(0x7f0000002b00)='\'\x8e\x00', &(0x7f0000002b40)="79e13addb1f81503bd35a65c311995e7fe2bf2cca7ecb86b5a13de02ebd4ff28ed87a8d21029bbafb7e7f7285dc76bb91d2adb2ed5a5787171e330c2", 0x3c, 0x30}, {0x1, 0xffffcf2e, &(0x7f0000002b80)='\x00', &(0x7f0000002bc0)="a51107f8d5f276e3ef8841ed8d6c1d0a32a47d479910a503e4a12ae9fdc78728fe138c0eb6fa0e8611c1e57c1a591d9468bd26645b5d9e6286a0ca10653c60f7b778fd0ccd9afe7af3734dd816e15165de471c5d3c141bc252bd51ced96de6721e7608c10fd0a852ee1293a6a47ace71675b4eb0e002b7f6395e212414c1ff639dd84ed4726254521ce36a972315a647f0c2a43147b8a1", 0x97, 0x10}, {0x3, 0x8, &(0x7f0000002c80)='-\x00', &(0x7f0000002cc0)="613155a4872ab3ee96a58decab59cdcbb69c41e44f82777c4be43dd7e6925d2c99996bc85a94e3c1b760fcbff56f599741a14e0504677b81b1caf38d03188fd0b422a01c89e25bf7def12d0201db83872e967084f399772aba685c478b057fb80e0fa145676b5f523adcb496a1ba8657736912ab73ceccd68c3d172e6c683846ec36", 0x82, 0x8}, {0x1, 0x7, &(0x7f0000002d80)='/*-n\x00', &(0x7f0000002dc0)="c031d4c670a075ff551dc3d0da10dd91be4089407a64675141033808a8f885af0995c642dcd30c0e3027b4cec51d4f0cffb2", 0x32, 0x30}, {0x1, 0xb47, &(0x7f0000002e00)='\\,\x00', &(0x7f0000002e40)="2c924adee0470c47c72cfe18c33ee676d95d265d3461bee49148d4260052246a1d44e77275c31e379287d72342c16233404e86373f91710a91d398328ca0909e3a224798e9d9ae7afa3d5c3c5ff48a09bd533147b3f30660e020ca001622464a63397b025ad7b133a13fb723e53faf064ead679fe67101304636de42629dfe254d35370832e3ccb44cd9c1e0161ae40a2f9dc628e5b8f7b60b", 0x99, 0x12}, {0x3, 0xe, &(0x7f0000002f00)='\x00', &(0x7f0000002f40)="bad7d865b9bc54164e305f75d852c51d85c252a3447252eca73730ab70b6c77fde2a59af03b72bfb3b5f904b380fbd6af57fe79978191811cc3fe85f380ffd09ff4bc026b5c26b962ffc516eb7dcc3a373c59898f78c6fc43b7b505022cca9ff045bce462ac9d66798b149ca2c7a09c7cb84d48bd93896cb329add0bb40c2e2caf1dcd15df5fc39c4334b01e65f131d0c1f3a260365ac3e57b36362b26cea065b4904bbbde8ddfb3dc406f46953ac3a5e08ca0cba97b5ee4d7daa746222eeb5bf1185282a7431f9f66f17afadcb17f2fb72523d162bfc09d597bf0535037128bba116225d1cd5b5741d54d667728", 0xee, 0x20}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000031c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000032c0)={0x1d, 0x1a, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7c9e9a23}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x8, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x48, '\x00', 0x0, @lsm=0x2b, r2, 0x8, &(0x7f0000001280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x5, 0x5, 0x9}, 0x10, r3, r4, 0x2, &(0x7f0000003240)=[0x1, r5, r6, r7, r8], &(0x7f0000003280)=[{0x0, 0x2, 0x1, 0xb}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x6}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), r7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x28, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000034c0)={'wlan1\x00'}) clock_adjtime(0x0, &(0x7f0000003500)={0xd8, 0x9, 0x40, 0x6b, 0x3, 0xfffffffffffffff7, 0x5, 0x3, 0x1, 0x6, 0x7fffffff, 0x1, 0x4, 0xbac, 0xe7, 0x1, 0xbd52, 0xd56, 0x1, 0x3a49, 0xd, 0xba, 0xe4c, 0x4, 0xc38, 0xc}) clock_adjtime(0x1, &(0x7f0000003600)={0x1, 0x6, 0xe5, 0xb586, 0x7, 0x80, 0x4, 0x8, 0x800, 0x5, 0xe7, 0xfffffffffffffffa, 0x5, 0x5, 0x7723, 0x873, 0x77e4, 0xf56, 0x8, 0x40, 0xffffffffffffff7f, 0x7, 0x8000000000000000, 0x7, 0x3, 0x3ff}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003700)={'\x00', 0x423, 0x9b4, 0x0, 0xffffffffffffff79, 0x10001, 0xffffffffffffffff}) ioprio_set$pid(0x1, r10, 0x2000) r11 = dup3(0xffffffffffffffff, r5, 0x80000) r12 = openat$cgroup_int(r11, &(0x7f0000003780)='cgroup.clone_children\x00', 0x2, 0x0) close(r12) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) sendmsg$nl_route(r5, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)=@ipv6_newroute={0x38, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x10, 0xc, 0xfe, 0x0, 0x0, 0xb, 0x500}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x10}}}}, @RTA_PREF={0x5, 0x14, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003980)={'erspan0\x00', &(0x7f0000003900)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0xd4, 0x7, {{0xe, 0x4, 0x0, 0x20, 0x38, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0xb, 0x80, [@broadcast, @remote]}, @timestamp_addr={0x44, 0xc, 0x51, 0x1, 0x3, [{@local, 0xe}]}, @lsrr={0x83, 0xb, 0x5b, [@multicast1, @remote]}, @end, @end]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000003a80)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)=@delchain={0x4c, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xf, 0xffff}, {0xb, 0x4}, {0xffff, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_RATE={0x6, 0x5, {0x72, 0xff}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000003ac0)) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000003b00), 0x100, 0x0) getpeername$packet(r14, &(0x7f0000003b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003b80)=0x14) openat(r5, &(0x7f0000003bc0)='./file0/file0\x00', 0x222400, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003cc0)={r14, &(0x7f0000003c00)="fd2ca799a9552f8ba875cee0942f565bc6816a22b70e55c54d688ded3de75ae3552440e5badc5f91f2bb2ac99166d27a5effd37065444ee9ba5b9374b90b8da1ed53c3a9b6a8ad84a31b7c9c71b1771f39f3bf8550e8b5031d8db440d7942018fb9b73f334402a1adad4af84b51d83ab15c4c83320dbf3480a4b101151017633fc368d88aa80435b5ed16a467f"}, 0x20) 1.220993785s ago: executing program 6 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.211528037s ago: executing program 9 (id=871): listns(&(0x7f0000000900)={0x20, 0x0, 0x2, 0x20000, 0x0, 0x3}, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0) 1.19027137s ago: executing program 6 (id=872): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38000, 0x50020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f0000000140)=0x80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000600)={'gretap0\x00', r1, 0x7, 0x80, 0x9, 0xd03b, {{0x33, 0x4, 0x2, 0xc, 0xcc, 0x66, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x49, 0xffffffffffffffff, [{0x0, 0xf, "0e27832c4c3f9455aa1c02ee32"}, {0x7, 0x8, "7e308ec89018"}, {0x0, 0x3, 'A'}, {0x6, 0xc, "0613b63740f4731240e0"}, {0x0, 0x8, "678f9c3c03f3"}, {0x7, 0x8, "c28bbc410620"}, {0x2, 0xd, "f5ad924e7191e186c6beb2"}]}, @timestamp={0x44, 0x14, 0x24, 0x0, 0x2, [0x7, 0x81, 0x2, 0x2]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x14, 0xa6, 0x3, 0x1, [{@multicast1, 0xffff}, {@remote, 0x80000000}]}, @timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x8, [{@rand_addr=0x64010101, 0x7}, {@multicast2}, {@local, 0x7}, {@local, 0x1}]}, @ssrr={0x89, 0x1b, 0x1e, [@local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @loopback]}]}}}}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000004c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000000050000002c0003801c0003801800018008000200292459fea0e10492c9f7020000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000050002"], 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}}, 0x0) 1.128121062s ago: executing program 9 (id=873): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{}, {0x20, '\xcf\x9a\xb5\xc6\x9a\xa7\x19\x85\x1fDr.^9\xff\xe8\xb4\xb7\t}~\xf3\f/\x9e\xc57@\x10s*\xe3{\xed\xb9\xf7\x85\x19\xfc\x88\x18\xe9\xfe\xc2\xfe\xfay=\x83>\x87\xd9lB\x92D:\xec\xda\xffxtDN\\\n\xba\x02\xd1\xf1\xe9\xc4\x0f\xfe\xb6yxCu\x16\xcb\x9a9\xd5C\xf7\xc7d9\xf2eW)\xd8\xc5Fu\xef8\xae\xe5Dg\xe8 \"(e\xbc\x90;x\xd2\xf4t\x8c Z\xafjW\xa1\x82L\xacD^\xae\xeeg#\xb2\x12\x06\x861\x05QZ\xee0\x8c'}]}, 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file3\x00', 0x10, &(0x7f0000000380)={[{@rodir}, {@shortname_win95}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x38e}}, {@uni_xlateno}, {@utf8}, {@numtail}, {@shortname_lower}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@check_strict}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}]}, 0x3, 0x2a8, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz8FpAkEUBuB/spuQIZd0kG0ipYg1WIQs3jxZyGKB4mVll0FsQET4vsPw/sfwwwsvVUvyt2vhck5K269vl+/Pmo/s7/+/hrHmpz40HE9J5v63xWFK+m2S/+sSW928jOM6HkpblnSb6dn3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7uAUAAP//+gYLHg==") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8028c7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000000000/0xb000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000000080)="003bc19023f60a390d1d5d1369c8e6691de68999f748fed4d75c7febf76b28f260298c9891d82eca0476b54fa4ccf434674d9228862685b127732f168950973c26ecf09a9e85f0e8f1f962e0f705af18e0de56530e4264b6cb72c7e3408fb665dd69b11e5d15ee032dee1a536f4a", 0x6e, r0}, 0x68) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 1.127707273s ago: executing program 6 (id=874): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x4c}}, 0x0) 1.12720659s ago: executing program 5 (id=875): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7f) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = dup3(r0, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x8, 0x9, 0x0, @remote, @remote, 0x1, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x1, 0x700, 0x9, 0x8, {{0xf, 0x4, 0x3, 0x29, 0x3c, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x9, "9af8b9937883f3"}, @timestamp_addr={0x44, 0x1c, 0x25, 0x1, 0x1, [{@private=0xa010100, 0x9}, {@loopback, 0xf}, {@remote, 0xab0}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10082}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv4_newroute={0x84, 0x18, 0x200, 0x70bd29, 0x25dfdbfd, {0x2, 0x20, 0x20, 0x8, 0xfe, 0x2, 0xfd, 0xa, 0xa00}, [@RTA_UID={0x8, 0x19, r2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8, 0x4, r4}, @RTA_METRICS={0x3e, 0x8, 0x0, 0x1, "b8d66af1c8870a9af6a0c0cd35baab4c437eaf3bce902e288403c61bd93651f0696a33a58f837fc8ddc75617765869da36ddefb4caec890de813"}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000540)="4ab0024fceca3d0fa0e08ad3a8b581f08125e89d6c01012955e393b8a131622ebd404ff25b6ed9495f4d94f2", 0x2c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000580)={0x6, 'batadv_slave_1\x00', {0xd8}, 0xff2c}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd09}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000740)={0xffffffffffffffff, 0x4, 0x7, "2a3d5ab0bd2e59475aba1cc18d7ef02077087febb4440883d469098e96b74d9339ba9f7e0bad3373f0f54971acc70cb6e0808a871ec19d2be55c1d8ebfa41717282d3f6356c410c34e773d6583e958c8d3e8f4f07cc093e1041965303c24d577ca5e551c1137ed77f5bfb32f23dc618290573f2c4efbf3f1a60024ab626310a28a8a18e266e2689bd5fde9db8d4f0b82c7565dcd23ff5d35d3fbd30f367fe9193c8e8e42b9b5e2f2d8cb295a064bd0b709451501a310c7cc0a184e28e0bceef6072e44572ca5904cc0792c6edad26b2217a0f99e4e93d1a38085bc3a93479126d820bca31b2add26df7fbd974e3772d76dcbae82624375"}) timer_create(0x5, &(0x7f0000000880)={0x0, 0x16, 0x4, @tid=r6}, &(0x7f00000008c0)=0x0) timer_gettime(r7, &(0x7f0000000900)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x8, 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) timer_gettime(r7, &(0x7f00000009c0)) write(r0, &(0x7f0000000a00)="c6ca4a2ab1f297b7495e76df3a702d7688e6cb5229c8360874802582a96e1805338fbf541c664864360522307748a7d25e7d13070ddc374b61b92fcda06ce1511a5c2ed7ca0fb34bd74cb7a6cb5fab62522a0683a5f0df5abc98401037a83efdd0462f74", 0x64) r9 = fsopen(&(0x7f0000000a80)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000ac0)='sit0\x00', &(0x7f0000000b00)="545fb51c8f0726caeae5b697eae86876b02a5eba", 0x14) read$FUSE(r0, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r12, &(0x7f0000002b80)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r8, {r10, r11}}, './file0\x00'}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000002c00)=0x86, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r13, 0xc4089434, &(0x7f0000002c40)={0x0, 0x47e, 0x1, [0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x1], [0x1, 0x6, 0x80, 0x8001, 0x9, 0x9, 0x2, 0x63d2, 0x9, 0xffffffff, 0xb, 0x8, 0xf40, 0x1, 0x0, 0x3, 0x0, 0x7, 0x5, 0x6, 0xac3, 0x3, 0x74b, 0x8000000000000001, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffc, 0x7, 0x6, 0x7fffffff, 0x2, 0x9, 0xddc2, 0xffff, 0x7, 0x5, 0x10001, 0x7, 0x7fffffff, 0x4, 0x800, 0xb5, 0x0, 0xa1, 0x8000, 0xb17, 0x0, 0x10001, 0x7, 0x3, 0x1, 0xffffffffffff7fff, 0x1, 0x7, 0x0, 0xb000000000000000, 0x9614, 0x10001, 0x3, 0x80000001, 0xce, 0x6, 0xb35, 0x15, 0x0, 0x2, 0x8000, 0xffffffffffffffff, 0x9, 0x8, 0x8000000000000001, 0x3, 0x6, 0x9b3a, 0x81, 0x6, 0x9, 0xb, 0x10000, 0x6, 0x792d, 0xad4, 0xf40, 0x6, 0x1, 0x1000, 0x1, 0x4, 0x5, 0x3, 0x6, 0x6, 0x8, 0x0, 0xff, 0x7, 0x80000001, 0x100000001, 0x6, 0x8001, 0x7, 0x200, 0xa1, 0x5, 0x0, 0x56e, 0x10, 0x1ad, 0x80, 0x5, 0x100000001, 0x8001, 0x1, 0xffffffffffff8001, 0x6, 0x9, 0x2, 0x8000000000000001, 0x9]}) 1.103132831s ago: executing program 5 (id=876): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f00000001c0)="d88e2a22ea52a57f9fd56f7acf9fafb79dffff54ca8e05d73eda237aed5ef67bf2adc75307681329982f13039286f97b7883a63097c7601449ab79732aafd0e9", 0x40}, {&(0x7f0000000200)="4ef3afcfec88e2e3588ca7db0601f09b518d31dedb50cab29d3c459cb9af915eb72afcc322cbe04919e3763fb96079550368d9fdca00aba58bca1b97116baa1d20d07f82c10bf88ba454731c56a066af9b24965d64571dfe503288371ab996a5d62c2dcc2cea6482d9b49837571111001026e0daa6bfdaf56b9bd690", 0x7c}, {&(0x7f0000000280)="faa4b90cdc59033c2b96951ba6129fe1f5b0d13cb8e83c89f96b68ababccd4b4058c4a6cd943318d0466e83433a711d0498a9b9666c67f4acc8cb5a46d11bcd972a9da9ea6fb23e4f25bb07154c33e2e280d8fdbc457f6245ee8ec4c0de25b5b96cec2854a7811bee50b7eb0147d7b32460688547f9d5d229c23b31fa3f19d577eb9aec77a58f1834619165386969a0a89d8cbc19e49cf7acafe4df23a012d02dc290b484572d1e5d1c70691caee49", 0xaf}, {&(0x7f0000000140)="f49063cc4456d306fa74ff187d68164924a5cd8976071e046a6a124740fac9148165c929cd2edb1bdbc44392ba685d87bfaae81b86fddfb5a908c78d2766965955825d4d7e77269db982d12367f170", 0x4f}], 0x4, 0xffff, 0x0, 0x4, 0x5, 0x2, 0x6, 0x7}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x260, &(0x7f0000000480)={@random="d3f34746b238", @empty, @void, {@x25={0x805, {0x3, 0x8, 0xf5}}}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) setreuid(r8, r9) r10 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r5, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c706f72743d323034392c6d6f756e74706f72743d323034392c70726f74d16f3d7463702c6d6f756e7470726f746f3d7463702c6e6f6c6f636b2c736f66742c74696d656f3d312c72657472616e733d31005e0091c52855a12ee46ee7934a0986f937b2cfe49cfa9fbfb44f2bb5c4fb91f07a5a38bcebf3c7b87dff1345f928751c161fc8328e1874b7a256b1a785918bda0fe1977d34e9e14551f2bf8096fd90b35f9088251cd7bf86bfa0b3c9951bec302040993796e5f1c7ad5d73f997e7e3f6bc49d1e47520d95b0907aba916277cc5b1"]) mount$tmpfs(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000940), 0x2, &(0x7f00000004c0)={[{@huge_advise}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x6d, 0x70, 0x36, 0x33, 0x6b, 0x17, 0x65, 0x65]}}, {@size={'size', 0x3d, [0x34, 0x65, 0x39]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x32, 0x2d, 0x78]}}, {@huge_always}, {@inode32}], [{@hash}]}) r12 = accept$inet(r5, 0x0, 0x0) close(r12) 1.059590937s ago: executing program 6 (id=877): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4097, 0x1001}], 0x1}}], 0x1, 0x40012282, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 769.250953ms ago: executing program 8 (id=878): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x105800, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x1010, r1, 0x2) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0x4, 0x770eb11f, 0x5, 0xde3c}) (async) r2 = accept4(r0, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000280)=0x80, 0x800) (async) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000002c0)='net/rfcomm\x00') setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000300)=0x7, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000340)={0x8, 0x5, 0x0, 0x746, 0x3, [0x0, 0x7, 0x2, 0x5]}) (async) fcntl$notify(r0, 0x402, 0xd) chdir(&(0x7f0000000380)='./file0\x00') (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x7, 0x8000, 0x6, 0x0, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={r5, 0x9}, &(0x7f0000000480)=0x8) ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000580)={&(0x7f00000004c0)=""/137, 0x89}) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f00000005c0)=0x200, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x3, 0xf89d0, 0x22ce36}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x6, r6, 0x0, r7}) (async) syz_open_dev$ublk_bdev(&(0x7f0000000740), 0x0, 0x68001) (async) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000780)={0xffffffff, 0x80000, r2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e23, 0x3, @private1, 0x7}}, 0x7fff, 0x6}, 0x90) (async) sendmsg$kcm(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000880)="cf5b6667d4047bc1", 0x8}, {&(0x7f00000008c0)="5268e4252e35544e932b722b1f934625341ac7d4a302fa870a40194f88b6d69419e5bc2f70c874f4b6cfdca1d1752d1e669ca28759bbceb8296ea9e152e044e4945644a971f99c3b984313aee056ab5266f63ddf5aea168e1bba9e39b52d49612c575e6780409bb879c5e7a20fef7a1e38cdd183bd81692f336255ad61f941c81d302842469c60b90078f04455fb991c626745592fc9b05f8c43ec35f6b8c722a21d6f6e4bdefcc469af0b5619c935dcd0d18865b02213b8e31e966af2359dcf7d0360e483fef133d460275022ccd7833e88f930a94c8832a210949e8b137613d004efd74477e63fa9acf4ed4ede8ffba6ff4b1d8a9cd40dfca57e59dca74f3fb5b70bc9fd00e4f24e645f0f3e229ff4b7f45af7686bda6d0bf366f3c2611043f014cc40d900bb4bc7340b7f4e577775b069a95247b5e00324457ce5bf40475057cb97b0b35aeef8533bb3b23d2d6ac8ffc67cdf05bf331f871e217a258f96ace40e28480ade6b38f9a6d53a07fb9f889b50ffaa367da5bd4639437130a5bb0bc919ea729d72fa114f73bf1ef703ec0e697c49e35300574094562cca84ad435462826154d3d2588d865faac21d37ed9a46240e4ec2848773c4635538f4c848b90c0622629a28cea229913b1bb9ece526c8b8d25f5db1d0e2435ce73742ab2f343edbd7d291b54b3d82a7a998130a0599dfed5afdc1d814267c429840fd8b1ab0be8c9ae54200b50166306551738ff459c83c9c8ef556aa4e44d2d2ac2f130b40ba06b9f74f802d0e7df44a92d4109758066f9a8919eaad4afc4ab91920bfc23a8ebd15ee756ad5d0ddb5c1464493f482d3e3839f800ec055cd58b6747b60edbc30e4ecaa14590dc64bfa4a410e6bb4cbc7ace3cb4a0566767913f65df1dd90b86e57807072ab715c8c23da15e65dc322a76ba0432e6c2b247ff85511ff3be88164ad26badcef3bf084a8050c203000aa4aa062bc3ee9607447259960f066991af2a58b8f8e5d3d0138ab0664276ee78187dd8ae0e3035702047e3f9d15fbb40257f1fa18fbbe6ad15b33a13d32dcc8929b8334079b4115d8806edc9f51da2da7b64f5ba5dbbd9c7dd68899b1093268ea8246f24b0756b9981ffc9b5786115e725d2821208de68a7eae6c22f47806964ac9b3366344d7b3d01f1192d5a64b24685df546de00ff2957f7f03808f8afba6839d9db9f8a4a77d2755b0e9dee93d3a93adfad809f64010eb92c68f5961b54a5b08adc5515eec718bab1ed0ca21eafa4df94ecbdcb05512daa849245b56952402218aac72552ae96a1090999552ead1bed3e1b539d1c647e5f32ab923f6904e747e08c2b7a0f0fc30fa6222a9bb7dde4b873e86d9baa22591a1c60a05c8fef346bf24fc20d341b833a7b1d3609e37ab09a71502752dd14a676c49d36a001091d7fa0d44e1953feff2787fe26ea75312b15fdd708d9f4cf9c372b30f9d73f7574ccc59d1d2a633061e12bc08d7a52ec75f0a4a88c73d6f9e32a5a1854436b37272a2f877ed15ec9cddb96a365a0a83bd425a186c8198f153677c8aaa5e0abe40355b7f207b71526a69a8f303594125f78f5d3bf1ea03f4bdd03daac822de2ed9ce6d76da3d74ab246e18bd89808a25c0eab6a812bd543fd450c0444c21d3976b5137a1e05a779504d78649eb30477a3e0fe37062032fb238b4b62504d2d49b181fe70dd9b625e7132d715a726f32d2634cc338ba18587d65abe59e731965082a5909b3e327201219c6d117a527dec485e8ceb62c26d7f90a7a715900493cd05211b3bb57e937d01949fcbd59c7288836ecba55bb13e554483a72d941e56ea1f7bcb78b916f2396816c1d08b20607059681957542c7b6764690de790e8fc62d374537a848b90cbd9fd6169f72d50f76e8f182547833c3b2f24017cd3d642683bd75859a8220a2e6795a45368fb800d539a53b05dcec55492fc2f33413968fdfce2bfe71fc6745ad86bda9e3233938c554ac407f7fb8961c861b20480519f9eec25c2e2cdc50389131c569fd9ea0d41a1d3ab5a581f04d1d0483db16d9662bee0dcbad9d7916aa9cd99e759003ee101f3eb60abf17d00636d2a5e400a3e4247d3d7bea988a1904ca0900cab66894f46f562397c580a38c32fcb20ff562fbbcf2d6a7636b388151c1531b0b0afe53241e8f25f378f539af8fc61c74a5e15067670ca4f58d1d5c14d18532aca5830d634cfd8efb3e554c1149383332170e7b050a5c55a6919616096eb9fe52a1d9acc76126ee6a3a2d769a5714fc2fea0982f5915ee2fed7360d73b3a57acffa3be4b739350d430618116d9ca9fc0d54d3f3bf5821f60f0ce8832f6b57328efc0bc8b5572ed866773929d6d3d02c5f2f3759fcbb480794c86c859532fa4f7566a20fada7311c749abe65518bf8ae50145ba96f145f78b9e6210342b786ad86ee701a9c236d6b079f777d1b687d17394db2d21ce9ddac3ce4ec9c7b2a94eb637d813e09f567e4140d45ee48e92ad95506e83c3c6fc09dc588200838911a830bfb25aa75eb02ca27d56e58438a8619300fedd2fe3c2e7633dd2f1b10b2ad4776e7151422daa3dfedaf9565d97a8d6ac11fbee8059d95f742ee65856e2b00095ad73eed4f9ae31b0bd2b87e1f03e92b4762eb167d1972ea99c2235556b39111a989b1221b2c8e0938a9eb1b61bbee184401efaa96bef5fc88d4753bb7ff08b704cf6aeb0945e9c77b41d49f09760c25bb8d8bd1e5fc9c6680bf3045d766b9f6cbd20436d0e5acda5c0d0c20488783020cb2cac8935b1cc6b706cb514bdae64de4efcc6c7ea8c98a8e96d2864c728a79d19a850fea6a4f6bdd0406cd2a921616fa6c76fba761862e1bac9d82a90145b53378977b1cdc519610f06d8e7f7aae84d6f3b7bc4659aa764357787d154d14e5a9d561519883b6b06790fc18f52d18fbb943fdfde22cf239355bbd2541e36891482adb499150469e6877b8aa3fe28b482129b4b3576bb12dccd381f1c86aed1ffecdd2fbe02642568644641a3f622ef43645c61f250c4f76539efbc2e51cc005c78ada288927c173964605fffce6ee9acdc70f42e7844de13aee108684e0323ade134a7fe555ab90591167ee0db3645ed7852a43331cdb0690ae25da9cfc52d9e0c564f9d83fc8aba1921a7fd3edf2430c489781f1d8586fccdf2828fdf5d6f3a2c8d37bb4a0aec8976719f1e1a3b50975ed634a571932b5d3162ded910ace654631b673b6ef692af6882222c5a340cb2bd57835225df8c620df55cf1a78290e99229d16d095c2646c646abb249bfaabd419effd8505eece5fdf1e0771623452397c160ae7cfc92f1e21e8385fd6decc1ec958d53ef9445aabbe6601835abbe05f0955f11317f986b5fcdbca92d2edf91b246858d6e2e06a3bf49ca794c58b6f041418b45b5382835382aa1c85926436fcdcaefcf33cf7bf232bbbef7a8a51bfaa7cbf14d07d8b80cf90638eb194e98d121cf08a0ad870a763119f76f1f6eeabb1c2aba76ca60774c8c4037c8e2e1e0c5391e78016563901559cbd7c2bc2064654fbe33e40f7c4e134321ad027f6acdbb30da3ecc19e682a1a6c061367fdd96096f1bf4936f37fc365135c05445af19a474a68975953b9c53802a86aba48b55d7de69e1b803f14afccec30a19a00b60dee659f1bcf9a1050fb3eeaa73daf15cc465929da57d461cbc256ac38a987893ebeb067cd6c6dfde4dbabb49139a59c0244a64465a1809f655b093ce58c31ef92d406c5ac4acd9e4cee2e69f117b7c887ce7c8600dc9d9347fb280d91c4bdc134a2f2120ad15d8cb7df00b7fc0fee23ac51c816305d39cb6036ebd5ebc205c282d96f20068091ab585451923be9aea4e84af508d0b04d2ef6fbd72bdee910eb24e177d1c0b3ac2c5b03c486f8995e33d5972dba70a7e7c9df575b9caa631a5cc40d643ecab28ee8ffdf54c89fb06a318aeefd8d89326d3eb13b724a03d6dc4ca0f5c144f26611fa10619aedf901a734d25fbc4430c721ff6b5742727c58ac9bb19615689fe3e8aee18ee5152e9760f458d6c1e143bc6e52a7b81530dc5ae2b88bb9a9a370e39a9a44d1f0444d4377fcdf6075341ebcd598e46cfdde7a348a60b7d7bceb66c39a46c034a0d8575da53078c5612d96321d21faa148e98e9d02539ca1be6a0b06bb5be327193f8f03f9100aa0c8fcf9caaa8caad9b74907c2eeba4275ba9d45399194671e9ced59368de6219c3f50432e8a285145302c250ec797b00cb34defc390b75aeb987ec094647fff390a2c3d24362f7fedbde11c8b0d9520b2362abdadafa6ed0b033b0724c4ca0730bc791f384e0fb88032d37a34a9f75397ef879851a31491d2caf94bfac5780e739178a1a86d96c2d475176c171fb38874473c5a970023450804ceae4e6ee2e0ad7943b997a8c9d32399b54d25444cb7667aaeb2e214887d13be38a8da24434f8d78f2da74635e0f583e05989835024419d90c9d72669ac0f7056888b2e9e7eeae75c86ba5e84a13bc6552625813b32eee548ced20526e2d399bf0173da2de99f5cb98c1ef78872e49c351d9168d37cebb08866967c88f58468e4882bd6ee0fee8ba204ed5c8f6ef705b72698b1610ca2851dbab00bcc7067fbf3133dcc75f563c92c41a7d66e8b282f92a437e559922e14b050d8ab0fdfe8095a9e0fabea9e6e8c86677f7790fddc8d0eefd0cf757936660c309b0e396640a226ecd28d9824248a0c047e580aa00790e99e25ce5ea697645622c4dc4c8aa876b6db0ca5ae54ab63ec7e43250df7aa094bf31b89b32f044ec44063870989937ec3975b756cf3bb4e403e12010d5c3ff6dc21f7516d54910d26b58fc7e83cf9a3627074fcd1762005e19d3bf71d1e2136981c1355eab7e040715bc4444c9c8f8d193f9d35c6c89f0cfa8395b830a26427a784af9e63e8833994c8c5c79bd591e8e109551035c9843ff27333ef0acfc4615087d0d2e16c8bbc420e3e91c893b9048a2d00ecb9ed63b45f80dc832b7685f694dce462064011496adcad5c95a1fcbb2782e3c8e5039ebee34dfa8075bc7a5c9ad7ccfb4f12f91861d90198be01e6ab62a257af318e3d2c6a3e183d934eba436477d94b0999f05868083d89cdb8598e7cf3e46dcd52373a28286627d44a6586877f8be5f7b9780e0ec6583e94dda8deb9be406829273bcce0b8c44382928dc1b666e1faeba671b4c7c658434b2b89ee8a9ccd4fd1548da897403c683316834a1a24e16f3559bb93cb8a0d3d2c6d9f6e217c020283f58f757c0ad551e27fd52be1eb94e1003d2f49f828a4dd4001dd47b13427f4d35cc012673b0efaa7905971426a8da53577671508c99a9c9b19401beadcb66e51cb54e843fc6cc332035a0f2bb0ae3c1ea8d2ab8232860266ff1044f707b7114ba69dcad688d335ce793e32d9b8eab645d1b427257ac98375f9255fe5c5aebb0b3e9e9b1d4e369107b5079ed1fb54b9bbd4145ae61a4ae4aefb4aad57a1434e416c621c9a0fdfac14f5e8ec32b4d93efffc67e78b00d37507bc53c025972a76846546ff758d3ee83b716ab6ce8a8eb5e2608d47fc7bc6feaac334b4ad88f47a1e0f317eb8451e62e452bb738db06a2cf669b9e3cb5c1c88f2dc8c3a2626c990c4e1bca7110fb01b35d677eb613d05b531884453b5df91dfdb76fd99c33c6100d4bb8b70870a2ab23a7ff7ba68a98694486469e6c8f703f736a134bce1b6675f1c557c48b243c1b8bbbd50d837fd31a126310cc5430841b95fc290734fc9e57504bdb5cc2e18ebb6a4ca26b7c9a7a61bfacfdf32929b506f0b60", 0x1000}, {&(0x7f00000018c0)="2ec92080c910a79b5869d4533a5b75e7b5978f2896fbe0aa5be0fe24c1ba91ccd2e70ea61e8873dbc39e755b33f1de8a3b044a8f52b6ccf9486c74", 0x3b}, {&(0x7f0000001900)="106e167dbf429ebb4b34868048328119ee97f2927a887d7ea8d97626fcea221dcd59263ac0431f8cf78615b95a4d6406992b87d4fd130e679987f6cfec1b3ee13866711d387f2da4e10b3183f1d3586214bab10bc04a3cefcb6e6a4d45f9ddb530a9a1a52fdd6c54240c7a2313716838b4ffa4374ca746705336e04e76ddc36d825636f857e8d60c0027045f360dbaec4ee0c3259db8d7e948d2c081ed265a2b71553affb597b6a788cf1959233835ed72", 0xb1}, {&(0x7f00000019c0)="e5b23407adf5d3f52bb78211d7ecf09c7977bae2476ea196f7ff65d1a48ac8d4fe97e8de187136f505ed935645529d24e95b7c7f3edc171f13017fd1e5427b0e06b678c90ba561c504746b77e9e6424d50f02d1d8d55cc7d3bed8b438ac959cdc390f7c6e0c5fd09f64257e1feb345ae9db826199bf70f072eb1f1c0eec8addff69457797312d0f9675597125e3b6fd6156a762a02a966a2e4e1042a14ed3fb01d35e6152fe1dfa78aae", 0xaa}, {&(0x7f0000001a80)="abe4278f26913c6558ac5288b6639483bb3856878f6ab351a0d279cdd6a61de63df31e555bd8c52899544333c99936fa32c162efc1a1b9d75d448d52129af41274a954ea7e747ffa5783dbb7c49d468cae5bf0303ddb095c6861f8349a36cfb1afc0e47fa13ea48fb7208530aaaf3c79817284e5dde1a1ab3e7198cc983321b35af228f054143091", 0x88}, {&(0x7f0000001b40)="b0c23e6c8d43833f4b1a6841c3471ed17fd592f320ae27f013c46b44f82390186acf9b2341918c5d4720d05fb028a53b899b50aa7fb892794e8da19e62392fd15d309ecdc8b44bd5d634b306c4f7d80d2cef6c838dc1afbb85151dcb5536b146549b47769d9940b965682142234a15daf0f59214992b6afef3bcf03249b56227d90cc714b07a3e5faf0da53915dc7fa93daad331eda9f5f89aa61c623966592cc632dd40486d11f13264c3724c1e68405f71abd19d6c50f9e11c6583c509e03560aa75aeafc3806a9e276e40ed65a4c8d49479cef02e548acd9d92ff16d78b746a9dd2ebce55e60d8bc61192da6f", 0xee}], 0x7}, 0x10) (async) get_mempolicy(&(0x7f0000001d00), &(0x7f0000001d40), 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x2) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000001d80)={0x28, 0xd, r6, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xad2b}) (async) ioctl$XFS_IOC_GETBMAPA(r8, 0xc020582c, &(0x7f0000001dc0)={0xffffffff7fffffff, 0x5, 0x0, 0x7ff, 0x40}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000001e00)={0x2, 0x78, 0x6, 0x800}) socket$xdp(0x2c, 0x3, 0x0) (async) bind$bt_hci(r2, &(0x7f0000001e40)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 768.85298ms ago: executing program 37 (id=878): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x105800, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x1010, r1, 0x2) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0x4, 0x770eb11f, 0x5, 0xde3c}) (async) r2 = accept4(r0, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000280)=0x80, 0x800) (async) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000002c0)='net/rfcomm\x00') setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000300)=0x7, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000340)={0x8, 0x5, 0x0, 0x746, 0x3, [0x0, 0x7, 0x2, 0x5]}) (async) fcntl$notify(r0, 0x402, 0xd) chdir(&(0x7f0000000380)='./file0\x00') (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x7, 0x8000, 0x6, 0x0, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={r5, 0x9}, &(0x7f0000000480)=0x8) ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000580)={&(0x7f00000004c0)=""/137, 0x89}) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f00000005c0)=0x200, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x3, 0xf89d0, 0x22ce36}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x6, r6, 0x0, r7}) (async) syz_open_dev$ublk_bdev(&(0x7f0000000740), 0x0, 0x68001) (async) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000780)={0xffffffff, 0x80000, r2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e23, 0x3, @private1, 0x7}}, 0x7fff, 0x6}, 0x90) (async) sendmsg$kcm(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000880)="cf5b6667d4047bc1", 0x8}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="2ec92080c910a79b5869d4533a5b75e7b5978f2896fbe0aa5be0fe24c1ba91ccd2e70ea61e8873dbc39e755b33f1de8a3b044a8f52b6ccf9486c74", 0x3b}, {&(0x7f0000001900)="106e167dbf429ebb4b34868048328119ee97f2927a887d7ea8d97626fcea221dcd59263ac0431f8cf78615b95a4d6406992b87d4fd130e679987f6cfec1b3ee13866711d387f2da4e10b3183f1d3586214bab10bc04a3cefcb6e6a4d45f9ddb530a9a1a52fdd6c54240c7a2313716838b4ffa4374ca746705336e04e76ddc36d825636f857e8d60c0027045f360dbaec4ee0c3259db8d7e948d2c081ed265a2b71553affb597b6a788cf1959233835ed72", 0xb1}, {&(0x7f00000019c0)="e5b23407adf5d3f52bb78211d7ecf09c7977bae2476ea196f7ff65d1a48ac8d4fe97e8de187136f505ed935645529d24e95b7c7f3edc171f13017fd1e5427b0e06b678c90ba561c504746b77e9e6424d50f02d1d8d55cc7d3bed8b438ac959cdc390f7c6e0c5fd09f64257e1feb345ae9db826199bf70f072eb1f1c0eec8addff69457797312d0f9675597125e3b6fd6156a762a02a966a2e4e1042a14ed3fb01d35e6152fe1dfa78aae", 0xaa}, {&(0x7f0000001a80)="abe4278f26913c6558ac5288b6639483bb3856878f6ab351a0d279cdd6a61de63df31e555bd8c52899544333c99936fa32c162efc1a1b9d75d448d52129af41274a954ea7e747ffa5783dbb7c49d468cae5bf0303ddb095c6861f8349a36cfb1afc0e47fa13ea48fb7208530aaaf3c79817284e5dde1a1ab3e7198cc983321b35af228f054143091", 0x88}, {&(0x7f0000001b40)="b0c23e6c8d43833f4b1a6841c3471ed17fd592f320ae27f013c46b44f82390186acf9b2341918c5d4720d05fb028a53b899b50aa7fb892794e8da19e62392fd15d309ecdc8b44bd5d634b306c4f7d80d2cef6c838dc1afbb85151dcb5536b146549b47769d9940b965682142234a15daf0f59214992b6afef3bcf03249b56227d90cc714b07a3e5faf0da53915dc7fa93daad331eda9f5f89aa61c623966592cc632dd40486d11f13264c3724c1e68405f71abd19d6c50f9e11c6583c509e03560aa75aeafc3806a9e276e40ed65a4c8d49479cef02e548acd9d92ff16d78b746a9dd2ebce55e60d8bc61192da6f", 0xee}], 0x7}, 0x10) (async) get_mempolicy(&(0x7f0000001d00), &(0x7f0000001d40), 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x2) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000001d80)={0x28, 0xd, r6, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xad2b}) (async) ioctl$XFS_IOC_GETBMAPA(r8, 0xc020582c, &(0x7f0000001dc0)={0xffffffff7fffffff, 0x5, 0x0, 0x7ff, 0x40}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000001e00)={0x2, 0x78, 0x6, 0x800}) socket$xdp(0x2c, 0x3, 0x0) (async) bind$bt_hci(r2, &(0x7f0000001e40)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 663.316204ms ago: executing program 1 (id=880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/8, 0x214000, 0x2800, 0x0, 0x2}, 0x20) 443.988467ms ago: executing program 1 (id=881): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xef, 0x0, 0x81, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x0, 0x1, 0x5}}) socket$packet(0x11, 0x0, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xef, 0x0, 0x81, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x0, 0x1, 0x5}}) (async) socket$packet(0x11, 0x0, 0x300) (async) 341.147119ms ago: executing program 1 (id=882): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xc1ba, 0x7, 0x7}, &(0x7f0000000100)=0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file1\x00', 0x2000884, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6e756d7461696c3d372c757466383d302c6e6f6e756d7461696c3d302c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e39352c757466383d302c00c896e917c71e0bc4f8015d017508424bcc5fd2b9fab8e24183aa7be502a02758a136a6f34c64116f9342ddf9f021e37560546ee96cf5e0973dbbd4b12ccaca85751d0f1c34c9d841472a0392c5dfa13b93e0fe05e81a86720629347c475fb1cdf7a2b2e28269709687ae74eb9fb99a1df4ff7be8301e3b0b89ec2e7e6f69102830b3e75e345b3e91951b0cd32577bfa8fd0a32229c85851c51ba40b939d9ce630e4d02998d8c331225e6a6b5fd516275c4f460f6c3d33da3aedb921a5140b07062994218ef1c6ba49694139c0fd9009914e5ce15b16f7c7fa1c176f911675b26f32925355d3d734bd6344dd61005200e0a127c2f5abb3f889a1910425bbe096f7f9608b4c9bc343d95cddf9e"], 0x2, 0x289, &(0x7f00000001c0)="$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") r5 = syz_io_uring_setup(0x68e3, &(0x7f0000000080)={0x0, 0x7977, 0x80000, 0x9, 0xfffffff1, 0x0, r2}, 0x0, &(0x7f0000000100), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0x31) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001800010028bd70e000fedbdf251d01070008000a", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="150003000100008007010000d3698ac6600613060400000008000e00", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) getgroups(0x1, &(0x7f0000001d00)=[0x0]) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r12, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f00000001c0)={0x50, 0x0, r13, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) sendmmsg$unix(r8, &(0x7f00000041c0)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="b80f8f7213c7f2c5b042c1f56c09611618ec3d86bf88884c12240365c4d13d4ec5371ee4f0a3a41ee1ba2e76bdd7c16608c2e8f218fa772d6d46ea68a5c0d1ae2e3073c534d7aaf96ff94d640adf7efde36ca79f3f0a6af7b40c20cc4e4c6e572e715b160953d69be5c4517d65c4811d4145cbc0", 0x74}, {&(0x7f0000000800)="5d2ab328bf95c315c119955b814f7058c430ec2d55ef11e0cba07261906c7045efbd3206a344a9b380edbb716affe2b1da58431f8b03719181d20aa071edb229c40a6c5c32d64a577c9179430694388cfc565592a14e9fd58f3ac24a82f6da68c05f832f77b9d85a26b5dced16143d4630c5b969b6db0a0c86172ddc17abe3c50e4efabf7da43898635fa691a3491890d9efea44524703721ebb7a035809fddebae4bb06b9f7ca0ad61f5b3709e691428304f565860f", 0xb6}, {&(0x7f00000008c0)="efec8fc01a9696f183f229c2b89bd0b288ec38484787e4e4234ede27247972fe79f9b5e8e344f4e5c2473b958e0e7143dd84a83b7f3d0f52113b7f26f683c9b6", 0x40}, {&(0x7f0000000900)="52b8bb365805555bd92cd9af20d6db63bfbfb8d1e67c66bfb1acc341842a29be8c3437cf8c1f6e7ec271fbe405435f1b5f9a9f92e274424e585d845760fb65", 0x3f}], 0x4, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}], 0x30, 0x20000000}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000a40)="8bed05d03984c88c9ea76fd825596db8d5b43f412c1590a9", 0x18}, {&(0x7f0000000cc0)="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", 0x1000}], 0x2, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r6, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r4, r4, r7, r5, r7, r2, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r14}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0xe8, 0x4000000}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r15, @in6={{0xa, 0x7, 0x4, @loopback}}}, &(0x7f0000000040)=0x84) unshare(0x2a020400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x4000, 0x2, 0x4, 0x0, r5}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 233.123808ms ago: executing program 9 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a000000ff02ff00", @ANYRES32, @ANYBLOB="060015"], 0x44}}, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xd, 0x2, 0x7, {0xa, 0x1001003, 0x8, 0x870}}) 172.850072ms ago: executing program 5 (id=884): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9) 101.479516ms ago: executing program 6 (id=885): r0 = socket(0x10, 0x3, 0x3) write(r0, &(0x7f0000000000)="240000001e005f000cfffffffffffff8070000000000000000000000060005000d000000", 0x24) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/129) 101.188848ms ago: executing program 9 (id=886): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x1ff, 0x1000d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x2}) fchmod(r1, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000580)={0x10, 0xd7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) 68.164227ms ago: executing program 5 (id=887): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket(0x28, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r4, &(0x7f0000002a00)) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 0s ago: executing program 9 (id=888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x502, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0xc010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251500000008002a00090000000c00060001"], 0x28}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 0s ago: executing program 6 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/248, 0xf8, 0x0, &(0x7f00000004c0)=""/81, 0x51}, &(0x7f0000000580)=0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000001f900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): olve the problem. [ 53.043058][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.064061][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 53.117765][ T5928] hsr_slave_0: entered promiscuous mode [ 53.119013][ T5928] hsr_slave_1: entered promiscuous mode [ 53.232987][ T4717] Bluetooth: hci3: command tx timeout [ 53.247927][ T5928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.251013][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.251794][ T5928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.253891][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.254709][ T5928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.257572][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.258667][ T5928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.260729][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.318649][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.328016][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.334824][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.334882][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.363269][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.363325][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.384157][ T5928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.384198][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.486363][ T6069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.486394][ T6069] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.495354][ T6069] EXT4-fs (loop5): 1 truncate cleaned up [ 53.501596][ T6069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.505230][ T6063] loop6: p1 p3 [ 53.505230][ T6063] p1: [ 53.507905][ T6063] loop6: p1 size 16777216 extends beyond EOD, truncated [ 53.515707][ T6063] loop6: p3 start 3036741376 is beyond EOD, truncated [ 53.592639][ T6075] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 53.660551][ T6075] netlink: 84 bytes leftover after parsing attributes in process `syz.0.240'. [ 53.678504][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.696703][ T6075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.698861][ T6082] EXT4-fs (loop6): Test dummy encryption mode enabled [ 53.701465][ T6075] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.701550][ T6075] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 53.701570][ T6075] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 53.701583][ T6075] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.240: bad orphan inode 768 [ 53.701598][ T6075] loop0: lost filesystem error report for type 5 error -117 [ 53.703089][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.703103][ C0] EXT4-fs (loop0): initial error at time 524341: ext4_orphan_get:1425 [ 53.703120][ C0] EXT4-fs (loop0): last error at time 524341: ext4_orphan_get:1425 [ 53.705341][ T6075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.722944][ T6082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.746604][ T6075] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 53.753369][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.772409][ T6075] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 53.836172][ T30] kauditd_printk_skb: 101671 callbacks suppressed [ 53.836213][ T30] audit: type=1400 audit(524341.615:93951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 53.836235][ T30] audit: type=1400 audit(524341.615:93952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 53.836251][ T30] audit: type=1400 audit(524341.615:93953): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5941 comm="udevd" path="/dev/loop0" dev="devtmpfs" ino=639 [ 53.836267][ T30] audit: type=1400 audit(524341.615:93954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 53.836281][ T30] audit: type=1400 audit(524341.615:93955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 53.836295][ T30] audit: type=1400 audit(524341.615:93956): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5941 comm="udevd" name="loop0" dev="devtmpfs" ino=639 [ 53.836309][ T30] audit: type=1400 audit(524341.615:93957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 53.836322][ T30] audit: type=1400 audit(524341.615:93958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 53.836335][ T30] audit: type=1400 audit(524341.615:93959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5941 comm="udevd" name="block" dev="devtmpfs" ino=892 [ 53.836352][ T30] audit: type=1400 audit(524341.615:93960): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5941 comm="udevd" path="/dev/block/7:0" dev="devtmpfs" ino=1041 [ 53.875102][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.900716][ T6103] journal_path: Lookup failure for './file2' [ 53.903485][ T6103] EXT4-fs: error: could not find journal device path [ 53.976454][ T6112] set_capacity_and_notify: 9 callbacks suppressed [ 53.976651][ T6112] loop1: detected capacity change from 0 to 128 [ 53.985628][ T6112] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.012030][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.279408][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.401403][ T6138] mmap: syz.6.248 (6138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.446382][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 54.455324][ T5928] veth0_vlan: entered promiscuous mode [ 54.478287][ T5928] veth1_vlan: entered promiscuous mode [ 54.514681][ T5928] veth0_macvtap: entered promiscuous mode [ 54.521307][ T5928] veth1_macvtap: entered promiscuous mode [ 54.543639][ T6148] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.549808][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.570518][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.597966][ T6150] loop6: detected capacity change from 0 to 256 [ 54.612720][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.612836][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.634172][ T1404] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.708761][ T3824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.708791][ T3824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.709725][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.709736][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.740246][ T3824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.762678][ T6158] Bluetooth: MGMT ver 1.23 [ 54.766523][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.768680][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.776954][ T6159] macsec1: entered allmulticast mode [ 54.778132][ T6159] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 54.780128][ T6159] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 54.782170][ T6159] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 54.784420][ T6159] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 54.807197][ T4808] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 54.861267][ T4725] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.928354][ T6179] x_tables: duplicate underflow at hook 1 [ 54.930910][ T6179] loop1: detected capacity change from 0 to 128 [ 54.932612][ T6179] ext4: Unknown parameter 'fsmagic' [ 55.063762][ T6198] binder: 6194 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 55.063798][ T6198] binder: 6194:6198 ioctl c018620c 20001400 returned -22 [ 55.183236][ T6214] pim6reg9: entered allmulticast mode [ 55.202380][ T6196] loop0: detected capacity change from 0 to 8192 [ 55.357947][ T4727] Bluetooth: hci3: command tx timeout [ 55.480465][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.270'. [ 55.481797][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.5.270'. [ 55.511471][ T6239] bond1: entered promiscuous mode [ 55.511675][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.534724][ T6244] loop7: detected capacity change from 0 to 2048 [ 55.587039][ T6244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.593875][ T6244] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.271: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 55.654903][ T5928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.702240][ T6261] netlink: 40 bytes leftover after parsing attributes in process `syz.5.274'. [ 55.741292][ T6269] tipc: Started in network mode [ 55.742528][ T6269] tipc: Node identity 863306dfbb8, cluster identity 4711 [ 55.744850][ T6269] tipc: Enabled bearer , priority 0 [ 55.746506][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 55.746649][ T6265] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.749876][ T6270] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 55.752253][ T6269] syzkaller0: entered promiscuous mode [ 55.754198][ T6269] syzkaller0: entered allmulticast mode [ 55.757515][ T6269] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 55.784683][ T6269] syzkaller0: mtu less than device minimum [ 55.791779][ T6268] tipc: Resetting bearer [ 55.843821][ T6268] tipc: Disabling bearer [ 55.932777][ T6275] input: syz0 as /devices/virtual/input/input4 [ 56.065503][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.283'. [ 56.068544][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.283'. [ 56.123613][ T6297] overlayfs: workdir and upperdir must be separate subtrees [ 56.246935][ T6303] 9p: Bad value for 'wfdno' [ 56.460837][ T6308] loop6: detected capacity change from 0 to 512 [ 56.463255][ T6308] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 56.484883][ T6308] EXT4-fs (loop6): 1 truncate cleaned up [ 56.485353][ T6308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.531238][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.555055][ T6317] loop0: detected capacity change from 0 to 8 [ 56.564603][ T6317] SQUASHFS error: Unable to read inode 0xa7 [ 56.572107][ T6317] netlink: 52 bytes leftover after parsing attributes in process `syz.0.289'. [ 56.574453][ T6317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.723855][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 56.823079][ T4727] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.823689][ T4717] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 56.982048][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.294'. [ 57.005008][ T6352] loop7: detected capacity change from 0 to 512 [ 57.042082][ T6352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.178965][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 57.234498][ T6366] loop7: detected capacity change from 0 to 2048 [ 57.246841][ T6366] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 57.438723][ T6331] overlayfs: statfs failed on './file0' [ 57.474295][ T4717] Bluetooth: hci3: command tx timeout [ 57.510845][ T6380] loop6: detected capacity change from 0 to 512 [ 57.512902][ T6380] ext4: Unknown parameter 'appraise_type' [ 57.585091][ T6384] EXT4-fs: Ignoring removed bh option [ 57.600239][ T6384] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.732760][ T5928] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.737302][ T5928] EXT4-fs (loop7): Remounting filesystem read-only [ 57.933542][ T6408] ip6gre1: entered allmulticast mode [ 57.935190][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.086897][ T6421] __nla_validate_parse: 2 callbacks suppressed [ 58.088535][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 58.137942][ T6421] netlink: 64 bytes leftover after parsing attributes in process `syz.0.307'. [ 58.527377][ T6434] EXT4-fs: inline encryption not supported [ 58.533232][ T6434] ext4: Unknown parameter 'grpjquotasquashfs' [ 58.703341][ T6444] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.313: iget: bad i_size value: 38620345925642 [ 58.703394][ T6444] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.705934][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 58.705949][ C1] EXT4-fs (loop6): initial error at time 524346: ext4_orphan_get:1399: inode 15 [ 58.705969][ C1] EXT4-fs (loop6): last error at time 524346: ext4_orphan_get:1399: inode 15 [ 58.715731][ T6444] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.313: couldn't read orphan inode 15 (err -117) [ 58.715770][ T6444] loop6: lost filesystem error report for type 5 error -117 [ 58.815590][ T4808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.940281][ T4725] audit_log_start: 110205 callbacks suppressed [ 58.940328][ T4725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.940345][ T4725] audit: audit_lost=65093 audit_rate_limit=0 audit_backlog_limit=64 [ 58.940350][ T30] audit: type=1400 audit(524346.633:140213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 58.940357][ T4725] audit: backlog limit exceeded [ 58.940382][ T30] audit: type=1400 audit(524346.633:140214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="tmpfs" ino=1 [ 58.940406][ T30] audit: type=1400 audit(524346.633:140215): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 58.940427][ T30] audit: type=1400 audit(524346.633:140216): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4703 comm="udevd" path="/run/udev/watch" dev="tmpfs" ino=78 [ 58.940446][ T30] audit: type=1400 audit(524346.633:140217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 58.940463][ T30] audit: type=1400 audit(524346.633:140218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="tmpfs" ino=1 [ 58.940481][ T30] audit: type=1400 audit(524346.633:140219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 58.998470][ T4808] usb 1-1: Using ep0 maxpacket: 8 [ 59.005430][ T4808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.011955][ T4808] usb 1-1: config 1 interface 0 altsetting 174 bulk endpoint 0x1 has invalid maxpacket 32 [ 59.011987][ T4808] usb 1-1: config 1 interface 0 altsetting 174 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.012012][ T4808] usb 1-1: config 1 interface 0 has no altsetting 0 [ 59.042328][ T4808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.042362][ T4808] usb 1-1: Product: syz [ 59.042383][ T4808] usb 1-1: Manufacturer: syz [ 59.042397][ T4808] usb 1-1: SerialNumber: syz [ 59.051514][ T6438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.051630][ T6438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.095736][ T6472] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 59.104127][ T6456] set_capacity_and_notify: 7 callbacks suppressed [ 59.104161][ T6456] loop5: detected capacity change from 0 to 1024 [ 59.267297][ T6456] loop5: detected capacity change from 0 to 1024 [ 59.285512][ T4808] usb 1-1: USB disconnect, device number 3 [ 59.370473][ T6456] loop5: detected capacity change from 0 to 1024 [ 59.429123][ T6487] syzkaller0: entered promiscuous mode [ 59.429309][ T6487] syzkaller0: entered allmulticast mode [ 59.448476][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.448678][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.495333][ T6456] loop5: detected capacity change from 0 to 1024 [ 59.583302][ T4717] Bluetooth: hci3: command tx timeout [ 59.783669][ T6502] loop5: detected capacity change from 0 to 1024 [ 59.786503][ T6502] EXT4-fs: Ignoring removed orlov option [ 59.799869][ T6506] loop6: detected capacity change from 0 to 512 [ 59.817994][ T6502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec118, mo2=0002] [ 59.818066][ T6502] System zones: 0-1, 3-12 [ 59.821325][ T6506] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c02c, mo2=0002] [ 59.821448][ T6506] EXT4-fs (loop6): orphan cleanup on readonly fs [ 59.822639][ T6506] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.831831][ T6506] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 59.832030][ T6506] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.832051][ T6506] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.833266][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 59.833280][ C1] EXT4-fs (loop6): last error at time 524347: ext4_ext_check_inode:521: inode 13 [ 59.833860][ T6506] EXT4-fs (loop6): Remounting filesystem read-only [ 60.206863][ T6533] tmpfs: Unknown parameter 'crphar2!åÝcu­' [ 60.228219][ T6535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.333'. [ 60.414857][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.338'. [ 60.444574][ T6551] fuse: Bad value for 'fd' [ 60.839934][ T6564] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 60.854892][ T6560] loop7: detected capacity change from 0 to 2048 [ 60.898484][ T6560] loop7: p1 < > p4 [ 60.903046][ T6560] loop7: p4 size 722688 extends beyond EOD, truncated [ 60.928044][ T4347] loop7: p1 < > p4 [ 60.929377][ T4347] loop7: p4 size 722688 extends beyond EOD, truncated [ 61.156399][ T6596] loop7: detected capacity change from 0 to 512 [ 61.157645][ T6588] loop0: detected capacity change from 0 to 128 [ 61.163142][ T6596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.164903][ T6596] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 61.286484][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 61.289153][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 61.299243][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 61.299870][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 61.341242][ T6601] loop7: detected capacity change from 0 to 512 [ 61.356601][ T6601] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.350: Unrecognised inode hash code 255 [ 61.356636][ T6601] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.350: Corrupt directory, running e2fsck is recommended [ 61.383761][ T6601] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 61.383844][ T6601] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.350: corrupted in-inode xattr: invalid ea_ino [ 61.383872][ T6601] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.390407][ T6601] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.350: couldn't read orphan inode 15 (err -117) [ 61.390446][ T6601] loop7: lost filesystem error report for type 5 error -117 [ 61.393440][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 61.393466][ C1] EXT4-fs (loop7): initial error at time 524349: ext4_iget_extra_inode:5180: inode 15 [ 61.393487][ C1] EXT4-fs (loop7): last error at time 524349: ext4_orphan_get:1404 [ 61.408870][ T6606] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.442935][ T6601] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.350: Unrecognised inode hash code 255 [ 61.442979][ T6601] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.350: Corrupt directory, running e2fsck is recommended [ 61.478983][ T6601] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.350: Unrecognised inode hash code 255 [ 61.479026][ T6601] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.350: Corrupt directory, running e2fsck is recommended [ 61.479063][ T6601] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 4: comm syz.7.350: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 61.483309][ T6606] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.351: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 61.490400][ T6606] EXT4-fs (loop5): Remounting filesystem read-only [ 61.493973][ T6606] overlayfs: cleanup of 'work/#1b' failed (-30) [ 61.670132][ T6625] x_tables: duplicate underflow at hook 1 [ 61.682555][ T6625] ext4: Unknown parameter 'fsmagic' [ 61.808385][ T6632] evm: overlay not supported [ 61.823576][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.921559][ T6644] tipc: Started in network mode [ 61.921601][ T6644] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 61.921688][ T6644] tipc: Enabled bearer , priority 0 [ 62.021647][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.5.357'. [ 62.289772][ T6656] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.356: bg 0: block 393: padding at end of block bitmap is not set [ 62.289817][ T6656] loop6: lost filesystem error report for type 5 error -117 [ 62.293590][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 62.293618][ C0] EXT4-fs (loop6): initial error at time 524349: ext4_validate_block_bitmap:441 [ 62.293647][ C0] EXT4-fs (loop6): last error at time 524349: ext4_validate_block_bitmap:441 [ 62.302682][ T6656] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.302707][ T6656] loop6: lost filesystem error report for type 5 error -117 [ 62.362658][ T6656] EXT4-fs (loop6): 2 truncates cleaned up [ 62.378362][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.357'. [ 62.429675][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.359'. [ 62.673493][ T6689] EXT4-fs (loop1): Invalid log cluster size: 196609 [ 62.699351][ T6693] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 62.702290][ T6693] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #17: comm syz.7.367: corrupted in-inode xattr: e_name out of bounds [ 62.702330][ T6693] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 62.702797][ T6693] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.367: couldn't read orphan inode 17 (err -117) [ 62.702826][ T6693] loop7: lost filesystem error report for type 5 error -117 [ 62.760123][ T6700] EXT4-fs: Ignoring removed orlov option [ 62.765360][ T6700] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.775823][ T6700] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.775947][ T6700] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.779285][ T6700] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.369: Invalid inode table block 0 in block_group 0 [ 62.779315][ T6700] loop0: lost filesystem error report for type 5 error -117 [ 62.783692][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 62.783740][ C0] EXT4-fs (loop0): initial error at time 524350: __ext4_get_inode_loc:4886 [ 62.783778][ C0] EXT4-fs (loop0): last error at time 524350: __ext4_get_inode_loc:4886 [ 62.792302][ T6700] EXT4-fs (loop0): Remounting filesystem read-only [ 62.796290][ T6700] EXT4-fs (loop0): 1 truncate cleaned up [ 62.889709][ T6707] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.7.367: path /30/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 63.083342][ T6115] tipc: Node number set to 43690 [ 63.185805][ T6717] fuse: Unknown parameter '[d' [ 63.274591][ T6729] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.275193][ T6733] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.342536][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 63.395263][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.395462][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.703088][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.379'. [ 63.797107][ T6756] dummy_hcd dummy_hcd.0: remove, state 4 [ 63.797651][ T6756] usb usb1: USB disconnect, device number 1 [ 63.886267][ T6756] dummy_hcd dummy_hcd.0: stopped [ 63.886304][ T6756] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 63.954395][ T30] kauditd_printk_skb: 106107 callbacks suppressed [ 63.956187][ T30] audit: type=1400 audit(524351.636:186440): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=4703 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 63.956222][ T30] audit: type=1400 audit(524351.636:186441): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 63.956251][ T30] audit: type=1400 audit(524351.636:186443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="sysfs" ino=1 [ 63.956273][ T30] audit: type=1400 audit(524351.636:186442): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 63.956292][ T30] audit: type=1400 audit(524351.636:186444): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="devices" dev="sysfs" ino=18 [ 63.956312][ T30] audit: type=1400 audit(524351.636:186445): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="/" dev="sysfs" ino=1 [ 63.956331][ T30] audit: type=1400 audit(524351.636:186446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="virtual" dev="sysfs" ino=1344 [ 63.956349][ T30] audit: type=1400 audit(524351.636:186447): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="devices" dev="sysfs" ino=18 [ 63.956366][ T30] audit: type=1400 audit(524351.636:186448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="block" dev="sysfs" ino=14110 [ 63.956383][ T30] audit: type=1400 audit(524351.636:186449): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="platform" dev="sysfs" ino=44 [ 64.099293][ T6761] EXT4-fs (loop5): Test dummy encryption mode enabled [ 64.157162][ T6764] set_capacity_and_notify: 11 callbacks suppressed [ 64.158586][ T6764] loop7: detected capacity change from 0 to 256 [ 64.419309][ T6774] loop5: detected capacity change from 0 to 512 [ 64.434072][ T6779] 8021q: VLANs not supported on wg2 [ 64.798153][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.799688][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.800476][ T1597] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 64.817961][ T10] cfg80211: failed to load regulatory.db [ 64.969785][ T6805] input: syz1 as /devices/virtual/input/input5 [ 65.091137][ T6810] tap0: tun_chr_ioctl cmd 1074025677 [ 65.091315][ T6810] tap0: linktype set to 804 [ 65.494556][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 65.532659][ T6839] loop7: detected capacity change from 0 to 256 [ 65.540856][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.398'. [ 65.540892][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.7.398'. [ 65.622133][ T6844] netlink: 36 bytes leftover after parsing attributes in process `syz.7.400'. [ 65.648402][ T6846] process 'syz.7.401' launched '/dev/fd/3' with NULL argv: empty string added [ 65.699119][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 65.702785][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 65.706452][ T4711] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 65.710185][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 65.713302][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 65.715476][ T4711] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 65.717288][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 65.717492][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 65.717884][ T4711] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 65.718663][ T4711] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 65.990896][ T6385] EXT4-fs unmount: 38 callbacks suppressed [ 65.991056][ T6385] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.132535][ T6857] loop5: detected capacity change from 0 to 512 [ 66.136687][ T6857] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.205353][ T6857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.291634][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.406'. [ 66.335325][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.436740][ T6869] netlink: 14 bytes leftover after parsing attributes in process `syz.5.409'. [ 66.477389][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.590533][ T4727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.593715][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.600589][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.602069][ T6881] x_tables: duplicate underflow at hook 1 [ 66.603789][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.606604][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.611467][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.613776][ T6881] loop6: detected capacity change from 0 to 128 [ 66.615773][ T6881] ext4: Unknown parameter 'fsmagic' [ 66.631873][ T6884] openvswitch: netlink: Actions may not be safe on all matching packets [ 66.645614][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.7.413'. [ 66.693584][ T6888] loop6: detected capacity change from 0 to 512 [ 66.700622][ T6888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 66.714683][ T6888] EXT4-fs (loop6): 1 truncate cleaned up [ 66.715148][ T6888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.737318][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.090836][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.260501][ T13] bridge_slave_1: left allmulticast mode [ 67.260534][ T13] bridge_slave_1: left promiscuous mode [ 67.260717][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.277549][ T13] bridge_slave_0: left allmulticast mode [ 67.279737][ T13] bridge_slave_0: left promiscuous mode [ 67.279864][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.293074][ T6918] loop1: detected capacity change from 0 to 512 [ 67.309516][ T6918] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.423: bg 0: block 5: invalid block bitmap [ 67.309562][ T6918] loop1: lost filesystem error report for type 5 error -117 [ 67.310550][ T6918] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 67.310566][ T6918] loop1: lost filesystem error report for type 5 error -117 [ 67.310777][ T6918] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.423: invalid indirect mapped block 3 (level 2) [ 67.310802][ T6918] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.310983][ T6918] EXT4-fs (loop1): 1 orphan inode deleted [ 67.310992][ T6918] EXT4-fs (loop1): 1 truncate cleaned up [ 67.311587][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.330197][ T6918] Bluetooth: MGMT ver 1.23 [ 67.373475][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.477113][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.498004][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.501177][ T13] bond0 (unregistering): Released all slaves [ 67.512321][ T13] bond1 (unregistering): Released all slaves [ 67.539715][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.587768][ T6928] x_tables: duplicate underflow at hook 1 [ 67.597720][ T6928] loop6: detected capacity change from 0 to 128 [ 67.598278][ T6928] ext4: Unknown parameter 'fsmagic' [ 67.654797][ T6930] netlink: 'syz.1.426': attribute type 11 has an invalid length. [ 67.656183][ T6930] netlink: 244 bytes leftover after parsing attributes in process `syz.1.426'. [ 67.716265][ T6934] loop7: detected capacity change from 0 to 2048 [ 67.750122][ T6934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.778539][ T6943] loop1: detected capacity change from 0 to 2048 [ 67.808659][ T6943] loop1: p1 p4 [ 67.808659][ T6943] p1: [ 67.808687][ T6943] loop1: partition table partially beyond EOD, truncated [ 67.811729][ T6943] loop1: p4 start 184549376 is beyond EOD, truncated [ 67.850176][ T6934] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 67.891710][ T5928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.092215][ T13] hsr_slave_0: left promiscuous mode [ 68.105245][ T13] hsr_slave_1: left promiscuous mode [ 68.105538][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.105561][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.134868][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.136267][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.144875][ T13] veth1_macvtap: left promiscuous mode [ 68.144927][ T13] veth0_macvtap: left promiscuous mode [ 68.144975][ T13] veth1_vlan: left promiscuous mode [ 68.145008][ T13] veth0_vlan: left promiscuous mode [ 68.175308][ T6978] EXT4-fs (loop7): Test dummy encryption mode enabled [ 68.188932][ T6978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.223731][ T6988] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 68.228776][ T6988] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.436: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.228820][ T6988] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.234300][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.234327][ C0] EXT4-fs (loop5): initial error at time 524355: ext4_map_blocks:791: inode 3: block 2 [ 68.234371][ C0] EXT4-fs (loop5): last error at time 524355: ext4_map_blocks:791: inode 3: block 2 [ 68.240024][ T6988] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.436: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.240047][ T6988] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.246780][ T6988] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.436: Failed to acquire dquot type 0 [ 68.247047][ T6988] loop5: lost filesystem error report for type 5 error -117 [ 68.249458][ T5928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.253982][ T6988] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 68.264913][ T6988] loop5: lost filesystem error report for type 5 error -117 [ 68.272390][ T6988] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.436: mark_inode_dirty error [ 68.272432][ T6988] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.272623][ T6988] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 68.272676][ T6988] EXT4-fs (loop5): 1 orphan inode deleted [ 68.285730][ T1317] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.285770][ T1317] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.286755][ T1317] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 68.286774][ T1317] loop5: lost filesystem error report for type 5 error -117 [ 68.287178][ T6988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.292594][ T6988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.294071][ T6988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.436: Invalid inode table block 1 in block_group 0 [ 68.294088][ T6988] loop5: lost filesystem error report for type 5 error -117 [ 68.307623][ T6988] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 68.307674][ T6988] loop5: lost filesystem error report for type 5 error -117 [ 68.307942][ T6988] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz.5.436: mark_inode_dirty error [ 68.307963][ T6988] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.384050][ T6995] random: crng reseeded on system resumption [ 68.414661][ T13] team0 (unregistering): Port device team_slave_1 removed [ 68.419326][ T13] team0 (unregistering): Port device team_slave_0 removed [ 68.536882][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12 [ 68.614077][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.615019][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.615100][ T6878] bridge_slave_0: entered allmulticast mode [ 68.627011][ T4727] Bluetooth: hci0: command tx timeout [ 68.628089][ T6878] bridge_slave_0: entered promiscuous mode [ 68.633155][ T6999] syzkaller0: entered promiscuous mode [ 68.633188][ T6999] syzkaller0: entered allmulticast mode [ 68.635482][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.641949][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.642082][ T6878] bridge_slave_1: entered allmulticast mode [ 68.642567][ T6878] bridge_slave_1: entered promiscuous mode [ 68.651255][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.440'. [ 68.766593][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.767604][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.812750][ T6878] team0: Port device team_slave_0 added [ 68.823975][ T6878] team0: Port device team_slave_1 added [ 68.880235][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.880263][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.880290][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.880935][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.880950][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.880970][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.921597][ T7030] netlink: 236 bytes leftover after parsing attributes in process `syz.1.444'. [ 68.921630][ T7030] netlink: 236 bytes leftover after parsing attributes in process `syz.1.444'. [ 68.960308][ T6878] hsr_slave_0: entered promiscuous mode [ 68.960665][ T6878] hsr_slave_1: entered promiscuous mode [ 68.960869][ T6878] debugfs: 'hsr0' already exists in 'hsr' [ 68.960880][ T6878] Cannot create hsr debugfs directory [ 68.965195][ T30] kauditd_printk_skb: 94813 callbacks suppressed [ 68.965217][ T30] audit: type=1400 audit(524356.646:229311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965241][ T30] audit: type=1400 audit(524356.646:229312): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965256][ T30] audit: type=1400 audit(524356.646:229313): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965269][ T30] audit: type=1400 audit(524356.646:229314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965283][ T30] audit: type=1400 audit(524356.646:229315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5171 comm="syz-executor" name="59" dev="tmpfs" ino=340 [ 68.965296][ T30] audit: type=1400 audit(524356.646:229316): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5171 comm="syz-executor" path="/59" dev="tmpfs" ino=340 [ 68.965310][ T30] audit: type=1400 audit(524356.646:229317): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5171 comm="syz-executor" path="/59" dev="tmpfs" ino=340 [ 68.965323][ T30] audit: type=1400 audit(524356.646:229318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965336][ T30] audit: type=1400 audit(524356.646:229319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 68.965350][ T30] audit: type=1400 audit(524356.646:229320): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5171 comm="syz-executor" name="59" dev="tmpfs" ino=340 [ 69.028197][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.447'. [ 69.028461][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.6.447'. [ 69.083723][ T7046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.089761][ T7046] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.447: corrupted in-inode xattr: e_value out of bounds [ 69.089797][ T7046] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.090057][ T7046] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.447: couldn't read orphan inode 15 (err -117) [ 69.090069][ T7046] loop6: lost filesystem error report for type 5 error -117 [ 69.090578][ T7046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.100605][ T4809] IPVS: starting estimator thread 0... [ 69.161466][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.173986][ T7056] set_capacity_and_notify: 5 callbacks suppressed [ 69.174020][ T7056] loop1: detected capacity change from 0 to 4096 [ 69.185777][ T7055] IPVS: using max 60 ests per chain, 144000 per kthread [ 69.194884][ T7056] EXT4-fs (loop1): unsupported descriptor size 320 [ 69.236428][ T6878] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.288662][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.290504][ T6878] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.308271][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.310112][ T6878] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.316774][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.319090][ T6878] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 69.321620][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.414586][ T7077] loop6: detected capacity change from 0 to 256 [ 69.652251][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.674030][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.681814][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.681873][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.691256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.691308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.721259][ T6878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.846958][ T7110] loop5: detected capacity change from 0 to 512 [ 69.854139][ T7110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.854960][ T7110] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.855251][ T7110] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 69.862831][ T7110] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #14: comm syz.5.455: invalid orphan symlink nlink 1 [ 69.870254][ T7110] loop5: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 69.872286][ T7110] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.455: couldn't read orphan inode 14 (err -117) [ 69.872394][ T7110] loop5: lost filesystem error report for type 5 error -117 [ 69.874732][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 69.874749][ C0] EXT4-fs (loop5): last error at time 524357: ext4_orphan_get:1404 [ 69.882513][ T7110] EXT4-fs (loop5): 1 truncate cleaned up [ 69.909204][ T7110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.962410][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.097006][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.373423][ T7159] syzkaller0: entered promiscuous mode [ 70.373461][ T7159] syzkaller0: entered allmulticast mode [ 70.377423][ T7159] tipc: Started in network mode [ 70.377455][ T7159] tipc: Node identity 3e848160ab6a, cluster identity 4711 [ 70.377670][ T7159] tipc: Enabled bearer , priority 0 [ 70.419165][ T7159] tipc: Resetting bearer [ 70.444980][ T6878] veth0_vlan: entered promiscuous mode [ 70.447321][ T6878] veth1_vlan: entered promiscuous mode [ 70.477382][ T7163] ±ÿ†Ý'É|d<: renamed from lo (while UP) [ 70.517857][ T7158] tipc: Resetting bearer [ 70.531469][ T7158] tipc: Disabling bearer [ 70.533320][ T7163] loop6: detected capacity change from 0 to 512 [ 70.533924][ T7163] EXT4-fs: user quota file already specified [ 70.555679][ T6878] veth0_macvtap: entered promiscuous mode [ 70.583656][ T6878] veth1_macvtap: entered promiscuous mode [ 70.587900][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.588946][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.704890][ T7172] fuse: fd is not a fuse device [ 70.705161][ T4727] Bluetooth: hci0: command tx timeout [ 70.763590][ T7179] fuse: Bad value for 'fd' [ 70.775963][ T1404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.775995][ T1404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.843866][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.843898][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.844901][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.844928][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.844946][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.844962][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.029737][ T7187] loop1: detected capacity change from 0 to 1024 [ 71.049187][ T7187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.055327][ T7187] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.467: missing EA_INODE flag [ 71.058892][ T7187] EXT4-fs (loop1): Remounting filesystem read-only [ 71.151968][ T7202] loop5: detected capacity change from 0 to 256 [ 71.346956][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.352420][ T7203] loop7: detected capacity change from 0 to 4096 [ 71.361249][ T7203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.391818][ T7210] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.395097][ T7211] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.465959][ T4727] block nbd0: Receive control failed (result -32) [ 71.562212][ T7225] ima: policy update completed [ 71.564494][ T7227] loop1: detected capacity change from 0 to 2048 [ 71.693271][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 71.693310][ T7246] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 71.694318][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 71.718898][ T7243] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 71.725565][ T7243] bond1 (unregistering): Released all slaves [ 71.796271][ T7253] loop1: detected capacity change from 0 to 256 [ 71.815666][ T7260] x_tables: duplicate underflow at hook 1 [ 71.822606][ T7260] loop6: detected capacity change from 0 to 128 [ 71.823743][ T7260] ext4: Unknown parameter 'fsmagic' [ 71.920498][ T7262] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 71.920522][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.921392][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 71.924303][ T7270] vhci_hcd: connection closed [ 71.935690][ T1404] vhci_hcd vhci_hcd.1: stop threads [ 71.936027][ T1404] vhci_hcd vhci_hcd.1: release socket [ 71.936052][ T1404] vhci_hcd vhci_hcd.1: disconnect device [ 72.162504][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.163917][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.168213][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.169591][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.226226][ T4727] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 72.226487][ T4727] Bluetooth: hci1: Injecting HCI hardware error event [ 72.227877][ T4717] Bluetooth: hci1: hardware error 0x00 [ 72.327020][ T7282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 72.327117][ T7282] System zones: 1-12 [ 72.327396][ T7282] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.489: missing EA_INODE flag [ 72.327408][ T7282] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 72.327623][ T7282] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.489: error while reading EA inode 12 err=-117 [ 72.327636][ T7282] loop5: lost filesystem error report for type 5 error -117 [ 72.327830][ T7282] EXT4-fs (loop5): 1 orphan inode deleted [ 72.328281][ T7282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.416912][ T5928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.420279][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.746575][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.490'. [ 72.794999][ T4727] Bluetooth: hci0: command tx timeout [ 72.888008][ T7307] 9p: Bad value for 'rfdno' [ 72.965914][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13 [ 72.997576][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.022820][ T7310] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 1: comm syz.1.495: lblock 1 mapped to illegal pblock 1 (length 5) [ 73.028563][ T7310] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 73.028603][ T7310] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.028603][ T7310] [ 73.030660][ T7310] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 73.032983][ T7310] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 73.081075][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.499'. [ 73.081099][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.8.499'. [ 73.108469][ T1179] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.108579][ T1179] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.108596][ T1179] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.108611][ T1179] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.391452][ T4725] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 73.406879][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.654862][ T1179] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.698986][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15 [ 73.768270][ T1179] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.790640][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.793389][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.796126][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.798618][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.800408][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.850354][ T7359] netlink: 'syz.8.506': attribute type 29 has an invalid length. [ 73.850393][ T7359] __nla_validate_parse: 3 callbacks suppressed [ 73.850402][ T7359] netlink: 56 bytes leftover after parsing attributes in process `syz.8.506'. [ 73.975403][ T30] kauditd_printk_skb: 104417 callbacks suppressed [ 73.975443][ T30] audit: type=1400 audit(524361.655:266390): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7371 comm="modprobe" name="/" dev="nvme0n1p2" ino=2 [ 73.975472][ T30] audit: type=1400 audit(524361.655:266391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 73.975491][ T30] audit: type=1400 audit(524361.655:266392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="tmpfs" ino=1 [ 73.975512][ T30] audit: type=1400 audit(524361.655:266393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 73.975534][ T30] audit: type=1400 audit(524361.655:266394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 73.975554][ T30] audit: type=1400 audit(524361.655:266395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7356 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 73.975584][ T30] audit: type=1400 audit(524361.655:266396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7356 comm="dhcpcd-run-hook" name="sbin" dev="nvme0n1p2" ino=1533 [ 73.975601][ T30] audit: type=1400 audit(524361.655:266397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 73.975617][ T30] audit: type=1400 audit(524361.655:266398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7356 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 73.975634][ T30] audit: type=1400 audit(524361.655:266399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="sysfs" ino=1 [ 73.990849][ T1179] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.057481][ T7374] loop5: AHDI p3 [ 74.079363][ T7379] openvswitch: netlink: Message has 4 unknown bytes. [ 74.083106][ T4347] loop5: AHDI p3 [ 74.130940][ T1179] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.162517][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14 [ 74.212116][ T7383] netlink: 'syz.8.509': attribute type 6 has an invalid length. [ 74.250716][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.510'. [ 74.303673][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.322238][ T7394] netlink: 88 bytes leftover after parsing attributes in process `syz.5.511'. [ 74.324131][ T7394] netlink: 68 bytes leftover after parsing attributes in process `syz.5.511'. [ 74.383391][ T1179] bridge_slave_1: left allmulticast mode [ 74.383426][ T1179] bridge_slave_1: left promiscuous mode [ 74.383522][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.386177][ T1179] bridge_slave_0: left allmulticast mode [ 74.386199][ T1179] bridge_slave_0: left promiscuous mode [ 74.386283][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.396159][ T1179] pim6reg9: left allmulticast mode [ 74.533638][ T7405] UDC core: g1: couldn't find an available UDC or it's busy [ 74.543914][ T4717] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 74.866437][ T4717] Bluetooth: hci0: command tx timeout [ 75.374182][ T7413] netlink: 'syz.6.514': attribute type 1 has an invalid length. [ 75.457349][ T7418] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.553932][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.559211][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.514'. [ 75.601730][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.690242][ T7435] set_capacity_and_notify: 5 callbacks suppressed [ 75.690291][ T7435] loop8: detected capacity change from 0 to 256 [ 75.720769][ T1179] bond0 (unregistering): Released all slaves [ 75.836133][ T4717] Bluetooth: hci3: command tx timeout [ 75.847364][ T1179] bond1 (unregistering): Released all slaves [ 75.899315][ T7416] bond1 (unregistering): Released all slaves [ 75.926461][ T1179] tipc: Left network mode [ 76.064241][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.064290][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.064460][ T7354] bridge_slave_0: entered allmulticast mode [ 76.064930][ T7354] bridge_slave_0: entered promiscuous mode [ 76.080952][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.082865][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.084583][ T7354] bridge_slave_1: entered allmulticast mode [ 76.085100][ T7354] bridge_slave_1: entered promiscuous mode [ 76.129509][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.137653][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.228607][ T7462] loop6: detected capacity change from 0 to 512 [ 76.235174][ T7354] team0: Port device team_slave_0 added [ 76.321784][ T1179] hsr_slave_0: left promiscuous mode [ 76.324409][ T1179] hsr_slave_1: left promiscuous mode [ 76.325080][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.325096][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.327143][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.327154][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.348965][ T1179] veth1_macvtap: left promiscuous mode [ 76.349025][ T1179] veth0_macvtap: left promiscuous mode [ 76.349075][ T1179] veth1_vlan: left promiscuous mode [ 76.349112][ T1179] veth0_vlan: left promiscuous mode [ 76.370640][ T7483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.523'. [ 76.370676][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 76.509141][ T7501] binder: 7479:7501 ioctl c018620c 20000340 returned -1 [ 76.560737][ T7492] netlink: 88 bytes leftover after parsing attributes in process `syz.5.524'. [ 76.653421][ T7508] x_tables: duplicate underflow at hook 1 [ 76.656461][ T7508] loop6: detected capacity change from 0 to 128 [ 76.662959][ T7508] ext4: Unknown parameter 'fsmagic' [ 76.786480][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 76.791973][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 76.938865][ T7354] team0: Port device team_slave_1 added [ 77.001131][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.001157][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.003668][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.091156][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.091188][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.091204][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.247310][ T7354] hsr_slave_0: entered promiscuous mode [ 77.247714][ T7354] hsr_slave_1: entered promiscuous mode [ 77.387099][ T7529] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 77.596732][ T7354] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 77.641714][ T7548] x_tables: duplicate underflow at hook 1 [ 77.697620][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.703747][ T7354] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 77.754062][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.756979][ T7354] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 77.762067][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.764121][ T7354] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 77.831002][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.905922][ T4717] Bluetooth: hci3: command tx timeout [ 78.177205][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.191635][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.193927][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.193953][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.250439][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.250491][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.346960][ T7583] geneve2: entered promiscuous mode [ 78.367778][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16 [ 78.516901][ T7597] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 78.516932][ T7597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.521203][ T7597] vhci_hcd vhci_hcd.0: Device attached [ 78.628134][ T7598] vhci_hcd: connection closed [ 78.629205][ T7436] vhci_hcd vhci_hcd.6: stop threads [ 78.629241][ T7436] vhci_hcd vhci_hcd.6: release socket [ 78.629717][ T7436] vhci_hcd vhci_hcd.6: disconnect device [ 78.635368][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.695689][ T6115] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 78.858641][ T7634] loop8: detected capacity change from 0 to 512 [ 78.862842][ T7634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.888424][ T7354] veth0_vlan: entered promiscuous mode [ 78.888652][ T7634] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 78.889173][ T7634] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.549: invalid indirect mapped block 256 (level 1) [ 78.889190][ T7634] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.893794][ T7634] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.549: invalid indirect mapped block 2683928664 (level 1) [ 78.893837][ T7634] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.894742][ T7634] EXT4-fs (loop8): 1 truncate cleaned up [ 78.895212][ T7634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.916012][ T7354] veth1_vlan: entered promiscuous mode [ 78.934185][ T6878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.943172][ T7354] veth0_macvtap: entered promiscuous mode [ 78.953039][ T7354] veth1_macvtap: entered promiscuous mode [ 78.964592][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.972693][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.985723][ T30] kauditd_printk_skb: 65636 callbacks suppressed [ 78.985755][ T30] audit: type=1400 audit(524366.675:296252): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4347 comm="udevd" path="/sys/devices/virtual/block/loop8/power" dev="sysfs" ino=16769 [ 78.986018][ T30] audit: type=1400 audit(524366.675:296253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 78.986167][ T30] audit: type=1400 audit(524366.675:296254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 78.986546][ T30] audit: type=1400 audit(524366.675:296255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7591 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 78.986670][ T30] audit: type=1400 audit(524366.675:296256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="sysfs" ino=1 [ 78.986798][ T30] audit: type=1400 audit(524366.675:296257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="sysfs" ino=1 [ 78.986879][ T30] audit: type=1400 audit(524366.675:296258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="devices" dev="sysfs" ino=18 [ 78.986975][ T30] audit: type=1400 audit(524366.675:296259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7639 comm="syz-executor" name="24" dev="tmpfs" ino=140 [ 78.987041][ T30] audit: type=1400 audit(524366.675:296260): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7639 comm="syz-executor" name="24" dev="tmpfs" ino=140 [ 78.987581][ T30] audit: type=1400 audit(524366.675:296261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7639 comm="syz-executor" name="24" dev="tmpfs" ino=140 [ 79.032092][ T4404] 8021q: adding VLAN 0 to HW filter on device eth17 [ 79.068779][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.068871][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.068902][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.068918][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077522][ T7642] loop8: detected capacity change from 0 to 256 [ 79.087618][ T1404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.087649][ T1404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.108437][ T7436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.108468][ T7436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.214216][ T7647] loop6: detected capacity change from 0 to 512 [ 79.244268][ T7647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.498530][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.520823][ T7659] loop9: detected capacity change from 0 to 128 [ 79.543648][ T7659] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 79.560257][ T7659] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.736675][ T7354] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.754528][ T7688] netlink: 'syz.8.562': attribute type 3 has an invalid length. [ 79.754561][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.562'. [ 79.796220][ T7691] netlink: 40 bytes leftover after parsing attributes in process `syz.5.561'. [ 79.796463][ T7691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.561'. [ 79.865727][ T7695] loop6: detected capacity change from 0 to 1024 [ 79.866344][ T7695] ext2: Unknown parameter 'nouser_xattr' [ 79.962626][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18 [ 79.986235][ T4717] Bluetooth: hci3: command tx timeout [ 80.000587][ T7706] syzkaller0: entered promiscuous mode [ 80.000624][ T7706] syzkaller0: entered allmulticast mode [ 80.004463][ T7710] loop6: detected capacity change from 0 to 512 [ 80.008437][ T7706] tipc: Enabled bearer , priority 0 [ 80.023902][ T7710] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.024145][ T7710] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 80.028513][ T7710] EXT4-fs (loop6): orphan cleanup on readonly fs [ 80.028674][ T7710] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.569: Invalid inode bitmap blk 0 in block_group 0 [ 80.028687][ T7710] loop6: lost filesystem error report for type 5 error -117 [ 80.029665][ T7710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.030072][ T7706] tipc: Resetting bearer [ 80.030265][ T7706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.030290][ T7706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.030305][ T7706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.030317][ T7706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.031261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.031277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.053459][ T7704] tipc: Resetting bearer [ 80.068226][ T7704] tipc: Disabling bearer [ 80.102119][ T7710] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.569'. [ 80.144040][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.479558][ T7733] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 80.884456][ T7753] loop9: detected capacity change from 0 to 1024 [ 80.893503][ T7753] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 80.896634][ T7753] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.902501][ T7753] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 80.904140][ T7754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.908702][ T7753] EXT4-fs (loop9): orphan cleanup on readonly fs [ 80.913344][ T7753] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 80.916894][ T7753] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 80.919935][ T7753] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.577: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.919970][ T7753] loop9: lost filesystem error report for type 5 error -117 [ 80.922232][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19 [ 80.926619][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 80.926634][ C0] EXT4-fs (loop9): initial error at time 524368: ext4_free_blocks:6718 [ 80.926647][ C0] EXT4-fs (loop9): last error at time 524368: ext4_free_blocks:6718 [ 80.938246][ T7753] EXT4-fs (loop9): 1 truncate cleaned up [ 80.938729][ T7753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.010826][ T7354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.242850][ T7782] loop1: detected capacity change from 0 to 512 [ 81.258373][ T7782] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 81.336762][ T7791] loop8: detected capacity change from 0 to 128 [ 81.338310][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.587'. [ 81.339468][ T7791] EXT4-fs (loop8): Test dummy encryption mode enabled [ 81.345250][ T7791] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.374751][ T7794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 81.456145][ T7804] loop5: detected capacity change from 0 to 512 [ 81.469201][ T7804] EXT4-fs (loop5): filesystem is read-only [ 81.469239][ T7804] EXT4-fs (loop5): #blocks per group too big: 2113961984 [ 81.513123][ T6878] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.788130][ T7806] netlink: 84 bytes leftover after parsing attributes in process `syz.6.592'. [ 81.854244][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.596'. [ 81.875724][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.8.593'. [ 81.881067][ T7817] bridge0: port 3(veth0) entered blocking state [ 81.882414][ T7817] bridge0: port 3(veth0) entered disabled state [ 81.884086][ T7817] veth0: entered allmulticast mode [ 81.885882][ T7817] veth0: entered promiscuous mode [ 81.917914][ T7827] tipc: New replicast peer: 255.255.255.255 [ 81.920306][ T7827] tipc: Enabled bearer , priority 10 [ 82.179602][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.301358][ T7855] loop6: detected capacity change from 0 to 8 [ 82.301733][ T7855] squashfs: Unknown parameter '00000000000000000003' [ 82.395445][ T7867] : renamed from virt_wifi0 [ 82.543207][ T7881] loop8: detected capacity change from 0 to 128 [ 82.554583][ T7881] EXT4-fs (loop8): Test dummy encryption mode enabled [ 82.562188][ T7881] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.736385][ T7894] CUSE: unknown device info "" [ 82.736438][ T7894] CUSE: unknown device info "" [ 82.736480][ T7894] CUSE: unknown device info "ÿw" [ 82.736511][ T7894] CUSE: zero length info key specified [ 82.957166][ T7896] fuse: blksize only supported for fuseblk [ 83.037461][ T4715] tipc: Node number set to 1035142879 [ 83.059539][ T7911] tmpfs: Bad value for 'mpol' [ 83.067107][ T7908] Cannot find del_set index 0 as target [ 83.081662][ T7909] bridge0: port 2(bridge_slave_1) entered listening state [ 83.089623][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.240282][ T7921] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 83.304576][ T7929] netlink: 'syz.1.627': attribute type 8 has an invalid length. [ 83.363757][ T7935] netlink: 92 bytes leftover after parsing attributes in process `syz.1.629'. [ 83.365609][ T7935] netlink: 92 bytes leftover after parsing attributes in process `syz.1.629'. [ 83.414873][ T6878] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.698346][ T7965] Injecting memory failure for pfn 0x14c8f3 at process virtual address 0x20001000 [ 83.716911][ T7968] loop1: detected capacity change from 0 to 1024 [ 83.718466][ T7968] EXT4-fs: Ignoring removed orlov option [ 83.719865][ T7968] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.739386][ T7968] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.739529][ T7968] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.740928][ T7968] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.638: Invalid inode table block 0 in block_group 0 [ 83.740948][ T7968] loop1: lost filesystem error report for type 5 error -117 [ 83.741153][ T7968] EXT4-fs (loop1): Remounting filesystem read-only [ 83.741236][ T7968] EXT4-fs (loop1): 1 truncate cleaned up [ 83.741935][ T7968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.749610][ T7968] EXT4-fs (loop1): shut down requested (2) [ 83.780220][ T7965] Memory failure: 0x14c8f3: Sending SIGBUS to syz.8.637:7965 due to hardware memory corruption [ 83.781604][ T7970] binder: Unknown parameter 'ÿÿØX Ûðtt„²ùùôÍ+™*zø8vá¾lÆ;' [ 83.785246][ T7965] Memory failure: 0x14c8f3: recovery action for dirty LRU page: Recovered [ 83.788291][ T7965] Injecting memory failure for pfn 0x14c8f5 at process virtual address 0x20002000 [ 83.788567][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.792724][ T7965] Memory failure: 0x14c8f5: Sending SIGBUS to syz.8.637:7965 due to hardware memory corruption [ 83.797020][ T7965] Memory failure: 0x14c8f5: recovery action for dirty LRU page: Recovered [ 83.797074][ T7965] Injecting memory failure for pfn 0x219070 at process virtual address 0x20003000 [ 83.797256][ T7965] Memory failure: 0x219070: unhandlable page. [ 83.797264][ T7965] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 83.893776][ T7976] loop9: detected capacity change from 0 to 8 [ 83.895074][ T7976] squashfs image failed sanity check [ 83.980608][ T7978] loop1: detected capacity change from 0 to 512 [ 83.983260][ T7980] loop9: detected capacity change from 0 to 128 [ 83.991984][ T7980] FAT-fs (loop9): bogus number of reserved sectors [ 83.992022][ T7980] FAT-fs (loop9): Can't find a valid FAT filesystem [ 83.996395][ T30] kauditd_printk_skb: 113169 callbacks suppressed [ 83.996421][ T30] audit: type=1400 audit(524371.684:344248): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 83.997969][ T7978] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.641: invalid indirect mapped block 11 (level 0) [ 83.997997][ T7978] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.998221][ T7978] EXT4-fs (loop1): Remounting filesystem read-only [ 83.998728][ T7978] EXT4-fs (loop1): 1 truncate cleaned up [ 83.999211][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.001213][ T4703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.001222][ T4703] audit: audit_lost=158476 audit_rate_limit=0 audit_backlog_limit=64 [ 84.001230][ T4703] audit: backlog limit exceeded [ 84.001238][ T4703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.001244][ T4703] audit: audit_lost=158477 audit_rate_limit=0 audit_backlog_limit=64 [ 84.001250][ T4703] audit: backlog limit exceeded [ 84.001260][ T4703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.001265][ T4703] audit: audit_lost=158478 audit_rate_limit=0 audit_backlog_limit=64 [ 84.001271][ T4703] audit: backlog limit exceeded [ 84.103702][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.471317][ T8000] nvmet: adding nsid 1 to subsystem testnqn [ 84.489528][ T7999] nvmet: failed to open block device (null): (-22) [ 84.604413][ T8006] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.783246][ T8024] Injecting memory failure for pfn 0x154d0f at process virtual address 0x20f0f000 [ 84.806232][ T8024] Memory failure: 0x154d0f: recovery action for dirty LRU page: Recovered [ 85.019043][ T8036] __nla_validate_parse: 1 callbacks suppressed [ 85.019080][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.655'. [ 85.088715][ T8043] binder: 8042:8043 Acquire 1 refcount change on invalid ref -2113929215 ret -22 [ 85.111571][ T8043] binder: 8042:8043 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 85.111610][ T8043] binder: 8042:8043 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 85.111622][ T8043] binder: 8042:8043 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.111634][ T8043] binder: 8043 RLIMIT_NICE not set [ 85.524164][ T8054] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 85.556779][ T8056] netlink: 'syz.9.662': attribute type 13 has an invalid length. [ 85.562967][ T8056] gretap0: refused to change device tx_queue_len [ 85.564656][ T8056] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.748998][ T8062] EXT4-fs (loop8): Invalid default hash set in the superblock [ 85.943434][ T8069] set_capacity_and_notify: 4 callbacks suppressed [ 85.943485][ T8069] loop9: detected capacity change from 0 to 256 [ 86.269265][ T8073] netlink: 80 bytes leftover after parsing attributes in process `syz.8.669'. [ 86.271224][ T8073] netlink: 80 bytes leftover after parsing attributes in process `syz.8.669'. [ 86.275738][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.8.669'. [ 86.655019][ T8087] loop6: detected capacity change from 0 to 512 [ 86.661955][ T8087] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.688406][ T8087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 86.688464][ T8087] System zones: 1-12 [ 86.705289][ T8087] EXT4-fs (loop6): 1 truncate cleaned up [ 86.705778][ T8087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.750389][ T8091] loop9: detected capacity change from 0 to 2048 [ 86.780102][ T8091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.806365][ T8096] loop5: detected capacity change from 0 to 256 [ 86.814683][ T8096] FAT-fs (loop5): bogus number of FAT sectors [ 86.814729][ T8096] FAT-fs (loop5): Can't find a valid FAT filesystem [ 86.909999][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.155784][ T8115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.678'. [ 87.246263][ T8124] loop6: detected capacity change from 0 to 512 [ 87.251204][ T8124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.260681][ T8131] loop1: detected capacity change from 0 to 512 [ 87.265345][ T8131] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 87.265590][ T8124] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 87.265720][ T8124] EXT4-fs (loop6): orphan cleanup on readonly fs [ 87.266419][ T8124] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.682: Failed to acquire dquot type 1 [ 87.266436][ T8124] loop6: lost filesystem error report for type 5 error -5 [ 87.266639][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 87.266653][ C1] EXT4-fs (loop6): initial error at time 524374: ext4_acquire_dquot:7041 [ 87.266669][ C1] EXT4-fs (loop6): last error at time 524374: ext4_acquire_dquot:7041 [ 87.267736][ T8124] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.682: bg 0: block 40: padding at end of block bitmap is not set [ 87.267753][ T8124] loop6: lost filesystem error report for type 5 error -117 [ 87.274698][ T8124] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.274724][ T8124] loop6: lost filesystem error report for type 5 error -117 [ 87.293175][ T8124] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.682: data will be lost [ 87.300253][ T8124] EXT4-fs (loop6): 1 truncate cleaned up [ 87.312328][ T8131] EXT4-fs (loop1): 1 truncate cleaned up [ 87.314576][ T8124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.322089][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.325863][ T8124] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.682: corrupted xattr block 31: invalid header [ 87.339992][ T8124] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.682: corrupted xattr block 31: invalid header [ 87.343209][ T8124] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.682: corrupted xattr block 31: invalid header [ 87.344697][ T8124] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.682: bad symlink. [ 87.409772][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.439541][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.571649][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 87.571696][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 87.595270][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 87.595310][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 87.617484][ T7354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.971722][ T8173] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 87.974047][ T8173] CPU: 0 UID: 0 PID: 8173 Comm: syz.8.692 Tainted: G L syzkaller #0 PREEMPT [ 87.974067][ T8173] Tainted: [L]=SOFTLOCKUP [ 87.974071][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.974078][ T8173] Call trace: [ 87.974082][ T8173] show_stack+0x2c/0x3c (C) [ 87.974107][ T8173] __dump_stack+0x30/0x40 [ 87.974121][ T8173] dump_stack_lvl+0xd8/0x12c [ 87.974133][ T8173] dump_stack+0x1c/0x28 [ 87.974145][ T8173] sysfs_warn_dup+0x9c/0xb8 [ 87.974158][ T8173] sysfs_create_dir_ns+0x190/0x1f4 [ 87.974170][ T8173] kobject_add_internal+0x290/0x6f0 [ 87.974184][ T8173] kobject_add_varg+0x9c/0xe8 [ 87.974195][ T8173] kobject_add+0x110/0x1c8 [ 87.974206][ T8173] device_add+0x394/0x9e0 [ 87.974215][ T8173] device_register+0x28/0x38 [ 87.974228][ T8173] tty_register_device_attr+0x31c/0x5e8 [ 87.974239][ T8173] tty_register_device+0x3c/0x50 [ 87.974249][ T8173] gsm_activate_mux+0xdc/0x284 [ 87.974261][ T8173] gsmld_ioctl+0xea8/0x1414 [ 87.974271][ T8173] tty_ioctl+0x8a8/0xcb0 [ 87.974280][ T8173] __arm64_sys_ioctl+0x154/0x1cc [ 87.974293][ T8173] invoke_syscall+0x98/0x244 [ 87.974306][ T8173] el0_svc_common+0xec/0x23c [ 87.974318][ T8173] do_el0_svc+0x4c/0x5c [ 87.974329][ T8173] el0_svc+0x64/0x260 [ 87.974339][ T8173] el0t_64_sync_handler+0x44/0x104 [ 87.974350][ T8173] el0t_64_sync+0x198/0x19c [ 88.004775][ T8173] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.041195][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.9.694'. [ 88.144386][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.147703][ T8181] bond2 (unregistering): Released all slaves [ 88.185951][ T8188] loop1: detected capacity change from 0 to 256 [ 88.265043][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.268138][ T8181] bond2 (unregistering): Released all slaves [ 88.350945][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.358892][ T8181] bond2 (unregistering): Released all slaves [ 88.719430][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.723052][ T8181] bond2 (unregistering): Released all slaves [ 88.833301][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.838017][ T8181] bond2 (unregistering): Released all slaves [ 88.959852][ T8181] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 89.029649][ T30] kauditd_printk_skb: 76413 callbacks suppressed [ 89.029675][ T30] audit: type=1400 audit(524376.643:382382): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8223 comm="syz.6.707" opid=8223 ocomm="syz.6.707" [ 89.032255][ T30] audit: type=1400 audit(524376.713:382383): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 89.032285][ T30] audit: type=1400 audit(524376.713:382384): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="gsmtty60" dev="devtmpfs" ino=2297 [ 89.032320][ T30] audit: type=1400 audit(524376.713:382385): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 89.032341][ T30] audit: type=1400 audit(524376.713:382386): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="gsmtty60" dev="devtmpfs" ino=2297 [ 89.032359][ T30] audit: type=1400 audit(524376.713:382387): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 89.034469][ T4347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.034485][ T4347] audit: audit_lost=171238 audit_rate_limit=0 audit_backlog_limit=64 [ 89.034500][ T4347] audit: backlog limit exceeded [ 89.034516][ T4347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.042653][ T8181] bond2 (unregistering): Released all slaves [ 89.157584][ T8227] loop6: detected capacity change from 0 to 256 [ 89.453508][ T8230] input: syz0 as /devices/virtual/input/input8 [ 89.496173][ T8232] loop1: detected capacity change from 0 to 1024 [ 89.496797][ T8232] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.496820][ T8232] EXT4-fs: Ignoring removed i_version option [ 89.497621][ T8232] EXT4-fs: Ignoring removed orlov option [ 89.497646][ T8232] EXT4-fs: Ignoring removed bh option [ 89.498810][ T8235] loop8: detected capacity change from 0 to 128 [ 89.503093][ T8232] EXT4-fs: test_dummy_encryption requires encrypt feature [ 89.519497][ T8235] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.635768][ T8241] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.711: iget: bad extended attribute block 134217728 [ 89.635840][ T8241] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.635990][ T8241] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.711: couldn't read orphan inode 15 (err -117) [ 89.636004][ T8241] loop5: lost filesystem error report for type 5 error -117 [ 89.636564][ T8241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.640534][ T8243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.888876][ T8250] 9p: Bad value for 'rfdno' [ 89.895797][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.054930][ T7354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.098495][ T8264] EXT4-fs: Ignoring removed nobh option [ 90.099687][ T8264] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.121342][ T8264] EXT4-fs (loop9): 1 truncate cleaned up [ 90.121790][ T8264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.175303][ T8270] __nla_validate_parse: 1 callbacks suppressed [ 90.176828][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 90.187400][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 90.211487][ T8270] bond1: entered allmulticast mode [ 90.211642][ T8270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.267801][ T8271] bond2: entered allmulticast mode [ 90.269332][ T8271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.298708][ T7354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.318915][ T6878] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.342298][ T8277] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 90.463123][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.8.720'. [ 90.465882][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.9.724'. [ 90.484735][ T8286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.484768][ T8286] EXT4-fs: inline encryption not supported [ 90.484789][ T8286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.504039][ T8286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.548623][ T8303] EXT4-fs: inline encryption not supported [ 90.552794][ T8303] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.565189][ T8303] EXT4-fs (loop9): 1 truncate cleaned up [ 90.566145][ T8303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.594629][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.598489][ T7354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.642939][ T8306] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 90.643424][ T8306] FAT-fs (loop8): Filesystem has been set read-only [ 90.664286][ T8310] Soft offlining pfn 0x13b8ab at process virtual address 0x209bb000 [ 90.671391][ T4717] Bluetooth: hci4: hcon 0000000000dd4822 sent 1 < count 10 [ 90.671457][ T4717] Bluetooth: hci4: hcon 0000000000dd4822 sent 0 < count 1907 [ 90.699461][ T8310] Soft offline: 0x13b8ab: invalidated [ 90.855456][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.8.731'. [ 90.998926][ T8320] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.998990][ T8320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.999011][ T8320] IPv6: NLM_F_CREATE should be set when creating new route [ 90.999031][ T8320] IPv6: NLM_F_CREATE should be set when creating new route [ 90.999045][ T8320] IPv6: NLM_F_CREATE should be set when creating new route [ 91.181371][ T8334] macvlan1: entered promiscuous mode [ 91.219573][ T8334] macvlan1: left promiscuous mode [ 91.276516][ T8311] Injecting memory failure for pfn 0x155601 at process virtual address 0x20001000 [ 91.284619][ T8311] Memory failure: 0x155601: recovery action for dirty LRU page: Recovered [ 91.411921][ T8357] netlink: 60 bytes leftover after parsing attributes in process `syz.9.744'. [ 91.573229][ T8360] set_capacity_and_notify: 7 callbacks suppressed [ 91.575727][ T8360] loop9: detected capacity change from 0 to 32768 [ 91.619718][ T8360] loop9: p1 < > p3 < p5 p6 p7 > p4[DM] [ 91.628460][ T8360] loop9: p5 size 50331648 extends beyond EOD, truncated [ 91.633085][ T8360] loop9: p7 size 1048576 extends beyond EOD, truncated [ 91.836221][ T8185] udevd[8185]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 91.861473][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 91.866714][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 91.879449][ T8178] udevd[8178]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 91.885631][ T4988] udevd[4988]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 91.942217][ T8389] loop1: detected capacity change from 0 to 256 [ 91.943311][ T8389] FAT-fs (loop1): Directory bread(block 1285) failed [ 91.943331][ T8389] FAT-fs (loop1): Directory bread(block 1286) failed [ 91.943345][ T8389] FAT-fs (loop1): Directory bread(block 1287) failed [ 91.943383][ T8389] FAT-fs (loop1): Directory bread(block 1288) failed [ 92.041942][ T8337] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 92.045715][ T8337] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 92.056701][ T8337] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 92.288399][ T8337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.288479][ T8337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.295717][ T8337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.297828][ T8337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.297888][ T8337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.299734][ T8337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.300273][ T8337] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.301432][ T8337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.304295][ T8337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.307130][ T8350] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 92.482662][ T8421] loop6: detected capacity change from 0 to 8 [ 92.492015][ T8421] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 92.492046][ T8421] unable to read xattr id index table [ 92.504285][ T8421] SQUASHFS error: zlib decompression failed, data probably corrupt [ 92.504329][ T8421] SQUASHFS error: Failed to read block 0x9b: -5 [ 92.504339][ T8421] SQUASHFS error: Unable to read metadata cache entry [99] [ 92.504348][ T8421] SQUASHFS error: Unable to read inode 0x127 [ 92.740555][ T8439] loop8: detected capacity change from 0 to 256 [ 92.941217][ T8435] loop6: detected capacity change from 0 to 8192 [ 92.951496][ T8435] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.954464][ T8442] loop9: detected capacity change from 0 to 512 [ 92.958065][ T8442] EXT4-fs: inline encryption not supported [ 92.959327][ T8442] EXT4-fs: Ignoring removed i_version option [ 92.969518][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.969549][ T8435] FAT-fs (loop6): Filesystem has been set read-only [ 92.969979][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970000][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970014][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970026][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970038][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970049][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970059][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.970069][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.980286][ T8435] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 92.992939][ T8446] loop1: detected capacity change from 0 to 512 [ 92.997201][ T8442] EXT4-fs (loop9): 1 orphan inode deleted [ 92.999309][ T8442] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.102982][ T8450] syzkaller0: entered promiscuous mode [ 93.103078][ T8450] syzkaller0: entered allmulticast mode [ 93.210015][ T8446] xt_CT: No such helper "netbios-ns" [ 93.488612][ T4717] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.583228][ T8472] loop6: detected capacity change from 0 to 1024 [ 93.585826][ T8472] EXT4-fs: Ignoring removed nobh option [ 93.589939][ T8472] EXT4-fs: Ignoring removed orlov option [ 93.595409][ T8472] EXT4-fs warning (device loop6): read_mmp_block:110: Error -117 while reading MMP block 255 [ 93.598453][ T8474] No fuse device found [ 93.760240][ T8489] syzkaller0: entered promiscuous mode [ 93.760339][ T8489] syzkaller0: entered allmulticast mode [ 93.846758][ T8490] x_tables: duplicate underflow at hook 2 [ 93.850452][ T8489] x_tables: duplicate underflow at hook 2 [ 94.037448][ T30] kauditd_printk_skb: 111232 callbacks suppressed [ 94.037484][ T30] audit: type=1400 audit(524381.713:420967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 94.037511][ T30] audit: type=1400 audit(524381.713:420968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 94.037532][ T30] audit: type=1400 audit(524381.713:420969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="disk" dev="devtmpfs" ino=894 [ 94.037551][ T30] audit: type=1400 audit(524381.713:420970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="by-diskseq" dev="devtmpfs" ino=895 [ 94.037568][ T30] audit: type=1400 audit(524381.713:420971): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4986 comm="udevd" name="384" dev="devtmpfs" ino=2367 [ 94.037586][ T30] audit: type=1400 audit(524381.713:420972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 94.037602][ T30] audit: type=1400 audit(524381.713:420973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="/" dev="tmpfs" ino=1 [ 94.037619][ T30] audit: type=1400 audit(524381.713:420974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 94.037635][ T30] audit: type=1400 audit(524381.713:420975): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4986 comm="udevd" name="links" dev="tmpfs" ino=56 [ 94.037652][ T30] audit: type=1400 audit(524381.713:420976): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1122 [ 94.120558][ T8507] syzkaller0: entered promiscuous mode [ 94.121813][ T8507] syzkaller0: entered allmulticast mode [ 94.278619][ T8517] tmpfs: Cannot disable swap on remount [ 94.321015][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.6.773'. [ 94.327612][ T4717] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.328922][ T4717] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.330065][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.407364][ T8517] loop6: detected capacity change from 0 to 1024 [ 94.408086][ T8517] ext4: Unknown parameter 'func' [ 95.506036][ T8532] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 95.520263][ T4727] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.559640][ T8548] loop5: detected capacity change from 0 to 512 [ 95.571319][ T8548] EXT4-fs: Ignoring removed i_version option [ 95.576063][ T8548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.576112][ T8548] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.603719][ T8548] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.780: Failed to acquire dquot type 1 [ 95.603765][ T8548] loop5: lost filesystem error report for type 5 error -117 [ 95.605108][ T8548] EXT4-fs (loop5): 1 truncate cleaned up [ 95.738661][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 95.794296][ T8548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.158774][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.788'. [ 96.163610][ T8581] deleting an unspecified loop device is not supported. [ 96.182087][ T8581] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 96.183924][ T8581] unable to read xattr id index table [ 96.186305][ T8581] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.188182][ T8581] SQUASHFS error: Failed to read block 0x9b: -5 [ 96.189460][ T8581] SQUASHFS error: Unable to read metadata cache entry [99] [ 96.190904][ T8581] SQUASHFS error: Unable to read inode 0x127 [ 96.335718][ T8597] pim6reg: entered allmulticast mode [ 96.388506][ T4727] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.388523][ T4717] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.388547][ T4727] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.427091][ T5108] EXT4-fs unmount: 4 callbacks suppressed [ 96.427132][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 96.541792][ T8611] EXT4-fs: inline encryption not supported [ 96.595047][ T8611] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.604495][ T8611] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.793: Invalid inode bitmap blk 0 in block_group 0 [ 96.607029][ T8611] loop5: lost filesystem error report for type 5 error -117 [ 96.607426][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 96.607455][ C1] EXT4-fs (loop5): initial error at time 524385: ext4_read_inode_bitmap:141 [ 96.607484][ C1] EXT4-fs (loop5): last error at time 524385: ext4_read_inode_bitmap:141 [ 96.613165][ T8611] EXT4-fs (loop5): Remounting filesystem read-only [ 96.613235][ T8611] EXT4-fs (loop5): 1 orphan inode deleted [ 96.613727][ T8611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.631060][ T39] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 96.631099][ T39] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 96.631134][ T39] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.907146][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.005221][ T8637] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 97.048320][ T8643] netlink: 6576 bytes leftover after parsing attributes in process `syz.8.799'. [ 97.062149][ T8634] set_capacity_and_notify: 2 callbacks suppressed [ 97.062408][ T8634] loop1: detected capacity change from 0 to 512 [ 97.064523][ T8634] EXT4-fs: journaled quota format not specified [ 97.126571][ T8651] loop8: detected capacity change from 0 to 1024 [ 97.140123][ T8651] EXT4-fs: Ignoring removed oldalloc option [ 97.143696][ T8651] EXT4-fs: Ignoring removed orlov option [ 97.165568][ T8651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.195065][ T8658] Soft offlining pfn 0x219070 at process virtual address 0x20ffd000 [ 97.196894][ T8658] Soft offline: 0x219070: page already poisoned [ 97.199182][ T8658] Soft offlining pfn 0x219070 at process virtual address 0x20ffe000 [ 97.199214][ T8658] Soft offline: 0x219070: page already poisoned [ 97.226882][ T6878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.286244][ T8671] netlink: 'syz.1.805': attribute type 8 has an invalid length. [ 97.289413][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 97.393137][ T8681] loop1: detected capacity change from 0 to 1024 [ 97.395312][ T8681] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294115331)! [ 97.395337][ T8681] EXT4-fs (loop1): group descriptors corrupted! [ 97.527737][ T3395] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.527775][ T3395] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.587645][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.651173][ T8694] netlink: 'syz.8.810': attribute type 3 has an invalid length. [ 97.651201][ T8694] netlink: 666 bytes leftover after parsing attributes in process `syz.8.810'. [ 97.872598][ T8696] loop8: detected capacity change from 0 to 2048 [ 97.874658][ T8696] ext4: Unknown parameter 'fsmagic' [ 97.956843][ T8702] fuse: Unknown parameter 'roÓmode' [ 98.081348][ T8709] loop8: detected capacity change from 0 to 8192 [ 98.108911][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 98.133629][ T8707] cgroup: No subsys list or none specified [ 98.158550][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.816'. [ 98.240042][ T8721] x_tables: duplicate underflow at hook 1 [ 98.289750][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.824'. [ 98.291577][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.824'. [ 98.330067][ T8733] loop8: detected capacity change from 0 to 128 [ 98.349757][ T8725] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 98.369448][ T8731] netlink: 72 bytes leftover after parsing attributes in process `syz.1.821'. [ 98.468210][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.468252][ T4717] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.470689][ T4718] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.494014][ T8755] loop8: detected capacity change from 0 to 128 [ 98.496092][ T8755] FAT-fs (loop8): bogus logical sector size 657 [ 98.496133][ T8755] FAT-fs (loop8): Can't find a valid FAT filesystem [ 98.630201][ T8766] loop6: detected capacity change from 0 to 512 [ 98.630752][ T8766] EXT4-fs: Ignoring removed oldalloc option [ 98.652646][ T8766] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.834: bad orphan inode 32 [ 98.652683][ T8766] loop6: lost filesystem error report for type 5 error -117 [ 98.653421][ T8766] ext4_test_bit(bit=31, block=4) = 0 [ 98.653441][ T8766] EXT4-fs (loop6): 1 truncate cleaned up [ 98.653927][ T8766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.688347][ T8771] fuse: Bad value for 'fd' [ 98.701161][ T8771] loop8: detected capacity change from 0 to 512 [ 98.753318][ T5171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.801962][ T8778] loop6: detected capacity change from 0 to 256 [ 98.803788][ T8778] vfat: Deprecated parameter 'posix' [ 98.804845][ T8778] FAT-fs: "posix" option is obsolete, not supported now [ 98.848790][ T8776] bridge_slave_0: left allmulticast mode [ 98.848835][ T8776] bridge_slave_0: left promiscuous mode [ 98.848917][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.856821][ T8776] bridge_slave_1: left allmulticast mode [ 98.856852][ T8776] bridge_slave_1: left promiscuous mode [ 98.856940][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.904389][ T8776] bond0: (slave bond_slave_0): Releasing backup interface [ 98.929317][ T8776] bond0: (slave bond_slave_1): Releasing backup interface [ 98.950695][ T8776] team0: Port device team_slave_0 removed [ 98.953230][ T8776] team0: Port device team_slave_1 removed [ 98.955492][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.955525][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.957646][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.957658][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.959273][ T8776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.048107][ T30] kauditd_printk_skb: 90002 callbacks suppressed [ 99.048158][ T30] audit: type=1400 audit(524387.734:457725): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4347 comm="udevd" name="queue" dev="tmpfs" ino=5915 [ 99.048185][ T30] audit: type=1400 audit(524387.734:457726): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8791 comm="syz.6.842" name="newroot" dev="tmpfs" ino=2 [ 99.048205][ T30] audit: type=1400 audit(524387.734:457727): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8791 comm="syz.6.842" name="/" dev="devtmpfs" ino=1 [ 99.048224][ T30] audit: type=1400 audit(524387.734:457728): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4347 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=5915 [ 99.048242][ T30] audit: type=1400 audit(524387.734:457729): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8791 comm="syz.6.842" name="net" dev="devtmpfs" ino=690 [ 99.048262][ T30] audit: type=1400 audit(524387.734:457730): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4347 comm="udevd" name="queue" dev="tmpfs" ino=5915 [ 99.048281][ T30] audit: type=1400 audit(524387.734:457731): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=8791 comm="syz.6.842" name="tun" dev="devtmpfs" ino=691 [ 99.048298][ T30] audit: type=1400 audit(524387.734:457732): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8791 comm="syz.6.842" path="/dev/net/tun" dev="devtmpfs" ino=691 [ 99.048316][ T30] audit: type=1400 audit(524387.734:457733): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 99.048333][ T30] audit: type=1400 audit(524387.734:457734): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4347 comm="udevd" name="/" dev="tmpfs" ino=1 [ 99.050750][ T8776] team0: Port device xfrm0 added [ 99.498943][ T8807] binder: Bad value for 'max' [ 99.519359][ T8803] overlayfs: failed to get inode (-116) [ 99.519804][ T8803] overlayfs: failed to get inode (-116) [ 99.556665][ T8809] ext4: Unknown parameter 'H' [ 99.576805][ T6878] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 99.577078][ T6878] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 99.686202][ T8818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.701596][ T8818] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #12: block 2: comm syz.1.850: lblock 0 mapped to illegal pblock 2 (length 1) [ 99.740009][ T8826] syzkaller0: entered promiscuous mode [ 99.740045][ T8826] syzkaller0: entered allmulticast mode [ 99.781473][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.516498][ T8847] bridge1: entered promiscuous mode [ 100.788505][ T4715] atkbd serio0: keyboard reset failed on [ 101.519956][ T8887] __nla_validate_parse: 4 callbacks suppressed [ 101.521512][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.872'. [ 101.541985][ T8891] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 101.543415][ T8891] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 101.546456][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 101.546676][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 101.627098][ T8896] nfs: Unknown parameter 'protÑo' [ 101.639033][ T8896] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 101.762130][ T3824] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 101.860556][ T8902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.946668][ T4727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.951497][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.953492][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.955179][ T3824] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.958488][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.959918][ T3824] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.960178][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.054344][ T3824] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.056325][ T3824] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.114696][ T3824] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.116911][ T3824] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.175746][ T8921] Injecting memory failure for pfn 0x150433 at process virtual address 0x20001000 [ 102.180333][ T8921] Memory failure: 0x150433: recovery action for clean LRU page: Recovered [ 102.182295][ T8921] Injecting memory failure for pfn 0x150432 at process virtual address 0x20002000 [ 102.184642][ T8921] Memory failure: 0x150432: recovery action for clean LRU page: Recovered [ 102.186396][ T8921] Injecting memory failure for pfn 0x150431 at process virtual address 0x20003000 [ 102.189090][ T8921] Memory failure: 0x150431: recovery action for clean LRU page: Recovered [ 102.207166][ T3824] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.209685][ T3824] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.315701][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.315848][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.315952][ T8909] bridge_slave_0: entered allmulticast mode [ 102.322952][ T8909] bridge_slave_0: entered promiscuous mode [ 102.326155][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.328964][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.330990][ T8909] bridge_slave_1: entered allmulticast mode [ 102.332606][ T8933] set_capacity_and_notify: 3 callbacks suppressed [ 102.332637][ T8933] loop1: detected capacity change from 0 to 256 [ 102.336550][ T8909] bridge_slave_1: entered promiscuous mode [ 102.374943][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.376058][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.384089][ T8909] team0: Port device team_slave_0 added [ 102.384933][ T8909] team0: Port device team_slave_1 added [ 102.393836][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.393856][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.393874][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.394532][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.394547][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.394565][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.409537][ T8909] hsr_slave_0: entered promiscuous mode [ 102.409876][ T8909] hsr_slave_1: entered promiscuous mode [ 102.410151][ T8909] debugfs: 'hsr0' already exists in 'hsr' [ 102.410163][ T8909] Cannot create hsr debugfs directory [ 102.537225][ T8936] netlink: 32 bytes leftover after parsing attributes in process `syz.9.883'. [ 102.591757][ T8938] GUP no longer grows the stack in syz.5.884 (8938): 20004000-2000a000 (20002000) [ 102.591808][ T8938] CPU: 0 UID: 0 PID: 8938 Comm: syz.5.884 Tainted: G L syzkaller #0 PREEMPT [ 102.591826][ T8938] Tainted: [L]=SOFTLOCKUP [ 102.591830][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 102.591837][ T8938] Call trace: [ 102.591840][ T8938] show_stack+0x2c/0x3c (C) [ 102.591863][ T8938] __dump_stack+0x30/0x40 [ 102.591876][ T8938] dump_stack_lvl+0xd8/0x12c [ 102.591888][ T8938] dump_stack+0x1c/0x28 [ 102.591900][ T8938] gup_vma_lookup+0x1ac/0x1cc [ 102.591911][ T8938] __get_user_pages+0x2a0/0x15b8 [ 102.591922][ T8938] get_user_pages_remote+0x278/0x83c [ 102.591933][ T8938] __access_remote_vm+0x1d8/0x68c [ 102.591942][ T8938] access_remote_vm+0x48/0x60 [ 102.591951][ T8938] proc_pid_cmdline_read+0x4cc/0xa14 [ 102.591960][ T8938] do_loop_readv_writev+0x24c/0x3dc [ 102.591970][ T8938] vfs_readv+0x258/0x520 [ 102.591978][ T8938] do_preadv+0x11c/0x224 [ 102.591986][ T8938] __arm64_sys_preadv+0xac/0xc4 [ 102.591995][ T8938] invoke_syscall+0x98/0x244 [ 102.592007][ T8938] el0_svc_common+0xec/0x23c [ 102.592019][ T8938] do_el0_svc+0x4c/0x5c [ 102.592031][ T8938] el0_svc+0x64/0x260 [ 102.592042][ T8938] el0t_64_sync_handler+0x44/0x104 [ 102.592052][ T8938] el0t_64_sync+0x198/0x19c [ 102.708294][ T8947] loop5: detected capacity change from 0 to 4096 [ 102.713004][ T8947] EXT4-fs (loop5): Test dummy encryption mode enabled [ 102.719259][ T8950] Unable to handle kernel paging request at virtual address dfff800000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.721620][ T8950] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 102.726621][ T8950] Mem abort info: [ 102.727629][ T8950] ESR = 0x0000000096000005 [ 102.727667][ T8950] EC = 0x25: DABT (current EL), IL = 32 bits [ 102.727681][ T8950] SET = 0, FnV = 0 [ 102.727691][ T8950] EA = 0, S1PTW = 0 [ 102.727700][ T8950] FSC = 0x05: level 1 translation fault [ 102.727710][ T8950] Data abort info: [ 102.727718][ T8950] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 102.727728][ T8950] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 102.727738][ T8950] GCS = 0, Overlay = 0, DirtyBit = 0 [ 102.727747][ T8950] [dfff800000000000] address between user and kernel address ranges [ 102.727833][ T8950] Internal error: Oops: 0000000096000005 [#1] SMP [ 102.738450][ T8950] Modules linked in: [ 102.739139][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.6.889 Tainted: G L syzkaller #0 PREEMPT [ 102.740785][ T8950] Tainted: [L]=SOFTLOCKUP [ 102.741512][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 102.743222][ T8950] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.744524][ T8950] pc : dummy_set_selfpowered+0xb0/0x158 [ 102.745408][ T8950] lr : dummy_set_selfpowered+0x80/0x158 [ 102.746317][ T8950] sp : ffff800092f77570 [ 102.746986][ T8950] x29: ffff800092f77570 x28: 1fffe0001b4010a6 x27: 1fffe0001955a98b [ 102.748356][ T8950] x26: dfff800000000000 x25: ffff0000ca620510 x24: ffff0000ca620548 [ 102.749695][ T8950] x23: ffff0000da0086a0 x22: dfff800000000000 x21: 0000000000000003 [ 102.751104][ T8950] x20: 0000000000000000 x19: 0000000000000001 x18: 00000000ffffffff [ 102.752487][ T8950] x17: ffff80008a7d6000 x16: 0000000000000007 x15: ffff800080c9a6e8 [ 102.753924][ T8950] x14: ffff800080c9a568 x13: 0000000000000001 x12: 0000000000000000 [ 102.755214][ T8950] x11: 0000000000000000 x10: 1fffe0001955a98e x9 : 00000000000006a8 [ 102.756529][ T8950] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 102.757846][ T8950] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000835b2f40 [ 102.759200][ T8950] x2 : 0000000000000003 x1 : ffff0000c4e6ba80 x0 : 0000000000000000 [ 102.760666][ T8950] Call trace: [ 102.761202][ T8950] dummy_set_selfpowered+0xb0/0x158 (P) [ 102.762108][ T8950] usb_gadget_set_selfpowered+0x74/0x450 [ 102.763065][ T8950] composite_dev_prepare+0x284/0x2b4 [ 102.763969][ T8950] configfs_composite_bind+0xa0/0x10b8 [ 102.764931][ T8950] gadget_bind_driver+0x274/0x834 [ 102.765744][ T8950] really_probe+0x29c/0x800 [ 102.766530][ T8950] __driver_probe_device+0x1e0/0x350 [ 102.767410][ T8950] driver_probe_device+0x6c/0x19c [ 102.768279][ T8950] __driver_attach+0x168/0x384 [ 102.769084][ T8950] bus_for_each_dev+0x128/0x1b4 [ 102.769873][ T8950] driver_attach+0x50/0x60 [ 102.770654][ T8950] bus_add_driver+0x208/0x500 [ 102.771457][ T8950] driver_register+0x220/0x310 [ 102.772255][ T8950] usb_gadget_register_driver_owner+0xf0/0x25c [ 102.773246][ T8950] gadget_dev_desc_UDC_store+0x164/0x22c [ 102.774244][ T8950] configfs_write_iter+0x27c/0x354 [ 102.775184][ T8950] vfs_write+0x51c/0xa0c [ 102.775909][ T8950] ksys_write+0x12c/0x228 [ 102.776676][ T8950] __arm64_sys_write+0x84/0x98 [ 102.777464][ T8950] invoke_syscall+0x98/0x244 [ 102.778312][ T8950] el0_svc_common+0xec/0x23c [ 102.779107][ T8950] do_el0_svc+0x4c/0x5c [ 102.779876][ T8950] el0_svc+0x64/0x260 [ 102.780538][ T8950] el0t_64_sync_handler+0x44/0x104 [ 102.781396][ T8950] el0t_64_sync+0x198/0x19c [ 102.782172][ T8950] Code: aa1403e0 9757997b f9400294 d343fe88 (38766908) [ 102.783310][ T8950] ---[ end trace 0000000000000000 ]--- [ 103.124166][ T8950] Kernel panic - not syncing: Oops: Fatal exception [ 103.125299][ T8950] SMP: stopping secondary CPUs [ 103.126135][ T8950] Kernel Offset: disabled [ 103.126905][ T8950] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 103.128061][ T8950] Memory Limit: none [ 103.467783][ T8950] Rebooting in 86400 seconds..