last executing test programs: 3m22.51844452s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d07ae1cb6", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x48cf0002, 0x4, 0x0, 0xa, 0x2, 0x0, 0x0, 0x20}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x803, {0x1000000001, 0x0, 0x0, 0xbf5, 0x0, 0x3, {0x0, 0xffffffffffeffffc, 0x9279, 0x0, 0x800000000, 0x7, 0x8, 0x9, 0x100, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xe}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) r4 = syz_open_dev$video(&(0x7f0000000240), 0x7, 0x51) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000008000)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x9}}) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x8, 0xff}, 0x10) 3m22.170146796s ago: executing program 3 (id=156): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') writev(r0, &(0x7f0000003740)=[{&(0x7f0000001440)='d', 0x1}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m22.081855857s ago: executing program 3 (id=159): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") chdir(&(0x7f0000000380)='./file0\x00') fsmount(0xffffffffffffffff, 0x1, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendfile(r0, r0, 0x0, 0x1000000000007) 3m21.785397008s ago: executing program 3 (id=164): r0 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x1d4}, {&(0x7f00000000c0)="03c87b93ad1b7cbcd69932f12e31eb09cf4514152f04a577c53323ad69ef2527f94f35eb0e5b70aa5ca20deb837bfbd859c9e429ee9dd16392d0ac60ae6ab716b064fe494f70d435dbe3a40126c62cb07a25a489afe9641baf54589407af6ef7f1d5da5ecf67577d9b9271eb39457f933a0a9c1084ca72e293903cee0919da1bcf1644ebddd586485984f756d02b687a6d102ce875cac186b984e7e91e025442b44a96f49b9c7c53b52fca4bf74143720d586a8e98291a2134fee64f7dcfe370f1a34f7a7451af806f3bf22b38db", 0xce}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000044000)) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) (async) umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x1d4}, {&(0x7f00000000c0)="03c87b93ad1b7cbcd69932f12e31eb09cf4514152f04a577c53323ad69ef2527f94f35eb0e5b70aa5ca20deb837bfbd859c9e429ee9dd16392d0ac60ae6ab716b064fe494f70d435dbe3a40126c62cb07a25a489afe9641baf54589407af6ef7f1d5da5ecf67577d9b9271eb39457f933a0a9c1084ca72e293903cee0919da1bcf1644ebddd586485984f756d02b687a6d102ce875cac186b984e7e91e025442b44a96f49b9c7c53b52fca4bf74143720d586a8e98291a2134fee64f7dcfe370f1a34f7a7451af806f3bf22b38db", 0xce}], 0x2}, 0x0) (async) 3m21.434601779s ago: executing program 3 (id=167): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) 3m21.164015599s ago: executing program 3 (id=170): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x300, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x300, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@block_validity}, {@nombcache}, {@barrier}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dax_inode}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@block_validity}, {@nombcache}, {@barrier}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dax_inode}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) open$dir(&(0x7f0000000000)='./file1\x00', 0x2e8ac1, 0x65) 3m21.116020737s ago: executing program 32 (id=170): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x300, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x300, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@block_validity}, {@nombcache}, {@barrier}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dax_inode}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@block_validity}, {@nombcache}, {@barrier}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dax_inode}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) open$dir(&(0x7f0000000000)='./file1\x00', 0x2e8ac1, 0x65) 3m18.823011748s ago: executing program 5 (id=171): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) (async) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f036a486899f05f172e4dfe342ae5c0b4d768ffe745a", 0x29}], 0x1, 0x0, 0x0, 0x11000000}, 0xb00}], 0x1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) tkill(r2, 0x12) (async, rerun: 64) ptrace(0x4208, r2) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async, rerun: 32) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) syz_read_part_table(0x608, &(0x7f0000000680)="$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") 3m18.665327321s ago: executing program 5 (id=196): renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 3m15.403622235s ago: executing program 5 (id=245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x81, {0x0, 0x2, 0x0, 0x2, 0x800000, 0xffffffff}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022b8070000200000002000000080061000000000008003f00f3ff6b"], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000060900020073797a31000000000200010073797a310000000068000380640000c00c000180060001000000000054000780090001006d6574610000000044000280080003400000000008003d09876754d6221a52f102400003400000000b080001400000000108000240000000090800034000000002080002400000001c1400000011000100"/173], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100040000000007b2ba95a760fa6d5754277e46bd00ce5969b9c05d", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="000828bd7100ffdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff010000770000000400cc000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)="b72513521a4d416f6c", 0x9) pipe2(&(0x7f0000001440), 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000000100)={0xf0f000, 0xfffffffc, @name="0c3901800000010000000000000000d4ffd14e01a265cb6c8595d9438bf54bb8"}) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m15.075939594s ago: executing program 33 (id=245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x81, {0x0, 0x2, 0x0, 0x2, 0x800000, 0xffffffff}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022b8070000200000002000000080061000000000008003f00f3ff6b"], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000060900020073797a31000000000200010073797a310000000068000380640000c00c000180060001000000000054000780090001006d6574610000000044000280080003400000000008003d09876754d6221a52f102400003400000000b080001400000000108000240000000090800034000000002080002400000001c1400000011000100"/173], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100040000000007b2ba95a760fa6d5754277e46bd00ce5969b9c05d", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="000828bd7100ffdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff010000770000000400cc000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)="b72513521a4d416f6c", 0x9) pipe2(&(0x7f0000001440), 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000000100)={0xf0f000, 0xfffffffc, @name="0c3901800000010000000000000000d4ffd14e01a265cb6c8595d9438bf54bb8"}) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m14.167152631s ago: executing program 4 (id=262): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r1, 0x8b32, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m14.027225579s ago: executing program 4 (id=264): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r4, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m13.001822361s ago: executing program 4 (id=271): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x12, 0x0, {0x6, 0x8}, {0xffff, 0xffff}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = fsopen(&(0x7f0000000540)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000900)={{[0x9, 0x9, 0x9, 0x1]}, 0x0, 0x2, 0x3, 0x0, &(0x7f0000000800)=[{{@_ha_fsid={[0x1, 0xbb8]}, {0x7f, 0xfe1, 0x1, 0x2}}, 0x80, 0x0, 'trusted.overlay.upper\x00'}, {{@align=0x7ff, {0x8, 0xb, 0x400, 0x9}}, 0x6, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0x6, 0x7]}, {0x9201, 0x5, 0x2, 0xfffffffffffffff7}}, 0xf821, 0x0, ':$.\x00'}, {{@align=0x2f129230, {0x7, 0x7, 0x0, 0x400}}, 0x2, 0x0, ']\x00'}, {{@_ha_fsid={[0x5, 0x1ff]}, {0x400, 0xfff9, 0x5, 0x6}}, 0x7, 0x0, 'wlan1\x00'}]}) (async) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000003c0), &(0x7f0000000400)=ANY=[], 0x401, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x50, 0xc8, &(0x7f0000000200)="f93e5f905075a3228602ccba33a29591e99058d912bcea7734e494d108968fb2e1af897a89a16a270b9018e839cba628333d6a1a94545fb0ba091a93af3ca3db6eec4bcdeeef9d3e65a25f1d866a6a96", &(0x7f0000000280)=""/200, 0x6, 0x0, 0xdf, 0x9d, &(0x7f0000000540)="fce4b64d35bff8e1e02a579e43547a31fac7dd6cad7c1bbde77b2a378792b2c46b067504284d88f6003f495ef3c19aae3765be5e6069f6604e33bbb0f8762cbae5ba96dd3ef099f29aae6adceb8702f744e6b1e77bd8297cfe75b54cb3237d5d316690243386993fe39db6a1d66aed333d48f2ee78ace2722d64c00ee0f6b2ccd2fd1b2fe51a7cd703a0f347e0455a5603852ecb90601da21de5cbe766616962a3497d2ae3d51590657ef7e4fc0d0384a1ddb5f001ea3e7bd2d6274ba46b50c92049b946e88e0f0c96babd2e2749820139b75b5afbc1d446de95ac921b520e", &(0x7f0000000640)="9ad96458e06c0d710adfb2bc3432357e47b77e8ab27aa1d792ac2fe906edae9ea4472e1f85d20075b4910f570978741e4dd991af4194cd20083e33be28dec2efcba268da08c1c48fdc660cd73a50eab7f00881b0b98540fa31b8389400aa39763f2d2bc5c8dcfadad53477a838a65a68b0f938f3b15618c7e1da9109daf808983ec549c42af93a0b057899af6b43aec3e8aee9c03b84dab206dd490dca", 0x5, 0x0, 0x9}, 0x50) (async) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x7}, 0x2) ioctl$FE_SET_TONE(r3, 0x6f42, &(0x7f0000000380)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) write$tun(r5, &(0x7f0000000140)={@val={0x0, 0xfbfb}, @val={0x1, 0x1, 0xc, 0x73, 0x6, 0xff80}, @llc={@snap={0x1, 0xab, 'Z', "296cdb", 0x800, "c3c3651839185aeaad55c8f97de3fd07d73f19b1ee81bffbe8cbc2b953849d30718963ddab6f3b74ad77f044799216c291aa93d1884eb199a92f51c848c776e761538a7242128dcca10d096d32656f659ec0558adf5d084a9309d3d595343b94ff9e353228308573213a407c3d6c661e8b870a482e88f8986f2342fddef70751ace5095672d3f832"}}}, 0x9e) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='file ?et/s*?p/* +', 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x60, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3m12.841716007s ago: executing program 4 (id=272): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216645f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c2700000000eff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ffa2c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad686fc5ef7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe822a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8001000000000000f9ffffffffffffff020000000000000002000000000000000200000000000000fc0000000000000000000000060000000600000000000000ffffffffffffffff0000000000000000ff0000000000008004000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000000000000000000000600000000000000370500000000000036"], 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x8028c7, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m12.481305999s ago: executing program 4 (id=281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, r0, 0x2f, 0x8, 0x0, @void, @value=r0}, 0x20) 3m12.14360986s ago: executing program 4 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b350832e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) capset(&(0x7f0000000d40)={0x20080522, r4}, &(0x7f0000000d80)={0x0, 0x400, 0x7, 0x7, 0x991, 0x9}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="12", 0x1}], 0x1}}], 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x9}) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x3}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x1, 0x1, 0x8, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x67, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @lsrr={0x83, 0xb, 0x42, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0xd, [0x4, 0x1, 0x14, 0x1, 0x2, 0x5, 0x7, 0xffff, 0x1000]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800620}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000160000032bbd7000fbdbdf2502784000", @ANYRES32=r8, @ANYBLOB="080008002901000014000600000001000000000040000000ff010000000000000000000008000400ac1e000108000a00030000000800090058160000"], 0x54}, 0x1, 0x0, 0x0, 0x4004890}, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004500001c00000000001190780000000d0000000000004e2000089078"], 0x0) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) r9 = syz_io_uring_setup(0x369e, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x7, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r13) sendmsg$NL802154_CMD_DEL_SEC_DEV(r13, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="070529bd7000fcdbdf251b00000010002e800c0005000201aaaaaaaaaaaa0c00060001"], 0x30}}, 0x40) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="0000010000000000", 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m11.994910939s ago: executing program 34 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000d600f7ff000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf902126ca2ec1589f1423ae3a655121"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) capset(&(0x7f0000000d40)={0x20080522, r4}, &(0x7f0000000d80)={0x0, 0x400, 0x7, 0x7, 0x991, 0x9}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="12", 0x1}], 0x1}}], 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x9}) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x3}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x1, 0x1, 0x8, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x67, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @lsrr={0x83, 0xb, 0x42, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0xd, [0x4, 0x1, 0x14, 0x1, 0x2, 0x5, 0x7, 0xffff, 0x1000]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800620}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000160000032bbd7000fbdbdf2502784000", @ANYRES32=r8, @ANYBLOB="080008002901000014000600000001000000000040000000ff010000000000000000000008000400ac1e000108000a00030000000800090058160000"], 0x54}, 0x1, 0x0, 0x0, 0x4004890}, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004500001c00000000001190780000000d0000000000004e2000089078"], 0x0) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) r9 = syz_io_uring_setup(0x369e, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x7, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r13) sendmsg$NL802154_CMD_DEL_SEC_DEV(r13, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="070529bd7000fcdbdf251b00000010002e800c0005000201aaaaaaaaaaaa0c00060001"], 0x30}}, 0x40) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="0000010000000000", 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m5.267202862s ago: executing program 1 (id=405): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7a, 0xa3, 0x40000023e, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x10000000000002ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x404}, [{0x3, 0x281, 0x70, 0xff5, 0xffffffffffffff80, 0x97, 0x7}]}, 0x78) r2 = fanotify_init(0x200, 0x1000) r3 = dup(r1) fanotify_mark(r2, 0x1, 0x48001028, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='status\x00') pread64(r6, &(0x7f0000000100)=""/31, 0x1f, 0x4) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m5.143349577s ago: executing program 1 (id=408): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@local}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)='*') (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 3m5.115936273s ago: executing program 1 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000130a01010000000000000000030000040900010073797a310000000008000340000000070557e184788d76b327e2953e45ee7130d7aa93c99626f3d957dfd9e2b9c5a32baab9c693b4bbd71d5929a449ff0c00574f40ef2da508780affba4ec171451fd534e4b6fd1d8e64172c9ae9703efe52df05954fb410bcb832de23ca81108a8ab73c51dca57aa500ebeb150c2bb3864462ab329536d283645cf0f4086c6693c0"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x401}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x23, 0x4, 0x69, 0x0, 0x1, 0x80000000, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0xffff, 0x40]}}, {{0x1c, 0x1, {0x7, 0x6, 0x2, 0x6, 0x2, 0x7, 0xfffffff7, 0x9}}, {0x16, 0x2, [0x10, 0x1, 0x4, 0x8001, 0x6, 0x3, 0xe, 0x800, 0x3]}}, {{0xffffffffffffffcb, 0x1, {0x9, 0x5, 0x7, 0x1, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x800421, &(0x7f0000000380)=ANY=[@ANYBLOB='smackfsrloor=,\x00\vK']) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 3m5.03167355s ago: executing program 1 (id=413): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='a', 0x1) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) pipe2$9p(&(0x7f0000000240), 0x80800) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000cc0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x438, 0x328, 0xffffffff, 0x258, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000180), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xffffffff], 'veth1_to_batadv\x00', 'vlan0\x00', {}, {}, 0x2f, 0x80, 0x1, 0x2}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xa4, 0x2, 0x1, 0x4, 0x2080, 0x423}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@local, @icmp_id=0x64, @gre_key=0xd30}}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff00], 'team_slave_0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2c, 0xab, 0x1, 0x27}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x6, 0x1, [0x3, 0xff7f, 0x0, 0x0, 0x3, 0x0, 0x5, 0x7, 0xa848, 0xff, 0xf, 0x9c17, 0x3, 0x3, 0x1], 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x6cf, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa0, 0x90, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x8, "7c2c4acfa93ca0db03dab91b9389177868c4f96871775a00d20911cf6616"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3m4.980408369s ago: executing program 1 (id=415): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3m4.405691857s ago: executing program 1 (id=420): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0xff53, &(0x7f00000000c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0x3ff}}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x6, 0x7, 0x1, 0x8, 0x7f5}, 0x14) 3m4.344919771s ago: executing program 35 (id=420): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0xff53, &(0x7f00000000c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x4}, 0x3ff}}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x6, 0x7, 0x1, 0x8, 0x7f5}, 0x14) 6.92778309s ago: executing program 6 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 5.351300139s ago: executing program 6 (id=936): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) 5.027702828s ago: executing program 6 (id=939): setresuid(0x0, 0xee01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x23, 0x5, 0x0) 4.948870787s ago: executing program 6 (id=941): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.300571553s ago: executing program 8 (id=945): socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) 4.251871003s ago: executing program 0 (id=946): syz_clone(0x88000000, &(0x7f0000000200)="7e33c799be", 0x5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xbbe, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 4.243347566s ago: executing program 8 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) rt_sigqueueinfo(r0, 0x36, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, 0x0, 0x0) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.210778158s ago: executing program 0 (id=948): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.163790493s ago: executing program 6 (id=950): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f00000002c0)={0x40, 0x13, 0x1, "15"}, 0x0, 0x0}) 1.626592977s ago: executing program 8 (id=951): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x40000003) 1.518609793s ago: executing program 7 (id=953): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000300)='nqn=test,transport=tcp,traddr=12', 0x20) 1.407917853s ago: executing program 8 (id=954): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.321478749s ago: executing program 7 (id=956): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, 0x0) 1.298350643s ago: executing program 2 (id=957): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 963.949962ms ago: executing program 6 (id=958): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) setitimer(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) rseq(0x0, 0xfde1, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0xf) 963.746542ms ago: executing program 2 (id=959): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x900) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xffffffe9}, 0x1, 0x0, 0x0, 0x891}, 0x8098) 870.631535ms ago: executing program 2 (id=960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000004079000318400001020301090224000101ff50060904000f01030102ff09217fff570122b10f0905810300"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 620.604242ms ago: executing program 7 (id=961): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) 504.023043ms ago: executing program 7 (id=962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f00000001c0)={0x0, @in={{0x2, 0x2, @broadcast}}, 0xd, 0x3ff, 0x6, 0x400000, 0x95, 0x8}, 0x9c) 461.992712ms ago: executing program 8 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="015e1600e3ff00000000000000000000000000008c482bf9035685e3fd2e6dbe3b0894ca49ff9d07e2e9529ded21d9f44826c7b1f09fec94822e5e05714a5d0a3343d5a6889b52e2d209104672825422"], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 425.854471ms ago: executing program 7 (id=964): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 256.015532ms ago: executing program 7 (id=965): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) 254.69212ms ago: executing program 0 (id=966): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000"], 0x50) 252.40068ms ago: executing program 2 (id=967): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c56000/0x4000)=nil, 0x4000}}) 197.805644ms ago: executing program 0 (id=968): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 152.044925ms ago: executing program 8 (id=969): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904"], 0x0) 151.907108ms ago: executing program 2 (id=970): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000340)={0x11, &(0x7f0000000380)=[{0x13, '\x00', @data=0x13}]}) 129.86891ms ago: executing program 0 (id=971): recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/36, 0x24}, 0x1}], 0x1, 0x20, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 95.137889ms ago: executing program 2 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) 0s ago: executing program 0 (id=973): syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e541ff86db87a41f716be8e1fa0ff8fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 90] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.305: corrupted inode contents [ 55.777804][ T6490] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.305: mark_inode_dirty error [ 55.780193][ T6490] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.305: corrupted inode contents [ 55.784214][ T6490] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.305: mark_inode_dirty error [ 55.789157][ T6490] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 55.801390][ T6490] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.305: corrupted inode contents [ 55.817790][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.916809][ T6513] loop6: detected capacity change from 0 to 512 [ 55.940066][ T6513] EXT4-fs (loop6): 1 orphan inode deleted [ 55.940519][ T6513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.953434][ T49] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.953475][ T49] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1 [ 55.962036][ T13] hsr_slave_0: left promiscuous mode [ 55.963769][ T13] hsr_slave_1: left promiscuous mode [ 55.964085][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.964102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.976056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.976082][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.989056][ T13] veth1_macvtap: left promiscuous mode [ 55.991352][ T13] veth0_macvtap: left promiscuous mode [ 55.993536][ T13] veth1_vlan: left promiscuous mode [ 55.994781][ T13] veth0_vlan: left promiscuous mode [ 56.094676][ T49] IPVS: starting estimator thread 0... [ 56.132329][ T13] team0 (unregistering): Port device team_slave_1 removed [ 56.137144][ T13] team0 (unregistering): Port device team_slave_0 removed [ 56.203743][ T6533] IPVS: using max 58 ests per chain, 139200 per kthread [ 56.253734][ T4395] 8021q: adding VLAN 0 to HW filter on device eth8 [ 56.278224][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.278301][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.278384][ T6400] bridge_slave_0: entered allmulticast mode [ 56.278863][ T6400] bridge_slave_0: entered promiscuous mode [ 56.279642][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.279671][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.279733][ T6400] bridge_slave_1: entered allmulticast mode [ 56.280167][ T6400] bridge_slave_1: entered promiscuous mode [ 56.300018][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.307793][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.346279][ T6400] team0: Port device team_slave_0 added [ 56.349696][ T6400] team0: Port device team_slave_1 added [ 56.369989][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.373591][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.373640][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.374287][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.374301][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.374321][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.411254][ T6400] hsr_slave_0: entered promiscuous mode [ 56.412651][ T6400] hsr_slave_1: entered promiscuous mode [ 56.413972][ T6400] debugfs: 'hsr0' already exists in 'hsr' [ 56.415128][ T6400] Cannot create hsr debugfs directory [ 56.478920][ T6400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.488718][ T6561] ip_tables: iptables: counters copy to user failed while replacing table [ 56.493428][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.495201][ T6400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.501666][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.508312][ T6400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.519622][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.524805][ T6400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.527672][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.554281][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.554335][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.554436][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.554474][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.576103][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.590473][ T4712] Bluetooth: hci4: command tx timeout [ 56.599003][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.608400][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.628123][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.629578][ T6584] netlink: 'syz.1.322': attribute type 34 has an invalid length. [ 56.632251][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 56.642073][ T30] audit: type=1326 audit(56.687:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x0 [ 56.651711][ T6584] bond1: option lacp_strict: invalid value (64) [ 56.654148][ T6584] bond1 (unregistering): Released all slaves [ 56.663199][ T4395] 8021q: adding VLAN 0 to HW filter on device eth9 [ 56.673926][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.673966][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.685048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.685233][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.707349][ T6400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.748477][ T30] audit: type=1326 audit(56.788:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748525][ T30] audit: type=1326 audit(56.788:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748559][ T30] audit: type=1326 audit(56.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748581][ T30] audit: type=1326 audit(56.788:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748599][ T30] audit: type=1326 audit(56.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748614][ T30] audit: type=1326 audit(56.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.748629][ T30] audit: type=1326 audit(56.788:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.767354][ T30] audit: type=1326 audit(56.808:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.321" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd792a8 code=0x7ffc0000 [ 56.793047][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.800777][ T6579] loop2: detected capacity change from 0 to 512 [ 56.805099][ T6579] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 56.861154][ T6579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.861242][ T6579] block device autoloading is deprecated and will be removed. [ 56.861480][ T6579] EXT4-fs (loop2): couldn't read superblock of external journal [ 56.907781][ T6606] input: syz1 as /devices/virtual/input/input5 [ 56.969336][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.019704][ T4395] 8021q: adding VLAN 0 to HW filter on device eth11 [ 57.116696][ T6400] veth0_vlan: entered promiscuous mode [ 57.121204][ T6400] veth1_vlan: entered promiscuous mode [ 57.133262][ T6400] veth0_macvtap: entered promiscuous mode [ 57.134419][ T6400] veth1_macvtap: entered promiscuous mode [ 57.137745][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.145024][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.169950][ T372] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.174143][ T372] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.187948][ T3334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.191781][ T3334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.195010][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.195050][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.206668][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.209088][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.276188][ T6653] TC_ACT_REPEAT abuse ? [ 57.307301][ T4395] 8021q: adding VLAN 0 to HW filter on device eth10 [ 57.438092][ T6664] loop2: detected capacity change from 0 to 512 [ 57.442106][ T6664] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.452875][ T6664] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.329: inode has both inline data and extents flags [ 57.452921][ T6664] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.456335][ T6664] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.329: couldn't read orphan inode 15 (err -117) [ 57.456358][ T6664] loop2: lost filesystem error report for type 5 error -117 [ 57.458609][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 57.458620][ C1] EXT4-fs (loop2): initial error at time 57: ext4_orphan_get:1403: inode 15 [ 57.458637][ C1] EXT4-fs (loop2): last error at time 57: ext4_orphan_get:1408 [ 57.473922][ T6664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.519652][ T6664] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.532160][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.696262][ T4712] Bluetooth: hci3: command tx timeout [ 57.763233][ T6685] netlink: 'syz.6.337': attribute type 1 has an invalid length. [ 57.765099][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.337'. [ 57.769386][ T6685] netlink: 'syz.6.337': attribute type 1 has an invalid length. [ 57.771046][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.337'. [ 57.771128][ T6685] iwpm_send_hello: Unable to send a nlmsg [ 58.069330][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'. [ 58.133636][ T6739] loop1: detected capacity change from 0 to 512 [ 58.139952][ T6739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.150812][ T6739] EXT4-fs (loop1): 1 truncate cleaned up [ 58.151256][ T6739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.158832][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 58.177597][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.220203][ T6753] overlayfs: failed to clone upperpath [ 58.252601][ T6756] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 58.326456][ T6767] fuse: Bad value for 'fd' [ 58.344474][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 58.353104][ T6771] loop1: detected capacity change from 0 to 128 [ 58.356735][ T6771] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.357629][ T6771] netlink: 'syz.1.351': attribute type 12 has an invalid length. [ 58.357640][ T6771] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 58.357650][ T6771] netlink: 148 bytes leftover after parsing attributes in process `syz.1.351'. [ 58.357660][ T6771] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 58.357667][ T6771] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 58.492302][ T4704] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.521131][ T6778] loop1: detected capacity change from 0 to 512 [ 58.522128][ T6778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.534434][ T6778] EXT4-fs (loop1): 1 truncate cleaned up [ 58.569574][ T6785] syzkaller0: entered promiscuous mode [ 58.570856][ T6785] syzkaller0: entered allmulticast mode [ 58.581574][ T6785] tipc: Started in network mode [ 58.581617][ T6785] tipc: Node identity eee2daaf8156, cluster identity 4711 [ 58.581742][ T6785] tipc: Enabled bearer , priority 0 [ 58.589517][ T6789] loop1: detected capacity change from 0 to 512 [ 58.590184][ T6789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.591790][ T6789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 58.591821][ T6789] System zones: 1-12 [ 58.592202][ T6789] EXT4-fs (loop1): 1 truncate cleaned up [ 58.599571][ T6784] tipc: Resetting bearer [ 58.608579][ T6784] tipc: Disabling bearer [ 58.672997][ T4712] Bluetooth: hci4: command tx timeout [ 58.740024][ T6801] loop2: detected capacity change from 0 to 512 [ 58.740978][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.740988][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.758698][ T4712] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 58.763317][ T6801] loop2: detected capacity change from 0 to 512 [ 58.769487][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.769528][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.784488][ T6801] loop2: detected capacity change from 0 to 512 [ 58.788273][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.788317][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.799781][ T6801] loop2: detected capacity change from 0 to 512 [ 58.801846][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.803452][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.807804][ T6801] loop2: detected capacity change from 0 to 512 [ 58.819094][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.819133][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.829527][ T6801] loop2: detected capacity change from 0 to 512 [ 58.836398][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.837683][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.862116][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.863577][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.890933][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.892977][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.910026][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.910061][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.929847][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.929874][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.954141][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.955485][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.989947][ T6801] EXT4-fs (loop2): filesystem is read-only [ 58.989974][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 58.996151][ T6807] tipc: Started in network mode [ 58.998312][ T6807] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 58.998535][ T6807] tipc: Enabled bearer , priority 10 [ 59.007217][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.007247][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.053904][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.053945][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.106957][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.106987][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.161360][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.161398][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.174713][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.174737][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.191928][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.191963][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.227304][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.227334][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.263120][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.263150][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.290183][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.290220][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.339969][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.340000][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.350087][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.350111][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.388230][ T6801] EXT4-fs (loop2): filesystem is read-only [ 59.388262][ T6801] EXT4-fs (loop2): #blocks per group too big: 2113961984 [ 59.769510][ T51] Bluetooth: hci3: command tx timeout [ 60.109028][ T4807] tipc: Node number set to 10005162 [ 60.128629][ T6905] __nla_validate_parse: 2 callbacks suppressed [ 60.128666][ T6905] netlink: 88 bytes leftover after parsing attributes in process `syz.7.380'. [ 60.192795][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.7.381'. [ 60.327936][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.345814][ T6914] bridge0: port 2(bridge_slave_1) entered listening state [ 60.348789][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.380699][ T6940] EXT4-fs: Ignoring removed bh option [ 60.383076][ T6940] EXT4-fs (loop7): Test dummy encryption mode enabled [ 60.383120][ T6940] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.391416][ T6940] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.387: corrupted in-inode xattr: overlapping e_value [ 60.391452][ T6940] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.392255][ T6940] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.387: couldn't read orphan inode 15 (err -117) [ 60.392278][ T6940] loop7: lost filesystem error report for type 5 error -117 [ 60.514498][ T6955] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 60.517475][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 60.555014][ T6962] FAULT_INJECTION: forcing a failure. [ 60.555014][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 60.555050][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.2.392 Tainted: G L syzkaller #0 PREEMPT [ 60.555064][ T6962] Tainted: [L]=SOFTLOCKUP [ 60.555068][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.555073][ T6962] Call trace: [ 60.555076][ T6962] show_stack+0x2c/0x3c (C) [ 60.555097][ T6962] __dump_stack+0x30/0x40 [ 60.555109][ T6962] dump_stack_lvl+0xd8/0x12c [ 60.555120][ T6962] dump_stack+0x1c/0x28 [ 60.555131][ T6962] should_fail_ex+0x41c/0x590 [ 60.555144][ T6962] should_failslab+0xc4/0x120 [ 60.555156][ T6962] __kmalloc_noprof+0x108/0x6c8 [ 60.555165][ T6962] alloc_pipe_info+0x208/0x420 [ 60.555178][ T6962] splice_direct_to_actor+0x63c/0x7a8 [ 60.555189][ T6962] do_splice_direct_actor+0x140/0x228 [ 60.555200][ T6962] do_splice_direct+0x58/0x70 [ 60.555211][ T6962] do_sendfile+0x40c/0x6c0 [ 60.555218][ T6962] __arm64_sys_sendfile64+0x1c4/0x28c [ 60.555226][ T6962] invoke_syscall+0x98/0x244 [ 60.555238][ T6962] el0_svc_common+0xec/0x23c [ 60.555249][ T6962] do_el0_svc+0x4c/0x5c [ 60.555261][ T6962] el0_svc+0x64/0x260 [ 60.555271][ T6962] el0t_64_sync_handler+0x44/0x104 [ 60.555281][ T6962] el0t_64_sync+0x198/0x19c [ 60.560273][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x16 [ 60.726750][ T51] Bluetooth: hci4: command tx timeout [ 60.923010][ T6974] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.021025][ T6985] comedi comedi0: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 61.043634][ T6985] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.399: inode has both inline data and extents flags [ 61.043679][ T6985] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.046334][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 61.046347][ C1] EXT4-fs (loop7): initial error at time 61: ext4_orphan_get:1403: inode 15 [ 61.046364][ C1] EXT4-fs (loop7): last error at time 61: ext4_orphan_get:1403: inode 15 [ 61.058348][ T6985] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.399: couldn't read orphan inode 15 (err -117) [ 61.058394][ T6985] loop7: lost filesystem error report for type 5 error -117 [ 61.161198][ T6985] overlay: filesystem on ./bus not supported as upperdir [ 61.168351][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 61.173804][ T4395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.197352][ T7006] FAULT_INJECTION: forcing a failure. [ 61.197352][ T7006] name fail_futex, interval 1, probability 0, space 0, times 0 [ 61.197391][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.6.403 Tainted: G L syzkaller #0 PREEMPT [ 61.197407][ T7006] Tainted: [L]=SOFTLOCKUP [ 61.197411][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.197416][ T7006] Call trace: [ 61.197420][ T7006] show_stack+0x2c/0x3c (C) [ 61.197440][ T7006] __dump_stack+0x30/0x40 [ 61.197456][ T7006] dump_stack_lvl+0xd8/0x12c [ 61.197467][ T7006] dump_stack+0x1c/0x28 [ 61.197478][ T7006] should_fail_ex+0x41c/0x590 [ 61.197491][ T7006] should_fail+0x14/0x24 [ 61.197502][ T7006] get_futex_key+0x1ec/0x12b0 [ 61.197515][ T7006] futex_wait_setup+0x58/0x674 [ 61.197526][ T7006] __futex_wait+0x108/0x25c [ 61.197537][ T7006] futex_wait+0x108/0x2c0 [ 61.197548][ T7006] do_futex+0x320/0x378 [ 61.197558][ T7006] __arm64_sys_futex+0x2e4/0x418 [ 61.197581][ T7006] invoke_syscall+0x98/0x244 [ 61.197595][ T7006] el0_svc_common+0xec/0x23c [ 61.197606][ T7006] do_el0_svc+0x4c/0x5c [ 61.197617][ T7006] el0_svc+0x64/0x260 [ 61.197628][ T7006] el0t_64_sync_handler+0x44/0x104 [ 61.197638][ T7006] el0t_64_sync+0x198/0x19c [ 61.226264][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x16 [ 61.299485][ T7016] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.406: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 61.299525][ T7016] loop6: lost filesystem error report for type 5 error -117 [ 61.300911][ T7016] EXT4-fs (loop6): 1 orphan inode deleted [ 61.314992][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.317412][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.326035][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.373775][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.411'. [ 61.377200][ T7032] netlink: 100 bytes leftover after parsing attributes in process `syz.1.411'. [ 61.380018][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 61.434345][ T7038] synth uevent: /bus/acpi: unknown uevent action string [ 61.442547][ T7034] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 61.442597][ T7034] FAT-fs (loop6): Filesystem has been set read-only [ 61.485990][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 1024 [ 61.489235][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 8192 [ 61.490164][ T4704] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 61.490890][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 1024 [ 61.491544][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 8192 [ 61.492027][ T4704] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 61.492827][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 1024 [ 61.493069][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 8192 [ 61.493488][ T4704] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 61.494427][ T4704] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path /100/file1/lost+found: directory fails checksum at offset 1024 [ 61.910784][ T4704] bridge0: port 3(syz_tun) entered disabled state [ 61.917802][ T4704] syz_tun (unregistering): left allmulticast mode [ 61.917831][ T4704] syz_tun (unregistering): left promiscuous mode [ 61.917866][ T4704] bridge0: port 3(syz_tun) entered disabled state [ 62.043198][ T7060] fuse: Bad value for 'user_id' [ 62.043222][ T7060] fuse: Bad value for 'user_id' [ 62.094370][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.165072][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.167513][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.169800][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.172049][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.174075][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.184813][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.249200][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.328462][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.387005][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.388515][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.388586][ T7068] bridge_slave_0: entered allmulticast mode [ 62.392153][ T7068] bridge_slave_0: entered promiscuous mode [ 62.394884][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.394925][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.395058][ T7068] bridge_slave_1: entered allmulticast mode [ 62.402213][ T7068] bridge_slave_1: entered promiscuous mode [ 62.419373][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.423243][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.439244][ T7068] team0: Port device team_slave_0 added [ 62.443046][ T7068] team0: Port device team_slave_1 added [ 62.487549][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.489277][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.489325][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.489998][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.490013][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.490042][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.543891][ T13] bridge_slave_1: left allmulticast mode [ 62.543926][ T13] bridge_slave_1: left promiscuous mode [ 62.544004][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.553809][ T13] bridge_slave_0: left allmulticast mode [ 62.553840][ T13] bridge_slave_0: left promiscuous mode [ 62.553909][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.612187][ T7101] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 62.648492][ T7101] EXT4-fs (loop6): 1 truncate cleaned up [ 62.786388][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.799476][ T51] Bluetooth: hci4: command tx timeout [ 62.802388][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.830206][ T13] bond0 (unregistering): Released all slaves [ 62.845719][ T7068] hsr_slave_0: entered promiscuous mode [ 62.847308][ T7068] hsr_slave_1: entered promiscuous mode [ 62.848126][ T7068] debugfs: 'hsr0' already exists in 'hsr' [ 62.848138][ T7068] Cannot create hsr debugfs directory [ 62.858505][ T13] tipc: Left network mode [ 63.094409][ T13] hsr_slave_0: left promiscuous mode [ 63.102803][ T13] hsr_slave_1: left promiscuous mode [ 63.103153][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.103164][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.107003][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.107014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.115326][ T13] veth0_to_bond: left allmulticast mode [ 63.117279][ T13] veth0_to_bond: left promiscuous mode [ 63.117334][ T13] veth1_macvtap: left promiscuous mode [ 63.117355][ T13] veth0_macvtap: left promiscuous mode [ 63.117401][ T13] veth1_vlan: left promiscuous mode [ 63.117435][ T13] veth0_vlan: left promiscuous mode [ 63.294398][ T13] team0 (unregistering): Port device team_slave_1 removed [ 63.302594][ T13] team0 (unregistering): Port device team_slave_0 removed [ 63.435351][ T6174] EXT4-fs unmount: 13 callbacks suppressed [ 63.435601][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.484040][ T7117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 63.484084][ T7117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.234764][ T51] Bluetooth: hci1: command tx timeout [ 64.343919][ T7025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.355919][ T7068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 64.378756][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.379110][ T7068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 64.387125][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.387818][ T7068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 64.396405][ T26] cfg80211: failed to load regulatory.db [ 64.397712][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.398035][ T7068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 64.406344][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.406390][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.432677][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.466174][ T7133] tipc: New replicast peer: 172.20.20.187 [ 64.466586][ T7133] tipc: Enabled bearer , priority 10 [ 64.576172][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.595895][ T7152] vhci_hcd vhci_hcd.0: failed to lookup sock [ 64.598941][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.608882][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.608924][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.617628][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.617669][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.639135][ T7150] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 64.645644][ T7150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 64.645864][ T7164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 64.659616][ T7068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.666974][ T7168] set_capacity_and_notify: 28 callbacks suppressed [ 64.668803][ T7168] loop7: detected capacity change from 0 to 2048 [ 64.680260][ T7150] 9p: Bad value for 'rfdno' [ 64.681638][ T7166] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 64.681807][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.682071][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.685578][ T7147] 9p: Bad value for 'rfdno' [ 64.692331][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.692399][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.692501][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.692556][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.696848][ T7168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.713607][ T7166] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 64.714275][ T7166] bridge0: entered promiscuous mode [ 64.776065][ T7178] loop6: detected capacity change from 0 to 4096 [ 64.793397][ T7178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.793423][ T7178] EXT4-fs (loop6): Test dummy encryption mode enabled [ 64.795515][ T7178] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 64.795549][ T7178] System zones: 0-5 [ 64.800300][ T7178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.825497][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.915616][ T7200] loop7: detected capacity change from 0 to 1024 [ 64.958510][ T7200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.973420][ T4395] 8021q: adding VLAN 0 to HW filter on device eth12 [ 65.255694][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.273603][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.315598][ T7226] netlink: 'syz.6.447': attribute type 30 has an invalid length. [ 65.367756][ T7231] netlink: 'syz.6.447': attribute type 30 has an invalid length. [ 65.404761][ T7068] veth0_vlan: entered promiscuous mode [ 65.407986][ T7068] veth1_vlan: entered promiscuous mode [ 65.418150][ T7068] veth0_macvtap: entered promiscuous mode [ 65.419677][ T7068] veth1_macvtap: entered promiscuous mode [ 65.425823][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.430097][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.437821][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437879][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437906][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437923][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488908][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.488942][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.504496][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.504526][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.580633][ T5836] tipc: Node number set to 1874123439 [ 65.592740][ T4395] 8021q: adding VLAN 0 to HW filter on device eth13 [ 65.688423][ T7276] __nla_validate_parse: 5 callbacks suppressed [ 65.688466][ T7276] netlink: 144 bytes leftover after parsing attributes in process `syz.2.453'. [ 65.693162][ T7277] netlink: 144 bytes leftover after parsing attributes in process `syz.2.453'. [ 65.698173][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 65.847671][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.855084][ T7299] loop2: detected capacity change from 0 to 8192 [ 65.871875][ T7307] nvme_tcp: malformed address passed: %27trsvcid=8009:8009 [ 65.893504][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 65.943022][ T7299] loop2: p1 p3 p4 [ 65.943054][ T7299] loop2: partition table partially beyond EOD, truncated [ 65.943157][ T7299] loop2: p1 start 393225 is beyond EOD, truncated [ 65.943179][ T7299] loop2: p3 start 16777216 is beyond EOD, truncated [ 65.943200][ T7299] loop2: p4 start 4294967295 is beyond EOD, truncated [ 65.984512][ T7326] loop6: detected capacity change from 0 to 256 [ 65.984946][ T7326] vfat: Unknown parameter 'utf8\‰þd¹×>E' [ 66.000345][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 66.028616][ T7326] tap0: tun_chr_ioctl cmd 35108 [ 66.044656][ T4395] 8021q: adding VLAN 0 to HW filter on device eth15 [ 66.186360][ T7351] netlink: 'syz.6.468': attribute type 1 has an invalid length. [ 66.207457][ T7351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.209113][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.242049][ T7351] bond1: (slave geneve2): making interface the new active one [ 66.248395][ T7351] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 66.307990][ T4395] 8021q: adding VLAN 0 to HW filter on device eth14 [ 66.322032][ T51] Bluetooth: hci1: command tx timeout [ 66.533799][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.6.472'. [ 66.534307][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.472'. [ 66.534369][ T7385] netlink: 64 bytes leftover after parsing attributes in process `syz.6.472'. [ 66.777946][ T7396] loop2: detected capacity change from 0 to 1024 [ 66.779987][ T7396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.780162][ T7396] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.787113][ T7396] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.475: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.789779][ T7391] FAULT_INJECTION: forcing a failure. [ 66.789779][ T7391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.789796][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.8.474 Tainted: G L syzkaller #0 PREEMPT [ 66.789808][ T7391] Tainted: [L]=SOFTLOCKUP [ 66.789812][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.789817][ T7391] Call trace: [ 66.789819][ T7391] show_stack+0x2c/0x3c (C) [ 66.789840][ T7391] __dump_stack+0x30/0x40 [ 66.789853][ T7391] dump_stack_lvl+0xd8/0x12c [ 66.789869][ T7391] dump_stack+0x1c/0x28 [ 66.789884][ T7391] should_fail_ex+0x41c/0x590 [ 66.789898][ T7391] should_fail_alloc_page+0xec/0x10c [ 66.789911][ T7391] prepare_alloc_pages+0x194/0x484 [ 66.789920][ T7391] __alloc_frozen_pages_noprof+0x180/0x648 [ 66.789928][ T7391] alloc_pages_mpol+0x1fc/0x3d0 [ 66.789940][ T7391] folio_alloc_mpol_noprof+0x4c/0x248 [ 66.789949][ T7391] vma_alloc_folio_noprof+0x100/0x1dc [ 66.789959][ T7391] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 66.789971][ T7391] folio_prealloc+0x3c/0x1b0 [ 66.789983][ T7391] do_pte_missing+0x1bd0/0x2a28 [ 66.789996][ T7391] handle_mm_fault+0x1534/0x2bec [ 66.790008][ T7391] do_page_fault+0x4b0/0xb88 [ 66.790019][ T7391] do_translation_fault+0xc4/0x114 [ 66.790030][ T7391] do_mem_abort+0x70/0x194 [ 66.790040][ T7391] el1_abort+0x50/0x74 [ 66.790050][ T7391] el1h_64_sync_handler+0xdc/0x130 [ 66.790060][ T7391] el1h_64_sync+0x6c/0x70 [ 66.790069][ T7391] arch_do_signal_or_restart+0x820/0x444c (P) [ 66.790081][ T7391] exit_to_user_mode_loop+0x70/0x17c [ 66.790093][ T7391] el0_svc+0x18c/0x260 [ 66.790103][ T7391] el0t_64_sync_handler+0x44/0x104 [ 66.790113][ T7391] el0t_64_sync+0x198/0x19c [ 66.829050][ T7396] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.830306][ T7396] __quota_error: 340 callbacks suppressed [ 66.833352][ T7396] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 66.835077][ T7396] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.475: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.837848][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.837871][ C0] EXT4-fs (loop2): initial error at time 66: ext4_map_blocks:790: inode 3: block 2 [ 66.837897][ C0] EXT4-fs (loop2): last error at time 66: ext4_map_blocks:790: inode 3: block 2 [ 66.843155][ T7396] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.843323][ T7396] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 66.847576][ T7396] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.475: Failed to acquire dquot type 0 [ 66.850363][ T7396] loop2: lost filesystem error report for type 5 error -117 [ 66.850557][ T7396] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 66.854261][ T7396] loop2: lost filesystem error report for type 5 error -117 [ 66.854476][ T7396] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.475: mark_inode_dirty error [ 66.859337][ T7396] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.859496][ T7396] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 66.865298][ T7396] EXT4-fs (loop2): 1 orphan inode deleted [ 66.867441][ T7396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.871158][ T13] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.875619][ T13] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 66.877334][ T13] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 66.879112][ T7401] loop8: detected capacity change from 0 to 512 [ 66.931560][ T7401] EXT4-fs: Ignoring removed oldalloc option [ 66.933779][ T7401] ext3: Unknown parameter 'ol' [ 67.014370][ T7411] netlink: 112 bytes leftover after parsing attributes in process `syz.0.479'. [ 67.659224][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.660193][ T49] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.660213][ T49] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.661274][ T49] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 67.661296][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 67.661311][ T49] loop2: lost filesystem error report for type 5 error -117 [ 67.662370][ T4705] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.662386][ T4705] loop2: lost filesystem error report for type 5 error -117 [ 67.663382][ T4705] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 67.663396][ T4705] loop2: lost filesystem error report for type 5 error -117 [ 67.663490][ T4705] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 67.663502][ T4705] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.663640][ T4705] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.663651][ T4705] loop2: lost filesystem error report for type 5 error -117 [ 68.381798][ T51] Bluetooth: hci1: command tx timeout [ 70.455386][ T51] Bluetooth: hci1: command tx timeout [ 125.680482][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.680527][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.760093][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 178.873306][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 187.028836][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.030727][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.110540][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.621711][ T7645] loop6: detected capacity change from 0 to 128 [ 202.656963][ T7644] netlink: 19 bytes leftover after parsing attributes in process `syz.2.484'. [ 202.676121][ T7644] netlink: 19 bytes leftover after parsing attributes in process `syz.2.484'. [ 202.700082][ T7645] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.735740][ T7644] ipvlan2: entered promiscuous mode [ 202.741124][ T7644] team0: Device ipvlan2 failed to register rx_handler [ 202.809231][ T7656] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 202.905102][ T40] IPVS: starting estimator thread 0... [ 202.995816][ T7657] IPVS: using max 47 ests per chain, 112800 per kthread [ 203.049739][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.485'. [ 203.131184][ T7644] loop2: detected capacity change from 0 to 512 [ 203.161234][ T7644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.161280][ T6174] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.182900][ T7644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.484: bg 0: block 443: padding at end of block bitmap is not set [ 203.188569][ T7644] Quota error (device loop2): write_blk: dquota write failed [ 203.190646][ T7644] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 203.190665][ T7644] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.484: Failed to acquire dquot type 1 [ 203.246767][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.300696][ T7677] loop6: detected capacity change from 0 to 4096 [ 203.306431][ T7688] loop8: detected capacity change from 0 to 512 [ 203.313343][ T7677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.343138][ T7688] FAT-fs (loop8): data area starts beyond volume (199892 > 45184) [ 203.343188][ T7688] FAT-fs (loop8): Can't find a valid FAT filesystem [ 203.416778][ T7696] Injecting memory failure for pfn 0x149df0 at process virtual address 0x20000000 [ 203.428172][ T7696] Memory failure: 0x149df0: recovery action for clean LRU page: Recovered [ 203.428238][ T7696] Injecting memory failure for pfn 0x149ee0 at process virtual address 0x20010000 [ 203.428350][ T7696] Memory failure: 0x149ee0: recovery action for clean LRU page: Recovered [ 203.428492][ T7696] Injecting memory failure for pfn 0x14afe0 at process virtual address 0x20020000 [ 203.428538][ T7696] Memory failure: 0x14afe0: recovery action for clean LRU page: Recovered [ 203.428558][ T7696] Injecting memory failure for pfn 0x14b2a0 at process virtual address 0x20030000 [ 203.428600][ T7696] Memory failure: 0x14b2a0: recovery action for clean LRU page: Recovered [ 203.428709][ T7696] Injecting memory failure for pfn 0x14b340 at process virtual address 0x20040000 [ 203.428752][ T7696] Memory failure: 0x14b340: recovery action for clean LRU page: Recovered [ 203.428771][ T7696] Injecting memory failure for pfn 0x10efa0 at process virtual address 0x20050000 [ 203.428812][ T7696] Memory failure: 0x10efa0: recovery action for clean LRU page: Recovered [ 203.428923][ T7696] Injecting memory failure for pfn 0x13af40 at process virtual address 0x20060000 [ 203.431666][ T7696] Memory failure: 0x13af40: recovery action for clean LRU page: Recovered [ 203.432128][ T7696] Injecting memory failure for pfn 0x135240 at process virtual address 0x20070000 [ 203.432210][ T7696] Memory failure: 0x135240: recovery action for clean LRU page: Recovered [ 203.432339][ T7696] Injecting memory failure for pfn 0x12f0e0 at process virtual address 0x20080000 [ 203.432385][ T7696] Memory failure: 0x12f0e0: recovery action for clean LRU page: Recovered [ 203.432405][ T7696] Injecting memory failure for pfn 0x118bf0 at process virtual address 0x20090000 [ 203.432448][ T7696] Memory failure: 0x118bf0: recovery action for clean LRU page: Recovered [ 203.432545][ T7696] Injecting memory failure for pfn 0x14b390 at process virtual address 0x200a0000 [ 203.432588][ T7696] Memory failure: 0x14b390: recovery action for clean LRU page: Recovered [ 203.432607][ T7696] Injecting memory failure for pfn 0x14b3a0 at process virtual address 0x200b0000 [ 203.432648][ T7696] Memory failure: 0x14b3a0: recovery action for clean LRU page: Recovered [ 203.432743][ T7696] Injecting memory failure for pfn 0x14b400 at process virtual address 0x200c0000 [ 203.432785][ T7696] Memory failure: 0x14b400: recovery action for clean LRU page: Recovered [ 203.432803][ T7696] Injecting memory failure for pfn 0x14a420 at process virtual address 0x200d0000 [ 203.432843][ T7696] Memory failure: 0x14a420: recovery action for clean LRU page: Recovered [ 203.432979][ T7696] Injecting memory failure for pfn 0x14a520 at process virtual address 0x200e0000 [ 203.436708][ T7696] Memory failure: 0x14a520: recovery action for clean LRU page: Recovered [ 203.436745][ T7696] Injecting memory failure for pfn 0x14a5a0 at process virtual address 0x200f0000 [ 203.436816][ T7696] Memory failure: 0x14a5a0: recovery action for clean LRU page: Recovered [ 203.436957][ T7696] Injecting memory failure for pfn 0x10e7d0 at process virtual address 0x20100000 [ 203.437002][ T7696] Memory failure: 0x10e7d0: recovery action for clean LRU page: Recovered [ 203.437022][ T7696] Injecting memory failure for pfn 0x125c70 at process virtual address 0x20110000 [ 203.437064][ T7696] Memory failure: 0x125c70: recovery action for clean LRU page: Recovered [ 203.437167][ T7696] Injecting memory failure for pfn 0x125c10 at process virtual address 0x20120000 [ 203.437209][ T7696] Memory failure: 0x125c10: recovery action for clean LRU page: Recovered [ 203.437228][ T7696] Injecting memory failure for pfn 0x13abc0 at process virtual address 0x20130000 [ 203.437269][ T7696] Memory failure: 0x13abc0: recovery action for clean LRU page: Recovered [ 203.439929][ T7696] Injecting memory failure for pfn 0x131720 at process virtual address 0x20140000 [ 203.440002][ T7696] Memory failure: 0x131720: recovery action for clean LRU page: Recovered [ 203.440023][ T7696] Injecting memory failure for pfn 0x14a030 at process virtual address 0x20150000 [ 203.440066][ T7696] Memory failure: 0x14a030: recovery action for clean LRU page: Recovered [ 203.440175][ T7696] Injecting memory failure for pfn 0x14a1e0 at process virtual address 0x20160000 [ 203.440218][ T7696] Memory failure: 0x14a1e0: recovery action for clean LRU page: Recovered [ 203.440236][ T7696] Injecting memory failure for pfn 0x14a230 at process virtual address 0x20170000 [ 203.440278][ T7696] Memory failure: 0x14a230: recovery action for clean LRU page: Recovered [ 203.440375][ T7696] Injecting memory failure for pfn 0x14a260 at process virtual address 0x20180000 [ 203.440417][ T7696] Memory failure: 0x14a260: recovery action for clean LRU page: Recovered [ 203.440435][ T7696] Injecting memory failure for pfn 0x14a140 at process virtual address 0x20190000 [ 203.440476][ T7696] Memory failure: 0x14a140: recovery action for clean LRU page: Recovered [ 203.440571][ T7696] Injecting memory failure for pfn 0x14a160 at process virtual address 0x201a0000 [ 203.440613][ T7696] Memory failure: 0x14a160: recovery action for clean LRU page: Recovered [ 203.440631][ T7696] Injecting memory failure for pfn 0x149d70 at process virtual address 0x201b0000 [ 203.440671][ T7696] Memory failure: 0x149d70: recovery action for clean LRU page: Recovered [ 203.440766][ T7696] Injecting memory failure for pfn 0x149d80 at process virtual address 0x201c0000 [ 203.441930][ T7696] Memory failure: 0x149d80: recovery action for clean LRU page: Recovered [ 203.441956][ T7696] Injecting memory failure for pfn 0x149dc0 at process virtual address 0x201d0000 [ 203.442017][ T7696] Memory failure: 0x149dc0: recovery action for clean LRU page: Recovered [ 203.442128][ T7696] Injecting memory failure for pfn 0x149330 at process virtual address 0x201e0000 [ 203.442173][ T7696] Memory failure: 0x149330: recovery action for clean LRU page: Recovered [ 203.442192][ T7696] Injecting memory failure for pfn 0x149300 at process virtual address 0x201f0000 [ 203.442233][ T7696] Memory failure: 0x149300: recovery action for clean LRU page: Recovered [ 203.442370][ T7696] Injecting memory failure for pfn 0x149b70 at process virtual address 0x20200000 [ 203.442441][ T7696] Memory failure: 0x149b70: recovery action for clean LRU page: Recovered [ 203.442460][ T7696] Injecting memory failure for pfn 0x149bf0 at process virtual address 0x20210000 [ 203.442501][ T7696] Memory failure: 0x149bf0: recovery action for clean LRU page: Recovered [ 203.442597][ T7696] Injecting memory failure for pfn 0x149cd0 at process virtual address 0x20220000 [ 203.442638][ T7696] Memory failure: 0x149cd0: recovery action for clean LRU page: Recovered [ 203.442656][ T7696] Injecting memory failure for pfn 0x1103e0 at process virtual address 0x20230000 [ 203.442697][ T7696] Memory failure: 0x1103e0: recovery action for clean LRU page: Recovered [ 203.442791][ T7696] Injecting memory failure for pfn 0x119ed0 at process virtual address 0x20240000 [ 203.442833][ T7696] Memory failure: 0x119ed0: recovery action for clean LRU page: Recovered [ 203.442850][ T7696] Injecting memory failure for pfn 0x135fb0 at process virtual address 0x20250000 [ 203.442998][ T7696] Memory failure: 0x135fb0: recovery action for clean LRU page: Recovered [ 203.443120][ T7696] Injecting memory failure for pfn 0x1498c0 at process virtual address 0x20260000 [ 203.443162][ T7696] Memory failure: 0x1498c0: recovery action for clean LRU page: Recovered [ 203.443179][ T7696] Injecting memory failure for pfn 0x135120 at process virtual address 0x20270000 [ 203.443219][ T7696] Memory failure: 0x135120: recovery action for clean LRU page: Recovered [ 203.443325][ T7696] Injecting memory failure for pfn 0x1497a0 at process virtual address 0x20280000 [ 203.443366][ T7696] Memory failure: 0x1497a0: recovery action for clean LRU page: Recovered [ 203.443384][ T7696] Injecting memory failure for pfn 0x134930 at process virtual address 0x20290000 [ 203.443424][ T7696] Memory failure: 0x134930: recovery action for clean LRU page: Recovered [ 203.443518][ T7696] Injecting memory failure for pfn 0x1491c0 at process virtual address 0x202a0000 [ 203.443559][ T7696] Memory failure: 0x1491c0: recovery action for clean LRU page: Recovered [ 203.443576][ T7696] Injecting memory failure for pfn 0x1492b0 at process virtual address 0x202b0000 [ 203.443617][ T7696] Memory failure: 0x1492b0: recovery action for clean LRU page: Recovered [ 203.443711][ T7696] Injecting memory failure for pfn 0x1121b0 at process virtual address 0x202c0000 [ 203.446577][ T7696] Memory failure: 0x1121b0: recovery action for clean LRU page: Recovered [ 203.446606][ T7696] Injecting memory failure for pfn 0x1169e0 at process virtual address 0x202d0000 [ 203.446729][ T7696] Memory failure: 0x1169e0: recovery action for clean LRU page: Recovered [ 203.446860][ T7696] Injecting memory failure for pfn 0x11c090 at process virtual address 0x202e0000 [ 203.446921][ T7696] Memory failure: 0x11c090: recovery action for clean LRU page: Recovered [ 203.446941][ T7696] Injecting memory failure for pfn 0x148cb0 at process virtual address 0x202f0000 [ 203.446992][ T7696] Memory failure: 0x148cb0: recovery action for clean LRU page: Recovered [ 203.447095][ T7696] Injecting memory failure for pfn 0x13e7e0 at process virtual address 0x20300000 [ 203.448596][ T7696] Memory failure: 0x13e7e0: recovery action for clean LRU page: Recovered [ 203.448621][ T7696] Injecting memory failure for pfn 0x1375b0 at process virtual address 0x20310000 [ 203.448734][ T7696] Memory failure: 0x1375b0: recovery action for clean LRU page: Recovered [ 203.448862][ T7696] Injecting memory failure for pfn 0x1375c0 at process virtual address 0x20320000 [ 203.448911][ T7696] Memory failure: 0x1375c0: recovery action for clean LRU page: Recovered [ 203.448930][ T7696] Injecting memory failure for pfn 0x12fa80 at process virtual address 0x20330000 [ 203.448972][ T7696] Memory failure: 0x12fa80: recovery action for clean LRU page: Recovered [ 203.449075][ T7696] Injecting memory failure for pfn 0x1352b0 at process virtual address 0x20340000 [ 203.449118][ T7696] Memory failure: 0x1352b0: recovery action for clean LRU page: Recovered [ 203.449136][ T7696] Injecting memory failure for pfn 0x10cf80 at process virtual address 0x20350000 [ 203.449178][ T7696] Memory failure: 0x10cf80: recovery action for clean LRU page: Recovered [ 203.464756][ T7696] Injecting memory failure for pfn 0x1164c0 at process virtual address 0x20360000 [ 203.778787][ T4712] Bluetooth: hci3: SCO packet for unknown connection handle 2096 [ 203.783969][ T7696] Memory failure: 0x1164c0: recovery action for clean LRU page: Recovered [ 203.784013][ T7696] Injecting memory failure for pfn 0x133030 at process virtual address 0x20370000 [ 203.868978][ T7704] Injecting memory failure for pfn 0x1179b4 at process virtual address 0x20000000 [ 203.927938][ T7696] Memory failure: 0x133030: recovery action for clean LRU page: Recovered [ 203.930740][ T7704] Memory failure: 0x1179b4: Sending SIGBUS to syz.2.493:7704 due to hardware memory corruption [ 203.932389][ T7696] Injecting memory failure for pfn 0x14b4a0 at process virtual address 0x20380000 [ 203.945150][ T7704] Memory failure: 0x1179b4: Failed to invalidate [ 203.945191][ T7704] Memory failure: 0x1179b4: dirty LRU page still referenced by 1 users [ 203.945225][ T7704] Memory failure: 0x1179b4: recovery action for dirty LRU page: Failed [ 203.959878][ T7696] Memory failure: 0x14b4a0: recovery action for clean LRU page: Recovered [ 203.959942][ T7696] Injecting memory failure for pfn 0x14b4d0 at process virtual address 0x20390000 [ 203.963532][ T7696] Memory failure: 0x14b4d0: recovery action for clean LRU page: Recovered [ 203.963840][ T7696] Injecting memory failure for pfn 0x14b4e0 at process virtual address 0x203a0000 [ 203.967448][ T7696] Memory failure: 0x14b4e0: recovery action for clean LRU page: Recovered [ 203.967500][ T7696] Injecting memory failure for pfn 0x14b500 at process virtual address 0x203b0000 [ 203.971084][ T7696] Memory failure: 0x14b500: recovery action for clean LRU page: Recovered [ 203.972838][ T7696] Injecting memory failure for pfn 0x14b570 at process virtual address 0x203c0000 [ 203.978951][ T7696] Memory failure: 0x14b570: recovery action for clean LRU page: Recovered [ 203.979007][ T7696] Injecting memory failure for pfn 0x133e30 at process virtual address 0x203d0000 [ 203.985885][ T7696] Memory failure: 0x133e30: recovery action for clean LRU page: Recovered [ 203.986116][ T7696] Injecting memory failure for pfn 0x10ca40 at process virtual address 0x203e0000 [ 203.989757][ T7696] Memory failure: 0x10ca40: recovery action for clean LRU page: Recovered [ 203.990422][ T7696] Injecting memory failure for pfn 0x131ce0 at process virtual address 0x203f0000 [ 203.990485][ T7696] Memory failure: 0x131ce0: recovery action for clean LRU page: Recovered [ 203.991394][ T7696] Injecting memory failure for pfn 0x1378c0 at process virtual address 0x20400000 [ 203.991465][ T7696] Memory failure: 0x1378c0: recovery action for clean LRU page: Recovered [ 203.991486][ T7696] Injecting memory failure for pfn 0x137060 at process virtual address 0x20410000 [ 203.991531][ T7696] Memory failure: 0x137060: recovery action for clean LRU page: Recovered [ 203.993797][ T7696] Injecting memory failure for pfn 0x133a10 at process virtual address 0x20420000 [ 203.993873][ T7696] Memory failure: 0x133a10: recovery action for clean LRU page: Recovered [ 203.993899][ T7696] Injecting memory failure for pfn 0x12f2c0 at process virtual address 0x20430000 [ 203.993949][ T7696] Memory failure: 0x12f2c0: recovery action for clean LRU page: Recovered [ 203.994074][ T7696] Injecting memory failure for pfn 0x110f30 at process virtual address 0x20440000 [ 203.994118][ T7696] Memory failure: 0x110f30: recovery action for clean LRU page: Recovered [ 203.994137][ T7696] Injecting memory failure for pfn 0x10f840 at process virtual address 0x20450000 [ 203.997821][ T7696] Memory failure: 0x10f840: recovery action for clean LRU page: Recovered [ 203.997971][ T7696] Injecting memory failure for pfn 0x119dd0 at process virtual address 0x20460000 [ 203.998018][ T7696] Memory failure: 0x119dd0: recovery action for clean LRU page: Recovered [ 203.998039][ T7696] Injecting memory failure for pfn 0x13a970 at process virtual address 0x20470000 [ 203.998082][ T7696] Memory failure: 0x13a970: recovery action for clean LRU page: Recovered [ 203.998189][ T7696] Injecting memory failure for pfn 0x133a90 at process virtual address 0x20480000 [ 203.998232][ T7696] Memory failure: 0x133a90: recovery action for clean LRU page: Recovered [ 203.998251][ T7696] Injecting memory failure for pfn 0x13a9e0 at process virtual address 0x20490000 [ 203.998292][ T7696] Memory failure: 0x13a9e0: recovery action for clean LRU page: Recovered [ 203.998388][ T7696] Injecting memory failure for pfn 0x110bb0 at process virtual address 0x204a0000 [ 204.001782][ T7696] Memory failure: 0x110bb0: recovery action for clean LRU page: Recovered [ 204.002152][ T7696] Injecting memory failure for pfn 0x110be0 at process virtual address 0x204b0000 [ 204.002415][ T7696] Memory failure: 0x110be0: recovery action for clean LRU page: Recovered [ 204.002546][ T7696] Injecting memory failure for pfn 0x135ca0 at process virtual address 0x204c0000 [ 204.002592][ T7696] Memory failure: 0x135ca0: recovery action for clean LRU page: Recovered [ 204.002612][ T7696] Injecting memory failure for pfn 0x13dde0 at process virtual address 0x204d0000 [ 204.004353][ T7696] Memory failure: 0x13dde0: recovery action for clean LRU page: Recovered [ 204.004504][ T7696] Injecting memory failure for pfn 0x13de40 at process virtual address 0x204e0000 [ 204.007510][ T7696] Memory failure: 0x13de40: recovery action for clean LRU page: Recovered [ 204.007539][ T7696] Injecting memory failure for pfn 0x1372f0 at process virtual address 0x204f0000 [ 204.007585][ T7696] Memory failure: 0x1372f0: recovery action for clean LRU page: Recovered [ 204.007709][ T7696] Injecting memory failure for pfn 0x119180 at process virtual address 0x20500000 [ 204.007752][ T7696] Memory failure: 0x119180: recovery action for clean LRU page: Recovered [ 204.007771][ T7696] Injecting memory failure for pfn 0x137730 at process virtual address 0x20510000 [ 204.007813][ T7696] Memory failure: 0x137730: recovery action for clean LRU page: Recovered [ 204.007929][ T7696] Injecting memory failure for pfn 0x12f580 at process virtual address 0x20520000 [ 204.007971][ T7696] Memory failure: 0x12f580: recovery action for clean LRU page: Recovered [ 204.007990][ T7696] Injecting memory failure for pfn 0x135fe0 at process virtual address 0x20530000 [ 204.011848][ T7696] Memory failure: 0x135fe0: recovery action for clean LRU page: Recovered [ 204.012000][ T7696] Injecting memory failure for pfn 0x105930 at process virtual address 0x20540000 [ 204.012098][ T7696] Memory failure: 0x105930: recovery action for clean LRU page: Recovered [ 204.012119][ T7696] Injecting memory failure for pfn 0x137f50 at process virtual address 0x20550000 [ 204.012162][ T7696] Memory failure: 0x137f50: recovery action for clean LRU page: Recovered [ 204.012267][ T7696] Injecting memory failure for pfn 0x108900 at process virtual address 0x20560000 [ 204.012310][ T7696] Memory failure: 0x108900: recovery action for clean LRU page: Recovered [ 204.012329][ T7696] Injecting memory failure for pfn 0x105e70 at process virtual address 0x20570000 [ 204.012371][ T7696] Memory failure: 0x105e70: recovery action for clean LRU page: Recovered [ 204.014472][ T7696] Injecting memory failure for pfn 0x117170 at process virtual address 0x20580000 [ 204.015483][ T7696] Memory failure: 0x117170: recovery action for clean LRU page: Recovered [ 204.015512][ T7696] Injecting memory failure for pfn 0x1083c0 at process virtual address 0x20590000 [ 204.016950][ T7696] Memory failure: 0x1083c0: recovery action for clean LRU page: Recovered [ 204.017093][ T7696] Injecting memory failure for pfn 0x118c70 at process virtual address 0x205a0000 [ 204.017141][ T7696] Memory failure: 0x118c70: recovery action for clean LRU page: Recovered [ 204.017162][ T7696] Injecting memory failure for pfn 0x10b7c0 at process virtual address 0x205b0000 [ 204.017205][ T7696] Memory failure: 0x10b7c0: recovery action for clean LRU page: Recovered [ 204.017462][ T7696] Injecting memory failure for pfn 0x1066c0 at process virtual address 0x205c0000 [ 204.017748][ T7696] Memory failure: 0x1066c0: recovery action for clean LRU page: Recovered [ 204.017767][ T7696] Injecting memory failure for pfn 0x1061c0 at process virtual address 0x205d0000 [ 204.017809][ T7696] Memory failure: 0x1061c0: recovery action for clean LRU page: Recovered [ 204.031041][ T7696] Injecting memory failure for pfn 0x110110 at process virtual address 0x205e0000 [ 204.052652][ T7696] Memory failure: 0x110110: recovery action for clean LRU page: Recovered [ 204.052700][ T7696] Injecting memory failure for pfn 0x137930 at process virtual address 0x205f0000 [ 204.071845][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.076644][ T7696] Memory failure: 0x137930: recovery action for clean LRU page: Recovered [ 204.076861][ T7696] Injecting memory failure for pfn 0x14bac0 at process virtual address 0x20600000 [ 204.083358][ T7717] loop7: detected capacity change from 0 to 512 [ 204.086638][ T7696] Memory failure: 0x14bac0: recovery action for clean LRU page: Recovered [ 204.086696][ T7696] Injecting memory failure for pfn 0x14baf0 at process virtual address 0x20610000 [ 204.086841][ T7696] Memory failure: 0x14baf0: recovery action for clean LRU page: Recovered [ 204.086985][ T7696] Injecting memory failure for pfn 0x134550 at process virtual address 0x20620000 [ 204.087034][ T7696] Memory failure: 0x134550: recovery action for clean LRU page: Recovered [ 204.087055][ T7696] Injecting memory failure for pfn 0x14b9b0 at process virtual address 0x20630000 [ 204.087099][ T7696] Memory failure: 0x14b9b0: recovery action for clean LRU page: Recovered [ 204.087204][ T7696] Injecting memory failure for pfn 0x14bd60 at process virtual address 0x20640000 [ 204.087247][ T7696] Memory failure: 0x14bd60: recovery action for clean LRU page: Recovered [ 204.087266][ T7696] Injecting memory failure for pfn 0x14be20 at process virtual address 0x20650000 [ 204.087307][ T7696] Memory failure: 0x14be20: recovery action for clean LRU page: Recovered [ 204.087402][ T7696] Injecting memory failure for pfn 0x14bea0 at process virtual address 0x20660000 [ 204.087444][ T7696] Memory failure: 0x14bea0: recovery action for clean LRU page: Recovered [ 204.087462][ T7696] Injecting memory failure for pfn 0x14bec0 at process virtual address 0x20670000 [ 204.087502][ T7696] Memory failure: 0x14bec0: recovery action for clean LRU page: Recovered [ 204.087599][ T7696] Injecting memory failure for pfn 0x13de90 at process virtual address 0x20680000 [ 204.087640][ T7696] Memory failure: 0x13de90: recovery action for clean LRU page: Recovered [ 204.087658][ T7696] Injecting memory failure for pfn 0x130a30 at process virtual address 0x20690000 [ 204.087698][ T7696] Memory failure: 0x130a30: recovery action for clean LRU page: Recovered [ 204.087800][ T7696] Injecting memory failure for pfn 0x105f20 at process virtual address 0x206a0000 [ 204.087841][ T7696] Memory failure: 0x105f20: recovery action for clean LRU page: Recovered [ 204.087859][ T7696] Injecting memory failure for pfn 0x105710 at process virtual address 0x206b0000 [ 204.087908][ T7696] Memory failure: 0x105710: recovery action for clean LRU page: Recovered [ 204.088003][ T7696] Injecting memory failure for pfn 0x1182a0 at process virtual address 0x206c0000 [ 204.088044][ T7696] Memory failure: 0x1182a0: recovery action for clean LRU page: Recovered [ 204.088062][ T7696] Injecting memory failure for pfn 0x137a90 at process virtual address 0x206d0000 [ 204.088102][ T7696] Memory failure: 0x137a90: recovery action for clean LRU page: Recovered [ 204.088193][ T7696] Injecting memory failure for pfn 0x134cd0 at process virtual address 0x206e0000 [ 204.088235][ T7696] Memory failure: 0x134cd0: recovery action for clean LRU page: Recovered [ 204.088253][ T7696] Injecting memory failure for pfn 0x11bbd0 at process virtual address 0x206f0000 [ 204.088293][ T7696] Memory failure: 0x11bbd0: recovery action for clean LRU page: Recovered [ 204.088388][ T7696] Injecting memory failure for pfn 0x10b330 at process virtual address 0x20700000 [ 204.088429][ T7696] Memory failure: 0x10b330: recovery action for clean LRU page: Recovered [ 204.088447][ T7696] Injecting memory failure for pfn 0x118fb0 at process virtual address 0x20710000 [ 204.088488][ T7696] Memory failure: 0x118fb0: recovery action for clean LRU page: Recovered [ 204.088580][ T7696] Injecting memory failure for pfn 0x1058b0 at process virtual address 0x20720000 [ 204.088622][ T7696] Memory failure: 0x1058b0: recovery action for clean LRU page: Recovered [ 204.088640][ T7696] Injecting memory failure for pfn 0x107090 at process virtual address 0x20730000 [ 204.088681][ T7696] Memory failure: 0x107090: recovery action for clean LRU page: Recovered [ 204.088774][ T7696] Injecting memory failure for pfn 0x105870 at process virtual address 0x20740000 [ 204.088815][ T7696] Memory failure: 0x105870: recovery action for clean LRU page: Recovered [ 204.088833][ T7696] Injecting memory failure for pfn 0x12f7f0 at process virtual address 0x20750000 [ 204.088879][ T7696] Memory failure: 0x12f7f0: recovery action for clean LRU page: Recovered [ 204.088983][ T7696] Injecting memory failure for pfn 0x133f50 at process virtual address 0x20760000 [ 204.089031][ T7696] Memory failure: 0x133f50: recovery action for clean LRU page: Recovered [ 204.089048][ T7696] Injecting memory failure for pfn 0x1087d0 at process virtual address 0x20770000 [ 204.089089][ T7696] Memory failure: 0x1087d0: recovery action for clean LRU page: Recovered [ 204.089182][ T7696] Injecting memory failure for pfn 0x108820 at process virtual address 0x20780000 [ 204.089223][ T7696] Memory failure: 0x108820: recovery action for clean LRU page: Recovered [ 204.089241][ T7696] Injecting memory failure for pfn 0x135200 at process virtual address 0x20790000 [ 204.089281][ T7696] Memory failure: 0x135200: recovery action for clean LRU page: Recovered [ 204.106997][ T7717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 204.107050][ T7717] System zones: 1-12 [ 204.111136][ T7717] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.495: missing EA_INODE flag [ 204.111153][ T7717] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 204.111423][ T7696] Injecting memory failure for pfn 0x11bd60 at process virtual address 0x207a0000 [ 204.111651][ T7696] Memory failure: 0x11bd60: recovery action for clean LRU page: Recovered [ 204.111677][ T7696] Injecting memory failure for pfn 0x116950 at process virtual address 0x207b0000 [ 204.111723][ T7696] Memory failure: 0x116950: recovery action for clean LRU page: Recovered [ 204.111855][ T7696] Injecting memory failure for pfn 0x1381b0 at process virtual address 0x207c0000 [ 204.111915][ T7696] Memory failure: 0x1381b0: recovery action for clean LRU page: Recovered [ 204.111935][ T7696] Injecting memory failure for pfn 0x14bd40 at process virtual address 0x207d0000 [ 204.114688][ T7717] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.495: error while reading EA inode 12 err=-117 [ 204.114707][ T7717] loop7: lost filesystem error report for type 5 error -117 [ 204.116019][ T7696] Memory failure: 0x14bd40: recovery action for clean LRU page: Recovered [ 204.116158][ T7696] Injecting memory failure for pfn 0x14bd80 at process virtual address 0x207e0000 [ 204.116241][ T7696] Memory failure: 0x14bd80: recovery action for clean LRU page: Recovered [ 204.116262][ T7696] Injecting memory failure for pfn 0x130050 at process virtual address 0x207f0000 [ 204.116305][ T7696] Memory failure: 0x130050: recovery action for clean LRU page: Recovered [ 204.116798][ T7696] Injecting memory failure for pfn 0x10f340 at process virtual address 0x20800000 [ 204.116899][ T7696] Memory failure: 0x10f340: recovery action for clean LRU page: Recovered [ 204.116924][ T7696] Injecting memory failure for pfn 0x14b990 at process virtual address 0x20810000 [ 204.116972][ T7696] Memory failure: 0x14b990: recovery action for clean LRU page: Recovered [ 204.117083][ T7696] Injecting memory failure for pfn 0x14bde0 at process virtual address 0x20820000 [ 204.117127][ T7696] Memory failure: 0x14bde0: recovery action for clean LRU page: Recovered [ 204.117146][ T7696] Injecting memory failure for pfn 0x10f170 at process virtual address 0x20830000 [ 204.117188][ T7696] Memory failure: 0x10f170: recovery action for clean LRU page: Recovered [ 204.117290][ T7696] Injecting memory failure for pfn 0x1338d0 at process virtual address 0x20840000 [ 204.117332][ T7696] Memory failure: 0x1338d0: recovery action for clean LRU page: Recovered [ 204.117350][ T7696] Injecting memory failure for pfn 0x115760 at process virtual address 0x20850000 [ 204.117391][ T7696] Memory failure: 0x115760: recovery action for clean LRU page: Recovered [ 204.117575][ T7717] EXT4-fs (loop7): 1 orphan inode deleted [ 204.118037][ T7717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.120673][ T7696] Injecting memory failure for pfn 0x112b70 at process virtual address 0x20860000 [ 204.120816][ T7696] Memory failure: 0x112b70: recovery action for clean LRU page: Recovered [ 204.120839][ T7696] Injecting memory failure for pfn 0x134190 at process virtual address 0x20870000 [ 204.120937][ T7696] Memory failure: 0x134190: recovery action for clean LRU page: Recovered [ 204.121060][ T7696] Injecting memory failure for pfn 0x1371b0 at process virtual address 0x20880000 [ 204.121104][ T7696] Memory failure: 0x1371b0: recovery action for clean LRU page: Recovered [ 204.121123][ T7696] Injecting memory failure for pfn 0x117e90 at process virtual address 0x20890000 [ 204.121165][ T7696] Memory failure: 0x117e90: recovery action for clean LRU page: Recovered [ 204.121263][ T7696] Injecting memory failure for pfn 0x12fa30 at process virtual address 0x208a0000 [ 204.121305][ T7696] Memory failure: 0x12fa30: recovery action for clean LRU page: Recovered [ 204.121323][ T7696] Injecting memory failure for pfn 0x116340 at process virtual address 0x208b0000 [ 204.121364][ T7696] Memory failure: 0x116340: recovery action for clean LRU page: Recovered [ 204.121462][ T7696] Injecting memory failure for pfn 0x133fe0 at process virtual address 0x208c0000 [ 204.121504][ T7696] Memory failure: 0x133fe0: recovery action for clean LRU page: Recovered [ 204.121522][ T7696] Injecting memory failure for pfn 0x12fa60 at process virtual address 0x208d0000 [ 204.121563][ T7696] Memory failure: 0x12fa60: recovery action for clean LRU page: Recovered [ 204.121668][ T7696] Injecting memory failure for pfn 0x118970 at process virtual address 0x208e0000 [ 204.121716][ T7696] Memory failure: 0x118970: recovery action for clean LRU page: Recovered [ 204.121734][ T7696] Injecting memory failure for pfn 0x10b820 at process virtual address 0x208f0000 [ 204.121774][ T7696] Memory failure: 0x10b820: recovery action for clean LRU page: Recovered [ 204.121886][ T7696] Injecting memory failure for pfn 0x117d60 at process virtual address 0x20900000 [ 204.121928][ T7696] Memory failure: 0x117d60: recovery action for clean LRU page: Recovered [ 204.121946][ T7696] Injecting memory failure for pfn 0x130300 at process virtual address 0x20910000 [ 204.130767][ T7696] Memory failure: 0x130300: recovery action for clean LRU page: Recovered [ 204.130917][ T7696] Injecting memory failure for pfn 0x1055d0 at process virtual address 0x20920000 [ 204.131021][ T7696] Memory failure: 0x1055d0: recovery action for clean LRU page: Recovered [ 204.131042][ T7696] Injecting memory failure for pfn 0x12ff70 at process virtual address 0x20930000 [ 204.131086][ T7696] Memory failure: 0x12ff70: recovery action for clean LRU page: Recovered [ 204.131210][ T7696] Injecting memory failure for pfn 0x113db0 at process virtual address 0x20940000 [ 204.131268][ T7696] Memory failure: 0x113db0: recovery action for clean LRU page: Recovered [ 204.131287][ T7696] Injecting memory failure for pfn 0x11bf30 at process virtual address 0x20950000 [ 204.131329][ T7696] Memory failure: 0x11bf30: recovery action for clean LRU page: Recovered [ 204.131425][ T7696] Injecting memory failure for pfn 0x1182e0 at process virtual address 0x20960000 [ 204.131467][ T7696] Memory failure: 0x1182e0: recovery action for clean LRU page: Recovered [ 204.131485][ T7696] Injecting memory failure for pfn 0x11ad30 at process virtual address 0x20970000 [ 204.131526][ T7696] Memory failure: 0x11ad30: recovery action for clean LRU page: Recovered [ 204.131622][ T7696] Injecting memory failure for pfn 0x1159e0 at process virtual address 0x20980000 [ 204.131664][ T7696] Memory failure: 0x1159e0: recovery action for clean LRU page: Recovered [ 204.131681][ T7696] Injecting memory failure for pfn 0x1087a0 at process virtual address 0x20990000 [ 204.131722][ T7696] Memory failure: 0x1087a0: recovery action for clean LRU page: Recovered [ 204.134256][ T7696] Injecting memory failure for pfn 0x138230 at process virtual address 0x209a0000 [ 204.135380][ T7696] Memory failure: 0x138230: recovery action for clean LRU page: Recovered [ 204.135417][ T7696] Injecting memory failure for pfn 0x117400 at process virtual address 0x209b0000 [ 204.139098][ T7696] Memory failure: 0x117400: recovery action for clean LRU page: Recovered [ 204.139237][ T7696] Injecting memory failure for pfn 0x137a60 at process virtual address 0x209c0000 [ 204.139284][ T7696] Memory failure: 0x137a60: recovery action for clean LRU page: Recovered [ 204.139305][ T7696] Injecting memory failure for pfn 0x105630 at process virtual address 0x209d0000 [ 204.139348][ T7696] Memory failure: 0x105630: recovery action for clean LRU page: Recovered [ 204.139450][ T7696] Injecting memory failure for pfn 0x12f9f0 at process virtual address 0x209e0000 [ 204.139493][ T7696] Memory failure: 0x12f9f0: recovery action for clean LRU page: Recovered [ 204.139511][ T7696] Injecting memory failure for pfn 0x104cd0 at process virtual address 0x209f0000 [ 204.139553][ T7696] Memory failure: 0x104cd0: recovery action for clean LRU page: Recovered [ 204.139678][ T7696] Injecting memory failure for pfn 0x11af00 at process virtual address 0x20a00000 [ 204.139735][ T7696] Memory failure: 0x11af00: recovery action for clean LRU page: Recovered [ 204.139753][ T7696] Injecting memory failure for pfn 0x1349e0 at process virtual address 0x20a10000 [ 204.139796][ T7696] Memory failure: 0x1349e0: recovery action for clean LRU page: Recovered [ 204.144039][ T7696] Injecting memory failure for pfn 0x1370c0 at process virtual address 0x20a20000 [ 204.170217][ T7696] Memory failure: 0x1370c0: recovery action for clean LRU page: Recovered [ 204.170261][ T7696] Injecting memory failure for pfn 0x13d160 at process virtual address 0x20a30000 [ 204.170444][ T7696] Memory failure: 0x13d160: recovery action for clean LRU page: Recovered [ 204.170608][ T7696] Injecting memory failure for pfn 0x14b970 at process virtual address 0x20a40000 [ 204.170670][ T7696] Memory failure: 0x14b970: recovery action for clean LRU page: Recovered [ 204.170690][ T7696] Injecting memory failure for pfn 0x14b980 at process virtual address 0x20a50000 [ 204.170733][ T7696] Memory failure: 0x14b980: recovery action for clean LRU page: Recovered [ 204.170846][ T7696] Injecting memory failure for pfn 0x1376e0 at process virtual address 0x20a60000 [ 204.170928][ T7696] Memory failure: 0x1376e0: recovery action for clean LRU page: Recovered [ 204.170949][ T7696] Injecting memory failure for pfn 0x137720 at process virtual address 0x20a70000 [ 204.170992][ T7696] Memory failure: 0x137720: recovery action for clean LRU page: Recovered [ 204.171095][ T7696] Injecting memory failure for pfn 0x14bf70 at process virtual address 0x20a80000 [ 204.171137][ T7696] Memory failure: 0x14bf70: recovery action for clean LRU page: Recovered [ 204.171155][ T7696] Injecting memory failure for pfn 0x14bfe0 at process virtual address 0x20a90000 [ 204.171196][ T7696] Memory failure: 0x14bfe0: recovery action for clean LRU page: Recovered [ 204.171292][ T7696] Injecting memory failure for pfn 0x14bf90 at process virtual address 0x20aa0000 [ 204.171334][ T7696] Memory failure: 0x14bf90: recovery action for clean LRU page: Recovered [ 204.171352][ T7696] Injecting memory failure for pfn 0x14bfa0 at process virtual address 0x20ab0000 [ 204.171393][ T7696] Memory failure: 0x14bfa0: recovery action for clean LRU page: Recovered [ 204.171488][ T7696] Injecting memory failure for pfn 0x14c0c0 at process virtual address 0x20ac0000 [ 204.171530][ T7696] Memory failure: 0x14c0c0: recovery action for clean LRU page: Recovered [ 204.171548][ T7696] Injecting memory failure for pfn 0x13d6d0 at process virtual address 0x20ad0000 [ 204.171589][ T7696] Memory failure: 0x13d6d0: recovery action for clean LRU page: Recovered [ 204.171681][ T7696] Injecting memory failure for pfn 0x13d430 at process virtual address 0x20ae0000 [ 204.171722][ T7696] Memory failure: 0x13d430: recovery action for clean LRU page: Recovered [ 204.171740][ T7696] Injecting memory failure for pfn 0x1370b0 at process virtual address 0x20af0000 [ 204.171780][ T7696] Memory failure: 0x1370b0: recovery action for clean LRU page: Recovered [ 204.171889][ T7696] Injecting memory failure for pfn 0x130100 at process virtual address 0x20b00000 [ 204.171931][ T7696] Memory failure: 0x130100: recovery action for clean LRU page: Recovered [ 204.171949][ T7696] Injecting memory failure for pfn 0x117b40 at process virtual address 0x20b10000 [ 204.171990][ T7696] Memory failure: 0x117b40: recovery action for clean LRU page: Recovered [ 204.172085][ T7696] Injecting memory failure for pfn 0x116c40 at process virtual address 0x20b20000 [ 204.172143][ T7696] Memory failure: 0x116c40: recovery action for clean LRU page: Recovered [ 204.172162][ T7696] Injecting memory failure for pfn 0x12f754 at process virtual address 0x20b30000 [ 204.172191][ T7696] Memory failure: 0x12f754: recovery action for clean LRU page: Recovered [ 204.172200][ T7696] Injecting memory failure for pfn 0x131926 at process virtual address 0x20b34000 [ 204.172225][ T7696] Memory failure: 0x131926: recovery action for clean LRU page: Recovered [ 204.172238][ T7696] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20b36000 [ 204.172246][ T7696] Memory failure: 0x2190ff: unhandlable page. [ 204.172251][ T7696] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 204.178279][ T7681] overlayfs: failed to clone upperpath [ 204.193531][ T7717] fscrypt (loop7, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 204.247797][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.307222][ T7730] 9p: Bad value for 'rfdno' [ 204.356295][ T7740] veth0_to_bond: entered allmulticast mode [ 204.362199][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.8.500'. [ 204.366893][ T7738] loop7: detected capacity change from 0 to 128 [ 204.370586][ T7738] EXT4-fs (loop7): Test dummy encryption mode enabled [ 204.374541][ T7738] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.747256][ T7757] netlink: 76 bytes leftover after parsing attributes in process `syz.8.504'. [ 204.750934][ T26] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 204.754196][ T26] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input7 [ 204.774354][ T7759] fido_id[7759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.785929][ T7758] loop6: detected capacity change from 0 to 512 [ 204.790800][ T7758] EXT4-fs: Mount option(s) incompatible with ext2 [ 204.829731][ T7758] netlink: 72 bytes leftover after parsing attributes in process `syz.6.505'. [ 204.863501][ T7765] loop2: detected capacity change from 0 to 4096 [ 204.870034][ T7765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.342548][ T4712] Bluetooth: hci0: SCO packet for unknown connection handle 2096 [ 205.345808][ T6400] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.460807][ T7791] netlink: 'syz.7.513': attribute type 11 has an invalid length. [ 205.466370][ T7791] loop7: detected capacity change from 0 to 1024 [ 205.468317][ T7791] journal_path: Lookup failure for './file2' [ 205.470167][ T7791] EXT4-fs: error: could not find journal device path [ 205.474503][ T7791] overlayfs: failed to resolve './file0': -2 [ 205.715232][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.744751][ T7802] loop7: detected capacity change from 0 to 512 [ 205.751077][ T7802] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 205.753018][ T7804] vfat: Bad value for 'utf8' [ 205.756831][ T7802] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.516: iget: bad i_size value: 360287970189639680 [ 205.756877][ T7802] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.757432][ T7802] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.516: couldn't read orphan inode 15 (err -117) [ 205.757450][ T7802] loop7: lost filesystem error report for type 5 error -117 [ 205.758361][ T7802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.770560][ T7802] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 205.770646][ T7802] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.516: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 205.890688][ T7807] dvmrp5: entered allmulticast mode [ 206.070870][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.8.519'. [ 206.375563][ T7836] Illegal XDP return value 4294965632 on prog (id 146) dev syz_tun, expect packet loss! [ 206.415555][ T7836] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.427008][ T7836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 206.427057][ T7836] System zones: 1-2, 4-12, 8-8 [ 206.427482][ T7836] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.525: iget: bad i_size value: 38620345925642 [ 206.427496][ T7836] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.427647][ T7836] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.525: couldn't read orphan inode 15 (err -117) [ 206.427659][ T7836] loop2: lost filesystem error report for type 5 error -117 [ 206.428188][ T7836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.437028][ T7836] gretap1: entered promiscuous mode [ 206.450401][ T7836] vhci_hcd vhci_hcd.1: invalid port number 117 [ 206.452943][ T7838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.525: bg 0: block 5: invalid block bitmap [ 206.457674][ T4712] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 206.460284][ T4712] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 206.563129][ T4705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.671904][ T7854] netlink: 'syz.2.528': attribute type 39 has an invalid length. [ 206.996566][ T7859] FAULT_INJECTION: forcing a failure. [ 206.996566][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 207.001083][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.2.530 Tainted: G L syzkaller #0 PREEMPT [ 207.001111][ T7859] Tainted: [L]=SOFTLOCKUP [ 207.001116][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 207.001122][ T7859] Call trace: [ 207.001126][ T7859] show_stack+0x2c/0x3c (C) [ 207.001151][ T7859] __dump_stack+0x30/0x40 [ 207.001164][ T7859] dump_stack_lvl+0xd8/0x12c [ 207.001177][ T7859] dump_stack+0x1c/0x28 [ 207.001188][ T7859] should_fail_ex+0x41c/0x590 [ 207.001201][ T7859] should_failslab+0xc4/0x120 [ 207.001214][ T7859] __kmalloc_noprof+0x108/0x6c8 [ 207.001223][ T7859] tomoyo_encode2+0x10c/0x330 [ 207.001234][ T7859] tomoyo_encode+0x34/0x50 [ 207.001244][ T7859] tomoyo_mount_permission+0x5d0/0x7e4 [ 207.001254][ T7859] tomoyo_sb_mount+0x48/0x60 [ 207.001265][ T7859] security_sb_mount+0xfc/0x308 [ 207.001273][ T7859] path_mount+0xb8/0xa88 [ 207.001284][ T7859] do_mount+0xe8/0x148 [ 207.001295][ T7859] __arm64_sys_mount+0x33c/0x388 [ 207.001306][ T7859] invoke_syscall+0x98/0x244 [ 207.001318][ T7859] el0_svc_common+0xec/0x23c [ 207.001329][ T7859] do_el0_svc+0x4c/0x5c [ 207.001340][ T7859] el0_svc+0x64/0x260 [ 207.001351][ T7859] el0t_64_sync_handler+0x44/0x104 [ 207.001361][ T7859] el0t_64_sync+0x198/0x19c [ 207.225117][ T7863] netlink: 124 bytes leftover after parsing attributes in process `syz.2.532'. [ 207.345906][ T7869] FAULT_INJECTION: forcing a failure. [ 207.345906][ T7869] name failslab, interval 1, probability 0, space 0, times 0 [ 207.345949][ T7869] CPU: 0 UID: 0 PID: 7869 Comm: syz.2.534 Tainted: G L syzkaller #0 PREEMPT [ 207.345962][ T7869] Tainted: [L]=SOFTLOCKUP [ 207.345966][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 207.345972][ T7869] Call trace: [ 207.345975][ T7869] show_stack+0x2c/0x3c (C) [ 207.345994][ T7869] __dump_stack+0x30/0x40 [ 207.346006][ T7869] dump_stack_lvl+0xd8/0x12c [ 207.346018][ T7869] dump_stack+0x1c/0x28 [ 207.346029][ T7869] should_fail_ex+0x41c/0x590 [ 207.346042][ T7869] should_failslab+0xc4/0x120 [ 207.346055][ T7869] __kmalloc_noprof+0x108/0x6c8 [ 207.346064][ T7869] tomoyo_encode2+0x10c/0x330 [ 207.346075][ T7869] tomoyo_encode+0x34/0x50 [ 207.346085][ T7869] tomoyo_realpath_from_path+0x488/0x4dc [ 207.346096][ T7869] tomoyo_check_open_permission+0x1c4/0x394 [ 207.346106][ T7869] tomoyo_file_open+0x78/0xcc [ 207.346117][ T7869] security_file_open+0xbc/0x258 [ 207.346127][ T7869] do_dentry_open+0x2a8/0xfc0 [ 207.346139][ T7869] vfs_open+0x44/0x2dc [ 207.346149][ T7869] path_openat+0x1084/0x18f4 [ 207.346159][ T7869] do_file_open+0x1c8/0x2e8 [ 207.346169][ T7869] do_sys_openat2+0x114/0x1e8 [ 207.346180][ T7869] do_sys_open+0xb0/0xe0 [ 207.346192][ T7869] __arm64_sys_openat+0xa8/0xc4 [ 207.346203][ T7869] invoke_syscall+0x98/0x244 [ 207.346215][ T7869] el0_svc_common+0xec/0x23c [ 207.346227][ T7869] do_el0_svc+0x4c/0x5c [ 207.346238][ T7869] el0_svc+0x64/0x260 [ 207.346249][ T7869] el0t_64_sync_handler+0x44/0x104 [ 207.346259][ T7869] el0t_64_sync+0x198/0x19c [ 207.346273][ T7869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.524909][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.885655][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.885890][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.608891][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.609317][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.770037][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.772693][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.835771][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.573'. [ 209.886557][ T7994] syzkaller0: entered promiscuous mode [ 209.886593][ T7994] syzkaller0: entered allmulticast mode [ 210.392827][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.393029][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.444484][ T8020] No buffer was provided with the request [ 211.012725][ T8057] input: syz1 as /devices/virtual/input/input8 [ 211.085601][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.088703][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.989181][ T8067] Set syz1 is full, maxelem 65536 reached [ 212.121117][ T8089] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 212.266985][ T4712] Bluetooth: Wrong link type (-22) [ 212.514399][ T8116] input: syz0 as /devices/virtual/input/input9 [ 212.721345][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.726397][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.227561][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.229626][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.255125][ T8151] fuse: fd is not a fuse device [ 213.310419][ T8155] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 213.703319][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.703516][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.332575][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.332778][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.749446][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.751990][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.157829][ T8210] FAULT_INJECTION: forcing a failure. [ 215.157829][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 215.157871][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.7.664 Tainted: G L syzkaller #0 PREEMPT [ 215.157886][ T8210] Tainted: [L]=SOFTLOCKUP [ 215.157890][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 215.157897][ T8210] Call trace: [ 215.157900][ T8210] show_stack+0x2c/0x3c (C) [ 215.157921][ T8210] __dump_stack+0x30/0x40 [ 215.157935][ T8210] dump_stack_lvl+0xd8/0x12c [ 215.157947][ T8210] dump_stack+0x1c/0x28 [ 215.157959][ T8210] should_fail_ex+0x41c/0x590 [ 215.157972][ T8210] should_failslab+0xc4/0x120 [ 215.157985][ T8210] kmem_cache_alloc_noprof+0x94/0x5d4 [ 215.157998][ T8210] vm_area_alloc+0x2c/0x144 [ 215.158009][ T8210] mmap_region+0xdf8/0x1c30 [ 215.158020][ T8210] do_mmap+0xb88/0x1104 [ 215.158029][ T8210] vm_mmap_pgoff+0x298/0x46c [ 215.158038][ T8210] ksys_mmap_pgoff+0x364/0x5b4 [ 215.158047][ T8210] __arm64_sys_mmap+0x110/0x12c [ 215.158059][ T8210] invoke_syscall+0x98/0x244 [ 215.158071][ T8210] el0_svc_common+0xec/0x23c [ 215.158082][ T8210] do_el0_svc+0x4c/0x5c [ 215.158094][ T8210] el0_svc+0x64/0x260 [ 215.158104][ T8210] el0t_64_sync_handler+0x44/0x104 [ 215.158115][ T8210] el0t_64_sync+0x198/0x19c [ 215.202869][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.204976][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.291282][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.291484][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.004823][ T8252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.042454][ T8252] md: ram0 does not have a valid v1.2 superblock, not importing! [ 216.481265][ T30] audit: type=1326 audit(216.826:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.481314][ T30] audit: type=1326 audit(216.826:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.486031][ T30] audit: type=1326 audit(216.836:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.486064][ T30] audit: type=1326 audit(216.836:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.501163][ T30] audit: type=1326 audit(216.856:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.501202][ T30] audit: type=1326 audit(216.856:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.501237][ T30] audit: type=1326 audit(216.856:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.506017][ T30] audit: type=1326 audit(216.856:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.506042][ T30] audit: type=1326 audit(216.856:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.506061][ T30] audit: type=1326 audit(216.856:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.8.687" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff85b792a8 code=0x7ffc0000 [ 216.554087][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.554723][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.774991][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.691'. [ 216.935820][ T8284] FAULT_INJECTION: forcing a failure. [ 216.935820][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 216.938220][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.7.695 Tainted: G L syzkaller #0 PREEMPT [ 216.938247][ T8284] Tainted: [L]=SOFTLOCKUP [ 216.938254][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 216.938262][ T8284] Call trace: [ 216.938266][ T8284] show_stack+0x2c/0x3c (C) [ 216.938286][ T8284] __dump_stack+0x30/0x40 [ 216.938302][ T8284] dump_stack_lvl+0xd8/0x12c [ 216.938314][ T8284] dump_stack+0x1c/0x28 [ 216.938325][ T8284] should_fail_ex+0x41c/0x590 [ 216.938338][ T8284] should_failslab+0xc4/0x120 [ 216.938351][ T8284] __kmalloc_node_noprof+0x10c/0x6e4 [ 216.938360][ T8284] load_msg+0x4c/0x270 [ 216.938369][ T8284] do_msgrcv+0x1e0/0x1024 [ 216.938378][ T8284] __arm64_sys_msgrcv+0xd0/0xe8 [ 216.938387][ T8284] invoke_syscall+0x98/0x244 [ 216.938399][ T8284] el0_svc_common+0xec/0x23c [ 216.938410][ T8284] do_el0_svc+0x4c/0x5c [ 216.938422][ T8284] el0_svc+0x64/0x260 [ 216.938433][ T8284] el0t_64_sync_handler+0x44/0x104 [ 216.938443][ T8284] el0t_64_sync+0x198/0x19c [ 217.010213][ T8290] sch_tbf: peakrate 13838072635928411733 is lower than or equals to rate 17817370382448819355 ! [ 217.721536][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.724242][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.776393][ T8310] netlink: 'syz.8.706': attribute type 1 has an invalid length. [ 217.926338][ T7890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.950789][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.951020][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.976714][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.978111][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.979016][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.979381][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.980195][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.012175][ T7890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.132788][ T7890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.202216][ T7890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.375615][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.375711][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.375781][ T8321] bridge_slave_0: entered allmulticast mode [ 218.376466][ T8321] bridge_slave_0: entered promiscuous mode [ 218.396470][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.396520][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.396597][ T8321] bridge_slave_1: entered allmulticast mode [ 218.397082][ T8321] bridge_slave_1: entered promiscuous mode [ 218.415036][ T7890] bridge_slave_1: left allmulticast mode [ 218.415150][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.702381][ T7890] bridge_slave_0: left allmulticast mode [ 218.702417][ T7890] bridge_slave_0: left promiscuous mode [ 218.702523][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.719232][ T7890] bond_slave_0: left promiscuous mode [ 218.719271][ T7890] bond_slave_1: left promiscuous mode [ 218.766885][ T8358] FAULT_INJECTION: forcing a failure. [ 218.766885][ T8358] name failslab, interval 1, probability 0, space 0, times 0 [ 218.766930][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.8.718 Tainted: G L syzkaller #0 PREEMPT [ 218.766951][ T8358] Tainted: [L]=SOFTLOCKUP [ 218.766955][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 218.766961][ T8358] Call trace: [ 218.766964][ T8358] show_stack+0x2c/0x3c (C) [ 218.766985][ T8358] __dump_stack+0x30/0x40 [ 218.767000][ T8358] dump_stack_lvl+0xd8/0x12c [ 218.767011][ T8358] dump_stack+0x1c/0x28 [ 218.767023][ T8358] should_fail_ex+0x41c/0x590 [ 218.767036][ T8358] should_failslab+0xc4/0x120 [ 218.767049][ T8358] __kmalloc_noprof+0x108/0x6c8 [ 218.767060][ T8358] nla_strdup+0xa0/0x148 [ 218.767072][ T8358] nf_tables_newset+0xecc/0x1ae0 [ 218.767086][ T8358] nfnetlink_rcv+0xc8c/0x16ec [ 218.767099][ T8358] netlink_unicast+0x600/0x7f8 [ 218.767108][ T8358] netlink_sendmsg+0x648/0x948 [ 218.767118][ T8358] __sock_sendmsg+0xc8/0x17c [ 218.767127][ T8358] ____sys_sendmsg+0x3d0/0x6c8 [ 218.767136][ T8358] ___sys_sendmsg+0x198/0x224 [ 218.767146][ T8358] __sys_sendmsg+0x158/0x204 [ 218.767155][ T8358] __arm64_sys_sendmsg+0x88/0x9c [ 218.767165][ T8358] invoke_syscall+0x98/0x244 [ 218.767177][ T8358] el0_svc_common+0xec/0x23c [ 218.767189][ T8358] do_el0_svc+0x4c/0x5c [ 218.767200][ T8358] el0_svc+0x64/0x260 [ 218.767211][ T8358] el0t_64_sync_handler+0x44/0x104 [ 218.767221][ T8358] el0t_64_sync+0x198/0x19c [ 219.089791][ T8367] binder: 8366:8367 tried to acquire reference to desc 0, got 1 instead [ 219.091737][ T8367] binder: cannot allocate buffer: no space left [ 219.091798][ T8367] binder: 8366:8367 transaction async to 8366:0 failed 11/29201/-28, code 0 size 0-4294967174 line 3408 [ 219.095737][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.137346][ T7890] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 219.163916][ T7890] bond1 (unregistering): (slave vlan2): Releasing active interface [ 219.178712][ T7890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.211858][ T7890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.224315][ T7890] bond0 (unregistering): Released all slaves [ 219.228599][ T7890] bond1 (unregistering): Released all slaves [ 219.233965][ T7890] bond2 (unregistering): Released all slaves [ 219.240244][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.241514][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.249080][ T8321] team0: Port device team_slave_0 added [ 219.250007][ T8321] team0: Port device team_slave_1 added [ 219.258432][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.7.722'. [ 219.279561][ T4395] 8021q: adding VLAN 0 to HW filter on device eth16 [ 219.280218][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.280293][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.280309][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.283849][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.283861][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.283894][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.305860][ T8321] hsr_slave_0: entered promiscuous mode [ 219.306186][ T8321] hsr_slave_1: entered promiscuous mode [ 219.306434][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 219.306445][ T8321] Cannot create hsr debugfs directory [ 219.314074][ T7890] tipc: Disabling bearer [ 219.320461][ T7890] tipc: Left network mode [ 219.345318][ T8386] set_capacity_and_notify: 2 callbacks suppressed [ 219.345353][ T8386] loop7: detected capacity change from 0 to 1024 [ 219.347286][ T8386] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 219.347340][ T8386] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 219.348014][ T8386] EXT4-fs error (device loop7): ext4_get_journal_inode:5927: inode #32: comm syz.7.724: iget: special inode unallocated [ 219.348034][ T8386] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 219.348146][ T8386] EXT4-fs (loop7): Remounting filesystem read-only [ 219.348198][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 219.348207][ C1] EXT4-fs (loop7): initial error at time 219: ext4_get_journal_inode:5927: inode 32 [ 219.348224][ C1] EXT4-fs (loop7): last error at time 219: ext4_get_journal_inode:5927: inode 32 [ 219.349262][ T8386] EXT4-fs (loop7): no journal found [ 219.349272][ T8386] EXT4-fs (loop7): can't get journal size [ 219.350834][ T8386] EXT4-fs (loop7): filesystem is read-only [ 219.352981][ T8386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 219.497757][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.547233][ T7890] hsr_slave_0: left promiscuous mode [ 219.553134][ T7890] hsr_slave_1: left promiscuous mode [ 219.553436][ T7890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.553454][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.557792][ T7890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.559504][ T8404] loop7: detected capacity change from 0 to 512 [ 219.560931][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.564132][ T8404] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.570938][ T8404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 219.570985][ T8404] System zones: 0-2, 18-18, 34-34 [ 219.572860][ T8404] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.725: bad orphan inode 15 [ 219.572887][ T8404] loop7: lost filesystem error report for type 5 error -117 [ 219.573048][ T8404] ext4_test_bit(bit=14, block=18) = 1 [ 219.573056][ T8404] is_bad_inode(inode)=0 [ 219.573061][ T8404] NEXT_ORPHAN(inode)=2264924160 [ 219.573065][ T8404] max_ino=32 [ 219.573069][ T8404] i_nlink=0 [ 219.573258][ T8404] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.725: corrupted inode contents [ 219.573270][ T8404] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.573461][ T8404] EXT4-fs error (device loop7): ext4_dirty_inode:6731: inode #15: comm syz.7.725: mark_inode_dirty error [ 219.573478][ T8404] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.573761][ T8404] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.725: corrupted inode contents [ 219.573779][ T8404] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.573906][ T8404] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.725: mark_inode_dirty error [ 219.573918][ T8404] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.574034][ T8404] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2965: inode #15: comm syz.7.725: mark inode dirty (error -117) [ 219.574045][ T8404] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.574156][ T8404] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 219.575801][ T8404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.608466][ T7890] veth1_macvtap: left promiscuous mode [ 219.608498][ T7890] veth0_macvtap: left promiscuous mode [ 219.608546][ T7890] veth1_vlan: left promiscuous mode [ 219.608583][ T7890] veth0_vlan: left promiscuous mode [ 219.653099][ T6400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.654153][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 219.784387][ T7890] team0 (unregistering): Port device team_slave_1 removed [ 219.801445][ T7890] team0 (unregistering): Port device team_slave_0 removed [ 219.860131][ T4395] 8021q: adding VLAN 0 to HW filter on device eth18 [ 220.027857][ T4712] Bluetooth: hci0: command tx timeout [ 220.404854][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.739'. [ 220.459547][ T8460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.472691][ T8460] macvlan2: entered promiscuous mode [ 220.472727][ T8460] macvlan2: entered allmulticast mode [ 220.473533][ T8460] bond3: entered promiscuous mode [ 220.474484][ T8460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.508343][ T8460] bond3: left promiscuous mode [ 220.591266][ T8321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.595000][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.596993][ T8321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.607933][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.613800][ T8321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.619958][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.622044][ T8321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.629078][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.631041][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.633559][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.643874][ T8488] netlink: 72 bytes leftover after parsing attributes in process `syz.6.744'. [ 220.745954][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.761588][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.769370][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.769431][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.772235][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.772258][ T7897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.989532][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.007974][ T8321] veth0_vlan: entered promiscuous mode [ 221.012291][ T8321] veth1_vlan: entered promiscuous mode [ 221.029396][ T8321] veth0_macvtap: entered promiscuous mode [ 221.032443][ T8321] veth1_macvtap: entered promiscuous mode [ 221.035851][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.042384][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.048734][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.048949][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.049015][ T7897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.054008][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.110365][ T7890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.112933][ T7890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.115655][ T7890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.117983][ T7890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.120131][ T7897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.121786][ T7897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.192997][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.193194][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.201360][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.201557][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.250276][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.250549][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.414250][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.439814][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.444770][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.576190][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.576235][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.576268][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.576289][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.631289][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.772'. [ 221.663000][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.773'. [ 221.738178][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.776'. [ 221.809134][ T8612] md: ram0 does not have a valid v1.2 superblock, not importing! [ 221.876972][ T8612] md: ram1 does not have a valid v1.2 superblock, not importing! [ 221.966266][ T8635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.780'. [ 222.105664][ T4712] Bluetooth: hci0: command tx timeout [ 222.159195][ T8636] binder: 8634:8636 tried to acquire reference to desc 0, got 1 instead [ 222.161420][ T8636] binder: tried to use weak ref as strong ref [ 222.163088][ T8636] binder: 8634:8636 got transaction with invalid handle, 0 [ 222.164771][ T8636] binder: 8636:8634 translate handle failed [ 222.167037][ T8636] binder: 8634:8636 transaction call to 8634:0 failed 16/29201/-22, code 0 size 72-24 line 3571 [ 222.169928][ T1501] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.329216][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.333021][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.343008][ T8648] netlink: 'syz.7.789': attribute type 4 has an invalid length. [ 222.343037][ T8648] netlink: 240 bytes leftover after parsing attributes in process `syz.7.789'. [ 222.492153][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.6.794'. [ 222.524889][ T8657] xt_policy: output policy not valid in PREROUTING and INPUT [ 222.534555][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.534750][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.117356][ T8672] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 223.354008][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.357276][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.758841][ T8701] FAULT_INJECTION: forcing a failure. [ 223.758841][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 223.761530][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.6.807 Tainted: G L syzkaller #0 PREEMPT [ 223.761552][ T8701] Tainted: [L]=SOFTLOCKUP [ 223.761556][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 223.761563][ T8701] Call trace: [ 223.761566][ T8701] show_stack+0x2c/0x3c (C) [ 223.761590][ T8701] __dump_stack+0x30/0x40 [ 223.761603][ T8701] dump_stack_lvl+0xd8/0x12c [ 223.761615][ T8701] dump_stack+0x1c/0x28 [ 223.761626][ T8701] should_fail_ex+0x41c/0x590 [ 223.761639][ T8701] should_failslab+0xc4/0x120 [ 223.761652][ T8701] __kmalloc_noprof+0x108/0x6c8 [ 223.761660][ T8701] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 223.761669][ T8701] memcg_list_lru_alloc+0xc4/0xf8 [ 223.761677][ T8701] __memcg_slab_post_alloc_hook+0x28c/0x8c0 [ 223.761690][ T8701] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 223.761704][ T8701] __d_alloc+0x50/0x690 [ 223.761713][ T8701] d_alloc_pseudo+0x2c/0xd8 [ 223.761721][ T8701] alloc_path_pseudo+0xe8/0x1d4 [ 223.761730][ T8701] alloc_file_pseudo+0xb0/0x198 [ 223.761738][ T8701] __arm64_sys_memfd_secret+0x160/0x370 [ 223.761748][ T8701] invoke_syscall+0x98/0x244 [ 223.761760][ T8701] el0_svc_common+0xec/0x23c [ 223.761771][ T8701] do_el0_svc+0x4c/0x5c [ 223.761782][ T8701] el0_svc+0x64/0x260 [ 223.761793][ T8701] el0t_64_sync_handler+0x44/0x104 [ 223.761803][ T8701] el0t_64_sync+0x198/0x19c [ 223.866166][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.868275][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.368533][ T4712] Bluetooth: hci0: command tx timeout [ 224.519011][ T8711] psci: CPU1 killed (polled 0 ms) [ 224.674116][ T8720] netlink: 36 bytes leftover after parsing attributes in process `syz.6.815'. [ 225.751466][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 225.751508][ T30] audit: type=1326 audit(226.105:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.0.817" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x0 [ 225.871047][ T7898] Bluetooth: hci5: Frame reassembly failed (-84) [ 225.954589][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.820'. [ 226.186738][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.190987][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.354437][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.355276][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.422498][ T51] Bluetooth: hci0: command tx timeout [ 226.566504][ T8764] bond0: invalid ARP target specified [ 227.941476][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 227.942822][ T4712] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 227.951189][ T8790] nvme_fcloop: unknown parameter or missing value 'wwnn' [ 229.371996][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.374442][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.387906][ T8818] fuse: fd is not a fuse device [ 229.416698][ T8818] 9p: Bad value for 'rfdno' [ 229.834329][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 231.725962][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.871'. [ 236.148599][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.148816][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.458184][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.461304][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.825546][ T8932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.825646][ T8932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.825695][ T8932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 237.835592][ T8932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.835632][ T8932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 237.840993][ T8932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.841038][ T8932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 237.844476][ T8932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.845751][ T8932] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 237.848866][ T8932] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 238.272653][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.272848][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.437122][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.437321][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.471674][ T8973] Bluetooth: MGMT ver 1.23 [ 238.608450][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 240.526189][ T4712] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 240.526788][ T4712] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 240.526835][ T4712] Bluetooth: hci1: command 0x0406 tx timeout [ 240.526869][ T4712] Bluetooth: hci4: command 0x0406 tx timeout [ 240.526896][ T4712] Bluetooth: hci3: command 0x0406 tx timeout [ 240.526926][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.526949][ T4712] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.363401][ T49] IPVS: starting estimator thread 0... [ 241.415139][ T9035] netlink: 128 bytes leftover after parsing attributes in process `syz.2.937'. [ 241.420039][ T9035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.451268][ T9038] IPVS: using max 59 ests per chain, 141600 per kthread [ 242.130172][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.133440][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.232420][ T4712] Bluetooth: hci3: command 0x0406 tx timeout [ 243.232471][ T4712] Bluetooth: hci4: command 0x0406 tx timeout [ 243.232506][ T4712] Bluetooth: hci1: command 0x0406 tx timeout [ 243.235855][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.263360][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.265493][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.100788][ T9088] nvme_tcp: malformed address passed: 12:8009 [ 245.237601][ T867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 245.253993][ T867] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.286140][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.509095][ T9132] syz.6.958 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.552721][ T9132] Bluetooth: hci5: Frame reassembly failed (-84) [ 245.644820][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.645020][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.391678][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.391886][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.453997][ T9165] nvmet: adding nsid 1 to subsystem testsubsys [ 246.475296][ T9165] Unable to handle kernel paging request at virtual address dfff800000000000 [ 246.475330][ T9165] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 246.475354][ T9165] Mem abort info: [ 246.475365][ T9165] ESR = 0x0000000096000005 [ 246.475375][ T9165] EC = 0x25: DABT (current EL), IL = 32 bits [ 246.475387][ T9165] SET = 0, FnV = 0 [ 246.475396][ T9165] EA = 0, S1PTW = 0 [ 246.475405][ T9165] FSC = 0x05: level 1 translation fault [ 246.475414][ T9165] Data abort info: [ 246.475420][ T9165] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 246.475429][ T9165] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 246.475439][ T9165] GCS = 0, Overlay = 0, DirtyBit = 0 [ 246.475447][ T9165] [dfff800000000000] address between user and kernel address ranges [ 246.475534][ T9165] Internal error: Oops: 0000000096000005 [#1] SMP [ 246.489728][ T9165] Modules linked in: [ 246.490381][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.2.972 Tainted: G L syzkaller #0 PREEMPT [ 246.492151][ T9165] Tainted: [L]=SOFTLOCKUP [ 246.492890][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 246.494621][ T9165] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 246.495995][ T9165] pc : strlen+0x28/0x84 [ 246.496751][ T9165] lr : do_getname_kernel+0x2c/0x1f4 [ 246.497687][ T9165] sp : ffff800095007860 [ 246.498406][ T9165] x29: ffff800095007880 x28: ffff0000ef24bec0 x27: ffff8000828a798c [ 246.499788][ T9165] x26: ffff0000cca12e00 x25: 1fffe0001de497c2 x24: dfff800000000000 [ 246.501156][ T9165] x23: 1fffe0001a93090e x22: 00000000fffffff1 x21: 0000000000000000 [ 246.502562][ T9165] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 246.503957][ T9165] x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200004c0 [ 246.505644][ T9165] x14: ffff80008b0df2b0 x13: 0000000000000001 x12: 0000000000000000 [ 246.507242][ T9165] x11: 0000000000000000 x10: dfff800000000000 x9 : 0000000000000000 [ 246.508862][ T9165] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 246.510280][ T9165] x5 : ffff80008ac082d0 x4 : 0000000000000008 x3 : ffff80008289b5f4 [ 246.511745][ T9165] x2 : 0000000000000000 x1 : ffff0000c9180000 x0 : 0000000000000000 [ 246.513226][ T9165] Call trace: [ 246.513878][ T9165] strlen+0x28/0x84 (P) [ 246.514711][ T9165] do_getname_kernel+0x2c/0x1f4 [ 246.515675][ T9165] getname_kernel+0x24/0x34 [ 246.516521][ T9165] filp_open+0x2c/0x60 [ 246.517297][ T9165] nvmet_file_ns_enable+0x88/0x30c [ 246.518217][ T9165] nvmet_ns_enable+0xac/0x4ec [ 246.519050][ T9165] nvmet_ns_enable_store+0xd4/0x170 [ 246.519987][ T9165] configfs_write_iter+0x27c/0x354 [ 246.520915][ T9165] vfs_write+0x51c/0xa0c [ 246.521674][ T9165] ksys_write+0x12c/0x228 [ 246.522435][ T9165] __arm64_sys_write+0x84/0x98 [ 246.523232][ T9165] invoke_syscall+0x98/0x244 [ 246.524046][ T9165] el0_svc_common+0xec/0x23c [ 246.524874][ T9165] do_el0_svc+0x4c/0x5c [ 246.525589][ T9165] el0_svc+0x64/0x260 [ 246.526297][ T9165] el0t_64_sync_handler+0x44/0x104 [ 246.527211][ T9165] el0t_64_sync+0x198/0x19c [ 246.528000][ T9165] Code: aa0003e8 f2fbffea d343fd0b 1200090c (38ea696b) [ 246.529191][ T9165] ---[ end trace 0000000000000000 ]--- [ 246.905412][ T9165] Kernel panic - not syncing: Oops: Fatal exception [ 246.906527][ T9165] Kernel Offset: disabled [ 246.907278][ T9165] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 246.908495][ T9165] Memory Limit: none [ 247.286919][ T9165] Rebooting in 86400 seconds..